Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3230302e37312e3234302e302f32312d3234203d3e203237373137.roa
File:                     3230302e37312e3234302e302f32312d3234203d3e203237373137.roa (raw, json)
Hash identifier:          bHx8Kiz1kTjvb/yCAF2K4WMkjwZuWS+NMeSGnEJzJxE=
Subject key identifier:   FC:36:15:7C:CF:61:D3:2D:02:E2:E6:16:CA:7E:C0:96:19:E6:37:D3
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       5E134444E52032B58298A1363BD9F465FEE5706A
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3230302e37312e3234302e302f32312d3234203d3e203237373137.roa
Signing time:             Tue 04 Feb 2025 18:20:19 +0000
ROA not before:           Tue 04 Feb 2025 18:15:19 +0000
ROA not after:            Tue 03 Feb 2026 18:20:19 +0000
asID:                     27717
IP address blocks:        200.71.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:13:44:44:e5:20:32:b5:82:98:a1:36:3b:d9:f4:65:fe:e5:70:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Feb  4 18:15:19 2025 GMT
            Not After : Feb  3 18:20:19 2026 GMT
        Subject: CN=FC36157CCF61D32D02E2E616CA7EC09619E637D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4d:61:ec:ef:d7:33:64:91:8f:d1:24:e5:2b:
                    db:6b:5c:38:d7:ea:7e:0e:87:e8:5b:c9:97:62:d5:
                    a3:25:09:5c:4a:67:52:5f:1e:fe:5f:37:82:8c:27:
                    ad:4c:b8:ee:33:46:d8:2e:ed:12:fe:42:bb:bc:16:
                    ee:c6:dd:ff:19:3f:90:ec:19:bb:c8:c6:a5:ec:af:
                    c0:7f:8c:f6:a3:e0:3c:8e:14:fc:64:30:b6:20:cf:
                    89:c6:69:70:a2:a3:ef:28:1a:1f:71:88:38:75:aa:
                    0b:a9:48:d5:78:af:d7:6b:24:a9:59:64:2c:8e:f7:
                    4f:aa:ab:d0:ce:6e:e0:8f:df:03:45:e6:cc:c8:e5:
                    10:48:67:9c:ad:ea:35:38:01:be:ef:9d:eb:0f:fe:
                    af:4a:39:f4:8a:8b:52:ff:1a:f3:9f:70:42:1c:4c:
                    b4:eb:28:ff:b8:94:53:67:4f:7e:03:10:63:10:0e:
                    04:87:b2:60:fd:cf:0a:ab:cf:b2:e5:64:e2:34:68:
                    55:72:8e:e1:47:06:fa:f9:b3:39:9d:cd:11:fe:70:
                    5a:35:a6:41:2e:89:d2:40:fa:6f:59:d1:92:12:e1:
                    2d:f9:4e:96:be:89:49:aa:36:67:46:bf:23:b1:2c:
                    c6:57:d3:ab:5d:e9:1d:9e:54:81:53:3e:51:da:a6:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:36:15:7C:CF:61:D3:2D:02:E2:E6:16:CA:7E:C0:96:19:E6:37:D3
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3230302e37312e3234302e302f32312d3234203d3e203237373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:11:cc:7b:30:c0:e1:11:0e:05:3f:b7:86:09:ab:4e:07:79:
         36:58:8f:fb:a3:a0:d7:49:f4:6a:1f:52:ba:e8:da:ef:40:6a:
         41:b9:b3:34:78:ff:2c:20:a8:37:5c:a1:1a:34:34:c0:af:99:
         fc:d2:2b:f9:94:54:41:b3:d7:6e:ee:cf:ca:52:d2:c1:09:4b:
         cf:32:1b:e7:39:9b:b3:ea:f1:16:8c:48:61:6d:eb:31:8f:88:
         44:91:5a:ed:0f:ae:2a:9c:88:2e:74:d7:7b:46:f8:42:41:2d:
         aa:74:15:0c:03:8e:dd:07:46:dd:6e:b5:e8:95:50:4a:73:74:
         48:f9:18:60:c7:97:19:67:4b:eb:69:64:8e:ec:ec:d7:64:2b:
         1e:44:bb:6d:12:83:b8:ce:9a:c3:cd:ea:49:a7:d2:08:da:e1:
         82:d8:b0:51:1d:21:eb:30:16:56:61:81:09:a4:b3:55:31:d2:
         9c:62:58:34:9d:ef:c9:5c:15:a9:a1:cf:14:a7:f9:75:3e:05:
         80:10:c9:e3:d5:97:e7:a6:9f:36:2c:59:f2:e7:db:e8:9d:1a:
         b7:8b:ea:75:ab:02:ce:f0:09:ca:0f:ec:46:6e:74:41:94:61:
         41:c9:47:c0:27:4e:0b:05:be:43:d2:b6:cd:86:a0:db:30:21:
         33:72:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:05 2025 by rpki-client