Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3230302e332e3136382e302f32312d3234203d3e203131383135.roa
File:                     3230302e332e3136382e302f32312d3234203d3e203131383135.roa (raw, json)
Hash identifier:          DjR67+HWq+3O9mzUkxo5mKKdFyIzfB/ZYrhvxDcp3Bw=
Subject key identifier:   FA:3D:A5:1D:D3:7C:EE:9A:2C:EC:A3:50:F9:D1:BD:99:9E:32:B8:A8
Certificate issuer:       /CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
Certificate serial:       182E6A719F26B14C0BA2E6203B6BCAFAAA80845D
Authority key identifier: D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3230302e332e3136382e302f32312d3234203d3e203131383135.roa
Signing time:             Tue 04 Feb 2025 18:34:29 +0000
ROA not before:           Tue 04 Feb 2025 18:29:29 +0000
ROA not after:            Tue 03 Feb 2026 18:34:29 +0000
asID:                     11815
IP address blocks:        200.3.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2e:6a:71:9f:26:b1:4c:0b:a2:e6:20:3b:6b:ca:fa:aa:80:84:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
        Validity
            Not Before: Feb  4 18:29:29 2025 GMT
            Not After : Feb  3 18:34:29 2026 GMT
        Subject: CN=FA3DA51DD37CEE9A2CECA350F9D1BD999E32B8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:52:7c:5d:d2:37:5d:55:b5:f5:34:21:b0:
                    68:fb:ed:54:c5:69:1b:89:5c:62:2f:24:83:0b:8c:
                    42:41:0c:69:bd:22:1c:c6:47:e8:58:00:ec:e9:25:
                    33:ba:73:bd:bf:d3:1c:55:40:ee:3f:12:04:1f:43:
                    c8:ff:bd:a8:fb:37:36:11:69:25:f4:df:d9:f7:b9:
                    2f:56:04:e9:9e:c9:53:e3:3a:a2:3c:cf:66:ec:33:
                    6e:c7:e1:8d:d7:1e:69:92:fb:c3:42:f4:b5:3e:93:
                    8e:53:ce:cb:1f:4e:5f:ff:03:b7:78:6e:8c:5d:e3:
                    31:f6:c8:6f:ef:20:86:e8:b3:7e:39:81:72:f9:0c:
                    5c:85:c8:19:52:42:44:87:02:92:4c:30:c0:99:b6:
                    b0:32:8e:12:af:72:7b:ab:cf:10:0a:c5:da:d9:79:
                    21:32:ab:83:4a:01:98:e2:bf:71:8e:f2:f8:4c:d4:
                    e0:b9:45:b7:0e:79:ee:d3:ab:fc:12:1e:8b:f9:af:
                    0e:92:cb:08:a7:94:32:d1:c8:2e:40:12:d5:ba:33:
                    fd:01:d0:71:ed:5c:dc:d7:70:19:25:d4:75:32:ef:
                    10:51:84:d5:5a:fa:4d:38:b1:c8:97:5c:1e:25:db:
                    ac:e8:75:22:be:b1:18:2f:d6:54:3e:03:c3:10:34:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3D:A5:1D:D3:7C:EE:9A:2C:EC:A3:50:F9:D1:BD:99:9E:32:B8:A8
            X509v3 Authority Key Identifier:
                keyid:D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3230302e332e3136382e302f32312d3234203d3e203131383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bf:2c:2d:45:73:b3:53:4b:ee:41:81:4a:16:78:b4:a3:0e:20:
         98:14:62:9d:85:9f:68:44:0f:30:43:5b:1c:a9:55:5a:3c:7c:
         5f:01:30:61:ef:4f:ea:3e:98:5e:ee:eb:fd:41:dd:82:80:f0:
         f3:56:0c:4a:5f:ba:3a:ac:ab:11:42:e4:1f:43:a4:95:57:12:
         5a:ca:e7:91:2c:41:6f:e6:bb:17:b9:77:d1:c6:de:59:8b:69:
         e6:78:87:8f:5b:b6:94:a4:99:61:6c:9e:41:d0:99:e4:1e:54:
         45:4f:b4:1c:66:2e:02:95:5a:bd:18:3f:03:8b:68:8f:a2:f3:
         6d:ec:4a:1c:18:10:0c:03:dd:6f:79:cf:97:d4:d8:30:af:d6:
         aa:82:a1:62:74:55:3a:b6:f5:e7:56:c9:71:cb:60:78:75:1f:
         ea:53:b3:20:97:e7:b5:16:1b:1b:f5:c9:39:71:c4:37:04:24:
         02:c9:e5:85:34:3c:16:6a:e1:24:1c:34:c5:a5:db:81:53:a6:
         c5:5d:64:da:df:2b:31:95:0a:c1:6b:8d:01:9b:06:94:26:4f:
         6e:0d:02:2c:ca:b0:dd:63:ff:b2:5b:2e:3c:c2:be:71:86:de:
         be:7c:37:c8:3c:6c:96:a3:23:7a:56:44:16:0d:77:84:a6:5e:
         9f:ea:1f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:12 2025 by rpki-client