Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3138372e302f32342d3234203d3e20323637373937.roa
File:                     3230302e392e3138372e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          GmGLCJ0kdPewiowkyoVnLRyaIi8ASlKfOV0FYOveQqU=
Subject key identifier:   F7:12:8A:92:6F:A1:8C:16:E0:24:1A:64:A3:30:3A:BF:D6:35:57:E7
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       1ED73554D75B172BCD83BE5765BD26C5D562BE38
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3138372e302f32342d3234203d3e20323637373937.roa
Signing time:             Sat 08 Feb 2025 19:10:00 +0000
ROA not before:           Sat 08 Feb 2025 19:05:00 +0000
ROA not after:            Sat 07 Feb 2026 19:10:00 +0000
asID:                     267797
IP address blocks:        200.9.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d7:35:54:d7:5b:17:2b:cd:83:be:57:65:bd:26:c5:d5:62:be:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Feb  8 19:05:00 2025 GMT
            Not After : Feb  7 19:10:00 2026 GMT
        Subject: CN=F7128A926FA18C16E0241A64A3303ABFD63557E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:13:8c:5c:c1:03:61:f2:af:51:85:c5:6a:
                    47:72:12:7d:0d:ef:0f:85:60:89:c3:d5:c6:03:96:
                    4f:f1:1a:3e:43:2b:68:c3:28:ce:bd:50:8a:df:58:
                    e8:2d:b4:41:34:41:b4:f9:35:59:a1:7e:e0:62:86:
                    e1:a4:36:a3:23:41:60:b3:4e:c7:79:30:53:30:d8:
                    ae:2e:52:74:bb:ef:5e:ad:60:17:5b:c6:1e:70:5f:
                    d1:07:81:04:47:a3:f8:1a:76:7b:e0:e3:0a:27:63:
                    53:30:28:99:81:29:d1:2b:64:49:ba:18:f7:01:b0:
                    39:db:a4:c5:70:b3:86:b9:9c:9f:46:fb:2d:43:f7:
                    8f:32:40:c5:b2:48:d3:01:ab:b6:40:04:c7:93:1c:
                    ce:43:d8:57:bd:9d:dc:0e:2e:8e:d7:37:9d:89:1d:
                    17:cd:39:db:e9:06:f4:28:9f:87:5d:8f:8a:82:80:
                    10:b7:95:7f:e9:fc:04:82:3d:ee:cf:c7:cf:61:2d:
                    12:50:d5:42:c1:ae:3b:24:58:06:45:ab:04:4e:f8:
                    5d:a5:2c:94:f8:3d:74:09:ee:3b:17:e0:e2:86:5e:
                    b8:c3:c2:f7:7d:b4:7b:0d:e1:6f:a4:5b:ed:fb:f6:
                    d0:9d:02:db:e8:88:e8:6d:6e:25:ce:ed:bd:f6:ab:
                    84:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:12:8A:92:6F:A1:8C:16:E0:24:1A:64:A3:30:3A:BF:D6:35:57:E7
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3138372e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:37:f9:d1:f8:d8:a5:52:a1:e7:be:93:5b:22:21:3d:fd:
         ab:73:d9:f1:04:bb:73:aa:8c:cc:e2:e9:c6:68:93:6e:07:57:
         ad:a5:7b:6c:aa:95:9e:e0:64:da:a9:a7:70:a6:5c:9e:4d:cc:
         88:89:29:af:3a:04:fb:37:22:53:bf:30:c4:d2:2f:ce:ba:73:
         b7:a7:28:80:50:e4:46:43:5c:a8:7a:7e:ae:81:f4:4e:7d:d7:
         ef:74:ee:a9:54:ed:72:52:cc:6d:37:80:54:86:bc:38:5e:d1:
         52:ae:33:c4:51:06:8e:6c:71:e4:9b:64:09:11:0f:01:1b:57:
         39:d4:d0:57:7a:83:5e:85:8d:f1:67:8a:e7:23:b5:97:20:76:
         d0:4b:68:a8:7a:30:15:50:0b:d9:9e:66:e6:d9:84:a5:24:36:
         cc:3b:8e:70:a6:43:ea:43:b6:8e:b4:0b:b3:cd:d7:28:37:5d:
         7b:71:dc:57:91:f0:51:e7:04:c3:5d:de:5d:d9:1b:93:b7:bb:
         56:d5:f3:9e:86:27:88:aa:61:20:aa:8a:9e:a8:41:48:a8:dc:
         b0:50:8f:0e:a9:10:a3:89:38:9d:4d:25:a8:7e:89:6a:f7:fd:
         a6:fd:7d:9c:24:aa:fc:01:3a:01:52:4d:96:41:4e:4b:48:4d:
         36:e0:7a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:46 2025 by rpki-client