Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3230302e3131352e32322e302f32342d3234203d3e20323632313638.roa
File:                     3230302e3131352e32322e302f32342d3234203d3e20323632313638.roa (raw, json)
Hash identifier:          5fITLs+Jo19dess483aWAkv/tnlT6SkftsiRaSw40KU=
Subject key identifier:   CE:5E:12:63:2D:2C:93:0D:15:C0:09:C6:17:58:57:43:FF:06:EC:72
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       100D291CEF8785BEA45C5BB1B216E71CF606EFA4
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3230302e3131352e32322e302f32342d3234203d3e20323632313638.roa
Signing time:             Tue 04 Feb 2025 18:27:59 +0000
ROA not before:           Tue 04 Feb 2025 18:22:59 +0000
ROA not after:            Tue 03 Feb 2026 18:27:59 +0000
asID:                     262168
IP address blocks:        200.115.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0d:29:1c:ef:87:85:be:a4:5c:5b:b1:b2:16:e7:1c:f6:06:ef:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Feb  4 18:22:59 2025 GMT
            Not After : Feb  3 18:27:59 2026 GMT
        Subject: CN=CE5E12632D2C930D15C009C617585743FF06EC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:80:93:49:63:ba:a6:66:33:23:a5:e3:8c:03:
                    fc:a7:89:a7:d9:d0:37:f3:cc:05:7b:03:e5:9d:d2:
                    3c:f7:12:5b:7f:07:44:ae:d8:46:70:94:57:da:e0:
                    dd:6c:8d:9e:8e:77:81:f1:a3:b5:17:ea:2c:4e:c2:
                    13:28:fc:48:e3:f9:49:41:04:bd:24:1d:57:50:57:
                    eb:59:99:d8:aa:34:6c:17:d9:3c:d6:f8:f9:2a:d2:
                    80:a1:79:7b:cb:5b:79:57:46:70:48:c8:d6:bd:32:
                    90:59:36:9a:5f:6c:5a:88:17:c1:9e:6f:54:23:b2:
                    ea:b7:0a:f3:86:28:8c:2a:b8:17:34:4e:4b:b2:46:
                    d2:a6:c3:14:dc:34:2c:35:ec:bb:93:6a:d1:b7:c2:
                    d4:05:56:e6:e2:45:4c:71:20:db:d6:1a:af:26:f2:
                    2d:42:e2:f5:21:05:7a:2a:45:b7:6b:23:ef:3a:bc:
                    61:5a:d5:eb:60:0c:0e:9e:8e:3c:bf:84:fb:11:39:
                    0c:66:b3:32:74:69:df:f4:b7:49:6b:ef:4c:a6:07:
                    72:a4:d1:54:9b:77:f5:c1:39:a4:88:da:7a:d3:c6:
                    90:51:0a:23:c7:9f:30:45:ab:6d:dd:6b:9d:46:b2:
                    5e:cc:6d:34:64:31:28:9f:97:36:ea:9c:41:3e:5f:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5E:12:63:2D:2C:93:0D:15:C0:09:C6:17:58:57:43:FF:06:EC:72
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3230302e3131352e32322e302f32342d3234203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:eb:15:b7:69:6b:4b:43:9b:e1:2d:ab:aa:85:69:d6:61:db:
         37:f3:3d:94:70:d8:fa:4f:08:60:5c:b5:88:7a:79:e0:67:53:
         43:5d:e1:f4:78:bc:cd:48:fe:f5:17:0b:ce:5d:a2:92:0f:70:
         5d:b1:3d:16:de:43:68:60:d6:4e:81:15:18:6e:af:00:f3:a0:
         3f:b6:4b:67:a4:94:79:a4:17:9f:68:2d:f6:0a:9a:6d:73:5b:
         fe:ee:2e:52:c8:00:ce:b4:10:e7:82:30:3a:6b:45:31:f7:90:
         f1:de:61:ba:7d:20:44:85:57:73:1a:9c:18:20:e6:fd:9d:cc:
         14:e9:ac:3a:33:a0:da:b1:d4:19:b9:8d:b9:14:dd:43:d0:0b:
         8a:0e:28:23:a8:0d:05:c7:12:91:1c:34:79:94:52:06:1e:5d:
         58:55:c9:b1:c5:6b:fa:47:a5:ec:58:72:1b:dc:d6:de:f9:fd:
         cb:e4:5b:6a:f4:7b:42:a3:cc:85:e1:fb:09:a5:e3:e6:2b:5c:
         1a:74:94:5e:c8:4c:b3:59:57:b0:d4:50:9a:fe:42:41:81:32:
         66:e3:17:5f:5c:fa:31:1e:44:59:e2:81:ad:76:1c:9a:f0:1c:
         7a:c7:c4:43:09:12:bf:e1:04:d6:2b:45:74:0f:4c:2b:e7:c5:
         75:6d:7f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:29:22 2025 by rpki-client