Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A45308AC7B8B6721D8B047F6881057483750FDCD98CFE1E6A59B3804FD2A3518/0/3230302e312e38362e302f32342d3234203d3e203134303830.roa
File:                     3230302e312e38362e302f32342d3234203d3e203134303830.roa (raw, json)
Hash identifier:          O8MSlbBSXJaMFPVGjWcyeKxekA5s6FxjqQ2fPiAiudI=
Subject key identifier:   D6:A2:EE:30:57:BA:27:21:89:5D:B3:5A:74:69:DF:CB:CF:6E:0C:DE
Certificate issuer:       /CN=152845E4E3A45AE6EA039DF97CCF007834368F13
Certificate serial:       667CE0ED3AA33913DBF999948A06D59D55E52C3F
Authority key identifier: 15:28:45:E4:E3:A4:5A:E6:EA:03:9D:F9:7C:CF:00:78:34:36:8F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/152845E4E3A45AE6EA039DF97CCF007834368F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A45308AC7B8B6721D8B047F6881057483750FDCD98CFE1E6A59B3804FD2A3518/0/3230302e312e38362e302f32342d3234203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 20:07:24 +0000
ROA not before:           Tue 04 Feb 2025 20:02:24 +0000
ROA not after:            Tue 03 Feb 2026 20:07:24 +0000
asID:                     14080
IP address blocks:        200.1.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A45308AC7B8B6721D8B047F6881057483750FDCD98CFE1E6A59B3804FD2A3518/0/152845E4E3A45AE6EA039DF97CCF007834368F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A45308AC7B8B6721D8B047F6881057483750FDCD98CFE1E6A59B3804FD2A3518/0/152845E4E3A45AE6EA039DF97CCF007834368F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/152845E4E3A45AE6EA039DF97CCF007834368F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7c:e0:ed:3a:a3:39:13:db:f9:99:94:8a:06:d5:9d:55:e5:2c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152845E4E3A45AE6EA039DF97CCF007834368F13
        Validity
            Not Before: Feb  4 20:02:24 2025 GMT
            Not After : Feb  3 20:07:24 2026 GMT
        Subject: CN=D6A2EE3057BA2721895DB35A7469DFCBCF6E0CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3b:68:a0:ab:57:8a:d0:41:7c:c5:95:bb:c1:
                    7f:a4:18:93:0b:6f:81:84:0f:66:d6:df:c8:96:f3:
                    45:a9:9f:58:c7:f1:a5:02:1e:b2:22:70:39:a2:61:
                    ea:ba:24:9b:39:fe:98:9c:c5:09:f4:5e:c0:a9:8e:
                    7c:9f:8d:12:fa:a7:98:4e:9a:e9:f0:68:18:06:92:
                    11:bc:84:2b:50:c8:de:92:de:3e:40:18:94:b9:81:
                    cd:ab:3e:c3:d5:fb:7d:d8:2b:d4:6a:1c:35:18:43:
                    c3:ae:dd:a1:77:96:cd:79:1c:86:31:bd:a9:16:d2:
                    c7:e9:34:0c:fe:d6:9b:d0:ad:58:cb:3e:50:4c:83:
                    06:49:2c:a5:70:d9:3d:d4:f1:cd:04:1d:eb:46:b7:
                    40:9f:ea:ea:b7:34:42:a2:b4:60:d4:be:43:7f:8e:
                    11:4d:ec:a1:43:54:95:85:5c:3d:b6:a0:96:49:66:
                    7a:3c:39:69:51:81:6a:0e:4a:7e:86:e8:7b:d2:c0:
                    9b:36:45:f6:b6:3f:c1:c1:e1:93:c5:3c:df:4d:f0:
                    ac:66:84:f4:e5:84:a6:73:84:4e:43:21:ec:a2:2b:
                    51:52:01:48:4c:4d:e3:3f:e2:fe:7a:b6:29:0f:fe:
                    36:63:e3:3d:72:f3:b1:b2:ed:ff:3b:e0:29:a3:ee:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A2:EE:30:57:BA:27:21:89:5D:B3:5A:74:69:DF:CB:CF:6E:0C:DE
            X509v3 Authority Key Identifier:
                keyid:15:28:45:E4:E3:A4:5A:E6:EA:03:9D:F9:7C:CF:00:78:34:36:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A45308AC7B8B6721D8B047F6881057483750FDCD98CFE1E6A59B3804FD2A3518/0/152845E4E3A45AE6EA039DF97CCF007834368F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/152845E4E3A45AE6EA039DF97CCF007834368F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A45308AC7B8B6721D8B047F6881057483750FDCD98CFE1E6A59B3804FD2A3518/0/3230302e312e38362e302f32342d3234203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:be:82:bd:c6:b3:18:b8:f1:53:4d:52:8f:14:c1:77:8c:54:
         c0:ec:3b:58:9a:c4:ce:33:6b:16:ad:b9:a3:d2:59:36:bd:92:
         43:4e:b8:a5:9d:2c:7a:68:72:a3:3b:fe:54:b0:92:79:25:1c:
         1d:0c:53:5d:24:2e:8d:15:92:8a:b1:39:a8:3b:82:a5:c9:e7:
         1f:c7:4c:73:34:0e:12:8f:59:e4:6e:01:df:9b:6b:ee:55:cf:
         56:38:3c:ed:c5:8b:9c:aa:64:59:96:38:04:b4:a3:58:6f:50:
         42:78:70:92:75:0d:30:26:3f:cf:b5:80:52:87:9d:b7:1b:ef:
         50:20:8a:c3:51:e2:32:27:f2:73:3a:1e:25:eb:da:3b:ea:0e:
         86:a0:21:7c:ce:5d:73:39:81:98:a3:3a:a5:be:cd:1a:fe:3c:
         20:e2:d4:4b:54:19:01:c3:31:83:c8:b4:fe:35:41:42:6c:77:
         f5:20:12:ef:5b:ca:ed:3c:0e:49:24:00:c0:66:a7:a9:04:eb:
         6d:62:97:23:d8:1f:6b:9c:a0:f0:af:e5:b7:45:02:27:e9:db:
         6c:02:ba:87:19:9e:48:5b:32:89:eb:b0:f4:fd:2d:7c:37:03:
         11:5c:60:99:9a:92:3e:87:b3:c8:af:f4:4b:4f:19:e3:55:89:
         cb:d0:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:19:19 2025 by rpki-client