Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132312e302f32342d3234203d3e203237383236.roa
File:                     3230302e31362e3132312e302f32342d3234203d3e203237383236.roa (raw, json)
Hash identifier:          ColfENKE4vpQrbL2Ekja5DZFOehdvsLf1toFQpShKoc=
Subject key identifier:   9F:3F:02:AE:63:96:EE:26:F8:F8:20:32:6E:62:3F:42:C5:AF:34:F6
Certificate issuer:       /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial:       7DC471546182AA43D48846DBE41EEFDA0D4F1AE6
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132312e302f32342d3234203d3e203237383236.roa
Signing time:             Tue 04 Feb 2025 18:26:42 +0000
ROA not before:           Tue 04 Feb 2025 18:21:42 +0000
ROA not after:            Tue 03 Feb 2026 18:26:42 +0000
asID:                     27826
IP address blocks:        200.16.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c4:71:54:61:82:aa:43:d4:88:46:db:e4:1e:ef:da:0d:4f:1a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
        Validity
            Not Before: Feb  4 18:21:42 2025 GMT
            Not After : Feb  3 18:26:42 2026 GMT
        Subject: CN=9F3F02AE6396EE26F8F820326E623F42C5AF34F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:aa:d1:bb:53:64:6d:ea:5b:5c:d8:9b:69:9f:
                    fb:3b:06:d7:8a:08:e5:b9:28:b1:23:f8:bb:3b:fb:
                    42:86:e0:60:ec:11:3f:46:63:8b:ec:03:94:ca:c4:
                    ea:ca:84:82:3f:3a:26:d5:ea:f5:4d:93:23:de:dd:
                    ad:42:b6:93:a1:43:fc:ad:b8:9d:1a:9b:ff:63:01:
                    60:c7:82:fb:05:f3:df:b2:a4:fe:18:4a:38:1c:d3:
                    31:a8:0f:93:bf:63:13:88:57:44:e5:b5:52:7c:95:
                    4a:62:7d:ea:32:8c:b1:7f:83:f7:bf:79:12:64:30:
                    76:6e:dc:9b:c5:f3:27:6c:70:98:92:13:50:69:31:
                    08:be:9a:c6:b2:7b:d9:67:32:6d:61:17:59:98:b0:
                    f6:a8:2f:44:0c:87:f8:16:f1:2e:28:06:97:60:a7:
                    da:c9:11:db:26:fe:49:92:66:28:05:82:2b:03:06:
                    6e:1a:38:13:01:0f:41:29:fa:99:b9:31:46:8d:2c:
                    7c:64:a7:94:18:2c:4b:31:9f:31:97:d8:1c:9b:37:
                    22:22:40:15:4a:7c:56:8f:19:02:19:bd:15:3f:08:
                    73:3b:6c:ae:8a:27:4a:3f:16:f7:10:75:3f:fe:e9:
                    7f:61:fe:d4:2f:6a:48:3d:7f:16:2c:07:11:f4:1b:
                    b1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3F:02:AE:63:96:EE:26:F8:F8:20:32:6E:62:3F:42:C5:AF:34:F6
            X509v3 Authority Key Identifier:
                keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132312e302f32342d3234203d3e203237383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:c3:e9:9e:95:5c:63:fe:6a:0c:b5:97:77:76:97:ac:ad:
         ec:84:bf:65:6f:9c:91:9c:b0:38:2e:fa:2a:a7:39:44:d5:54:
         bf:18:83:8d:21:28:bc:cd:bb:f5:59:38:e4:27:c9:93:79:0a:
         bd:af:a5:b2:cf:6c:d5:db:f0:f6:88:be:e9:d4:74:33:41:b7:
         1f:11:85:44:aa:ef:08:41:34:b2:81:4c:7d:4e:92:a9:6e:53:
         3a:5e:4c:4b:f1:49:c0:c6:5f:f4:a4:08:37:f5:fa:86:3e:1e:
         3e:c2:05:2a:04:eb:0c:9e:0b:b2:aa:38:a3:1b:7a:62:a7:f7:
         df:71:64:2d:bb:b1:6c:20:2f:26:e2:80:20:1b:37:6e:42:55:
         0b:dc:d5:3a:57:1c:94:ec:39:65:b0:49:3e:bd:55:d9:56:9b:
         53:19:1a:79:94:75:77:5d:1a:c9:a5:33:ee:5c:3c:87:2a:0a:
         d4:aa:42:b2:da:71:e9:38:05:d0:2f:8f:11:51:10:01:2b:1a:
         06:6e:17:72:b2:7d:4e:39:d1:6c:85:e2:a8:6e:ba:ee:fc:f9:
         ab:a4:2b:39:b2:f9:3b:61:07:c1:fa:3e:4b:3d:e6:ce:a8:20:
         59:1d:d0:22:3e:aa:ee:ae:2f:45:c4:84:80:d9:fa:ed:9a:3e:
         b7:4b:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:30 2025 by rpki-client