Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3230302e3130352e39362e302f32312d3234203d3e203532323633.roa
File:                     3230302e3130352e39362e302f32312d3234203d3e203532323633.roa (raw, json)
Hash identifier:          oYkq7+CyDDn/snXLYaYFtH/o41Wi0O+YgxyA71w+48Q=
Subject key identifier:   B5:C1:40:E1:2A:38:9E:71:42:E4:6A:BE:D5:80:4E:7C:C4:E9:35:75
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       0A3739B6C0B89AC445C1FF15A01E954D3A79AB7D
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3230302e3130352e39362e302f32312d3234203d3e203532323633.roa
Signing time:             Tue 04 Feb 2025 18:48:25 +0000
ROA not before:           Tue 04 Feb 2025 18:43:25 +0000
ROA not after:            Tue 03 Feb 2026 18:48:25 +0000
asID:                     52263
IP address blocks:        200.105.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:37:39:b6:c0:b8:9a:c4:45:c1:ff:15:a0:1e:95:4d:3a:79:ab:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Feb  4 18:43:25 2025 GMT
            Not After : Feb  3 18:48:25 2026 GMT
        Subject: CN=B5C140E12A389E7142E46ABED5804E7CC4E93575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:75:52:cd:1a:22:24:a9:cc:e5:a0:ea:16:
                    fa:75:ca:f8:3f:68:60:21:5b:ea:2d:25:ff:37:63:
                    c4:58:f4:68:03:36:e5:92:4c:6c:45:af:87:a0:6e:
                    16:91:71:a7:80:eb:37:19:b5:54:1f:e6:a3:06:0a:
                    c2:2f:d6:a8:7d:83:36:e4:e5:d4:6e:ec:bb:94:ba:
                    54:05:e2:f7:6a:a6:fb:30:53:7a:df:86:14:08:e2:
                    e4:87:bf:3f:89:f3:8a:81:67:00:b7:03:22:d0:3f:
                    01:08:5f:88:32:fc:a5:79:bd:4d:db:1a:cd:7a:23:
                    f6:c2:ae:ce:99:dd:3a:ac:8b:0f:c1:09:36:d5:fa:
                    7c:03:d1:80:b1:47:9b:07:fc:48:bf:2b:a0:16:fc:
                    2b:ee:c5:d3:b8:d3:44:3c:0b:55:90:85:a2:66:d1:
                    47:89:ae:cc:cd:6d:3d:21:2b:db:2f:47:71:2c:a2:
                    48:3a:66:16:b4:d1:d6:ff:b3:1b:d9:3a:8b:4f:f4:
                    d1:af:8f:9c:c8:cb:d4:c7:cc:4a:06:49:99:a6:8f:
                    7c:77:fa:d5:5b:5a:a6:55:c7:68:87:4b:66:4a:0f:
                    e7:79:7d:43:2b:32:e3:b9:01:b7:6e:4a:5c:ce:d1:
                    dd:a2:b5:33:86:28:70:42:76:54:12:29:01:23:59:
                    09:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C1:40:E1:2A:38:9E:71:42:E4:6A:BE:D5:80:4E:7C:C4:E9:35:75
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3230302e3130352e39362e302f32312d3234203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.105.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:24:e2:c0:19:3e:53:8d:fd:97:f9:19:51:aa:78:79:56:e4:
         e4:91:cb:e4:aa:0c:55:ec:15:44:92:c7:f8:01:99:72:b0:96:
         99:0d:bc:6b:ae:5e:4b:9a:dd:96:2a:59:43:52:59:8b:70:44:
         b4:39:c5:12:ca:75:9b:a9:3d:a5:e9:7c:3d:2e:76:da:ec:28:
         8c:77:f6:b1:aa:49:c6:b7:e4:79:0b:fd:0b:9a:1a:6c:ab:89:
         ae:92:15:dc:72:a0:b7:87:7f:f3:fc:a8:b0:93:f4:76:cb:e3:
         11:5b:59:47:1d:d5:0f:df:46:eb:41:f0:dd:ae:88:33:6c:f3:
         97:bb:ae:42:2f:0e:19:b2:26:6a:ea:b6:71:94:61:ae:62:6c:
         f4:44:35:b3:73:39:1a:5a:84:2a:52:7d:f8:24:6d:0e:f4:a4:
         35:85:86:94:57:ce:31:96:57:53:62:89:e2:4f:f1:23:6b:27:
         3b:b5:f6:9d:32:54:4c:36:91:6b:8e:b8:65:89:02:25:da:33:
         ce:a1:fc:eb:04:a6:28:30:33:ba:93:d7:97:0f:ea:a5:73:2f:
         83:a4:17:26:b7:af:79:47:02:35:91:44:f8:8c:b1:14:dc:28:
         9b:c2:37:ca:e8:5b:fb:8c:77:3c:6e:51:05:03:b5:9d:ac:f1:
         3b:d7:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:39 2025 by rpki-client