Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e203139353832.roa
File:                     3230302e302e36332e302f32342d3234203d3e203139353832.roa (raw, json)
Hash identifier:          hEQOhlFHLzE7fnIlI/feQoCooEz2JrQuIc1JhDa3+ck=
Subject key identifier:   B5:D5:45:25:5C:D8:18:BC:5F:1B:E6:5E:D8:6F:E6:5E:1F:8A:23:B1
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       22A45163F6D20D7B380596ABCAD14F7A9E8F9F6D
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e203139353832.roa
Signing time:             Tue 04 Feb 2025 18:53:49 +0000
ROA not before:           Tue 04 Feb 2025 18:48:49 +0000
ROA not after:            Tue 03 Feb 2026 18:53:49 +0000
asID:                     19582
IP address blocks:        200.0.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a4:51:63:f6:d2:0d:7b:38:05:96:ab:ca:d1:4f:7a:9e:8f:9f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Feb  4 18:48:49 2025 GMT
            Not After : Feb  3 18:53:49 2026 GMT
        Subject: CN=B5D545255CD818BC5F1BE65ED86FE65E1F8A23B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:21:20:ec:f6:6c:2e:c5:9e:0c:a6:b7:3c:
                    85:47:f0:86:51:de:c9:b7:8e:c3:00:19:ed:26:4d:
                    bd:03:8a:7e:d7:3c:98:90:0f:83:7e:5d:32:73:82:
                    2d:cc:d1:f1:1a:5e:30:48:fb:65:6e:a2:78:2c:9a:
                    4e:23:b5:91:d7:81:bb:9b:9a:44:50:d6:5e:85:29:
                    85:3a:0a:ba:d7:fe:1e:5f:43:4f:a1:05:24:65:0a:
                    45:49:e2:a2:68:c3:d5:eb:f0:11:5f:13:a2:51:7e:
                    6a:59:8e:22:65:58:b8:7f:60:27:b4:94:8e:8b:79:
                    2e:f3:5e:67:78:fd:c7:1a:af:70:d8:ef:2d:09:a0:
                    5d:cd:67:bd:ba:c7:ba:fd:66:9c:8f:85:76:af:19:
                    04:45:4f:56:fd:2a:c1:34:8c:cd:b6:4f:30:48:4c:
                    6d:d8:f8:9d:b0:d4:53:6c:99:d4:ec:bf:8f:17:e4:
                    71:ed:19:b7:e0:47:2d:8c:05:48:ea:3d:e4:93:db:
                    5f:d9:2b:bf:9c:0d:fb:61:84:91:42:20:61:db:9e:
                    2c:d8:58:e8:9d:2c:fa:2e:c3:38:1c:94:37:c9:1a:
                    fb:2d:95:74:09:c1:b3:b0:98:0c:5d:49:4b:40:a1:
                    ff:08:14:04:c5:0d:61:63:75:d0:eb:63:bf:13:01:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D5:45:25:5C:D8:18:BC:5F:1B:E6:5E:D8:6F:E6:5E:1F:8A:23:B1
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e302e36332e302f32342d3234203d3e203139353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:e2:51:9a:9d:13:b0:ba:86:cd:ed:6b:89:fc:3d:94:9a:ad:
         5a:1b:5f:01:d5:b1:99:16:b5:0e:b4:2e:84:57:53:7c:aa:c2:
         84:32:84:3d:cf:7a:28:c6:7e:46:0e:87:76:09:59:4b:f6:29:
         ae:7a:f5:5a:c2:b3:75:09:7c:bc:4a:78:85:3f:4a:01:28:e6:
         ac:5a:bd:f2:35:55:57:6b:26:28:c7:a4:e0:53:21:cd:da:8d:
         9e:cc:70:20:3e:41:24:1b:45:9d:79:10:59:de:2d:58:0c:af:
         e6:53:df:62:1e:79:b3:64:cd:2c:98:15:32:12:b3:aa:2d:07:
         03:03:04:a5:bc:ba:f3:dd:48:da:74:2f:15:07:d6:b8:27:8f:
         e7:b0:00:23:66:3c:61:7a:4b:87:28:67:15:b6:bf:6f:72:c3:
         a5:bc:41:04:41:c8:97:03:c8:e8:26:a1:26:d9:59:2b:e2:df:
         e4:f6:4e:bc:66:89:84:79:c3:83:ca:3a:3b:4f:df:44:a4:d6:
         6b:49:54:92:c6:c3:61:59:0e:b9:43:85:e4:2f:e1:9e:67:24:
         9e:5f:99:71:15:e5:03:ac:28:d1:7e:77:51:c2:35:8b:1d:37:
         70:d0:5c:6e:35:e2:ad:8f:02:9e:9e:75:87:6c:c5:66:c2:83:
         93:4d:12:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:33 2025 by rpki-client