Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132302e302f32312d3231203d3e203237383236.roa
File:                     3230302e31362e3132302e302f32312d3231203d3e203237383236.roa (raw, json)
Hash identifier:          D5MblsYAxvkWVx2ihGH4mlRTvWauVMvo0v3veh9p72g=
Subject key identifier:   02:CB:BA:39:A1:A6:1B:DA:E9:90:4E:64:D4:EC:B1:A1:E5:34:1C:70
Certificate issuer:       /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial:       18448D9897145C8CC09D7569FF31AD9A67104B5D
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132302e302f32312d3231203d3e203237383236.roa
Signing time:             Tue 04 Feb 2025 18:26:43 +0000
ROA not before:           Tue 04 Feb 2025 18:21:43 +0000
ROA not after:            Tue 03 Feb 2026 18:26:43 +0000
asID:                     27826
IP address blocks:        200.16.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:44:8d:98:97:14:5c:8c:c0:9d:75:69:ff:31:ad:9a:67:10:4b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
        Validity
            Not Before: Feb  4 18:21:43 2025 GMT
            Not After : Feb  3 18:26:43 2026 GMT
        Subject: CN=02CBBA39A1A61BDAE9904E64D4ECB1A1E5341C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:83:b5:14:17:95:f7:96:00:da:81:34:db:
                    06:92:a0:9e:a6:0c:c5:7c:0e:f8:7f:7d:d9:85:54:
                    54:a1:4c:8d:e0:13:99:06:d8:f2:6a:cd:6c:d8:e2:
                    f5:ea:ef:eb:50:af:74:4f:0a:2d:ec:e1:81:bc:3c:
                    1c:d2:3b:04:18:b2:a0:7e:25:c0:05:3d:d8:8b:32:
                    c4:e8:2b:a4:93:a3:17:14:e6:0b:0f:8a:98:54:3a:
                    a4:6d:f2:b0:f9:18:44:e6:7f:35:cc:5a:d5:89:28:
                    df:46:1e:76:46:86:5f:20:2f:f8:b2:15:ac:f7:70:
                    02:41:9d:d5:4d:62:b0:47:95:e4:96:59:b7:fb:3b:
                    bf:5e:73:64:66:7e:22:76:d8:5f:fa:84:be:82:8a:
                    88:e0:9e:b5:09:e1:7b:fd:00:a1:16:a5:e8:1a:ff:
                    7a:bd:62:d8:32:6d:6b:d0:2f:3a:37:b2:3b:5e:28:
                    28:cf:b4:72:22:14:6f:24:4e:5a:58:6a:71:08:1e:
                    96:61:9e:a7:b1:10:86:4e:ea:41:ea:9e:c1:2f:bf:
                    f7:dd:46:30:56:d4:47:5b:a9:15:cf:ae:ac:9c:79:
                    15:f8:a6:92:b9:a4:5c:61:86:56:4e:33:1a:f1:c1:
                    c6:97:b2:a7:c1:36:ca:ff:68:91:f5:5f:d3:dd:9b:
                    4b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CB:BA:39:A1:A6:1B:DA:E9:90:4E:64:D4:EC:B1:A1:E5:34:1C:70
            X509v3 Authority Key Identifier:
                keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132302e302f32312d3231203d3e203237383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:3f:db:ef:14:ea:3c:e7:f5:e0:e0:ca:68:ec:43:5b:09:
         42:e3:3c:71:e8:4f:b8:59:e7:2c:c1:b8:ef:8f:d9:0c:3f:06:
         6c:1d:23:8b:89:45:43:02:a9:05:6c:dc:2e:84:99:28:70:32:
         2d:90:cd:ab:79:44:2b:3c:e7:66:d2:54:47:5a:89:0a:f1:7c:
         13:1f:dd:24:9a:8c:fb:80:74:fa:20:aa:f3:23:a9:45:42:09:
         17:b0:c7:37:5a:5f:35:fa:af:5a:00:14:39:cf:4f:a6:c8:46:
         b6:f4:f3:eb:3d:3a:78:d6:73:db:fe:07:ea:c5:d6:4c:ed:d7:
         ca:71:64:64:1d:12:ff:c0:8f:e9:14:1c:9d:3d:ee:c2:7c:b2:
         c9:f7:c4:c3:fb:47:a2:f8:93:02:15:4e:b9:ca:da:38:aa:16:
         96:b0:67:e3:27:2b:02:27:72:5b:03:f2:95:a3:18:1a:2e:8b:
         2f:0b:a2:dd:7f:11:e6:72:28:7b:bf:82:83:08:d2:04:c2:91:
         af:20:cf:d7:e3:5a:89:7a:f4:3b:a5:70:47:6f:5f:b8:76:79:
         9a:27:af:c9:e6:be:84:e3:1b:21:31:cf:71:72:86:25:c7:5c:
         cc:14:e7:a9:7b:46:06:0f:f0:3c:ce:69:d8:33:5b:ea:46:8c:
         a2:b2:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:14 2025 by rpki-client