Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132322e302f32342d3234203d3e203237383236.roa
File:                     3230302e31362e3132322e302f32342d3234203d3e203237383236.roa (raw, json)
Hash identifier:          fSAzYfKORqjScJFDoAgsUAmgAnCUwqJP/tzsex5dUSI=
Subject key identifier:   09:F6:68:F8:8D:B2:7B:6B:DF:18:83:CD:61:58:47:BC:69:C7:EB:D6
Certificate issuer:       /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial:       13F98514B2A02097329135082C708F263E024DE7
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132322e302f32342d3234203d3e203237383236.roa
Signing time:             Tue 04 Feb 2025 18:26:42 +0000
ROA not before:           Tue 04 Feb 2025 18:21:42 +0000
ROA not after:            Tue 03 Feb 2026 18:26:42 +0000
asID:                     27826
IP address blocks:        200.16.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f9:85:14:b2:a0:20:97:32:91:35:08:2c:70:8f:26:3e:02:4d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
        Validity
            Not Before: Feb  4 18:21:42 2025 GMT
            Not After : Feb  3 18:26:42 2026 GMT
        Subject: CN=09F668F88DB27B6BDF1883CD615847BC69C7EBD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:98:92:a7:7b:58:fc:7d:20:94:74:f5:d1:1c:
                    a5:34:75:54:f2:30:96:f7:23:9c:32:38:43:9c:99:
                    f1:49:b9:71:01:bc:7a:a7:2c:b8:7f:26:41:7e:f5:
                    76:cb:36:34:a2:d5:55:98:2b:d0:01:b0:0f:14:15:
                    6f:8f:dc:e9:0b:19:8d:01:ae:80:fa:45:b4:b1:06:
                    2f:1d:64:1b:6d:f2:8b:9e:2e:ac:70:b6:5d:03:a3:
                    4e:4d:a4:79:b6:0f:11:26:b5:6b:68:6b:7b:8a:92:
                    92:4c:23:c7:2e:aa:a5:98:d9:8f:47:25:ef:d7:e5:
                    17:c2:7b:02:f9:04:fa:53:8d:e3:04:a1:bf:44:a6:
                    36:d6:8c:2c:b1:81:4f:8d:8c:09:e4:2d:dd:8b:37:
                    92:91:4a:34:6a:a3:88:a8:85:b5:1e:b4:74:d4:82:
                    35:2e:0d:1d:07:ac:9c:67:17:55:b2:9e:5a:3b:88:
                    2f:a4:c1:5e:b9:8f:71:38:19:07:63:c5:63:89:11:
                    4e:fc:7a:27:2f:c0:19:cb:ad:85:bf:19:00:dd:dc:
                    05:e5:e5:6d:e6:61:01:fd:14:8b:9f:d7:fa:cd:aa:
                    31:50:af:6b:0e:a0:21:cb:95:8f:9a:43:6b:b2:1c:
                    d9:4b:e3:c6:38:74:cd:e9:d0:91:ba:0d:28:5f:68:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F6:68:F8:8D:B2:7B:6B:DF:18:83:CD:61:58:47:BC:69:C7:EB:D6
            X509v3 Authority Key Identifier:
                keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132322e302f32342d3234203d3e203237383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:6f:37:1c:3e:82:c5:c4:05:c4:8a:5e:9c:0a:f2:dc:b6:72:
         7c:94:f4:9d:52:07:a0:38:a4:c6:94:cf:24:af:1f:98:dc:4c:
         99:43:8a:93:ec:06:f5:cc:93:28:04:cd:94:cc:41:d6:94:06:
         6c:0e:34:95:09:e6:6b:f9:79:2c:17:1b:68:c1:54:13:a4:76:
         c1:8e:36:87:33:85:03:76:70:23:cd:f5:c1:64:7e:6b:ba:93:
         58:ff:da:a1:a2:0c:51:d7:11:61:d6:3d:c8:17:6b:a4:92:41:
         77:f7:f4:8c:54:c9:5b:fd:7d:ad:48:a8:b6:3c:24:48:21:8e:
         07:86:69:b6:a9:fd:18:a2:2a:6e:38:8a:48:79:5e:1c:19:f6:
         81:c5:3a:be:fe:31:de:b4:2e:4c:27:ed:96:14:b6:c6:ba:3f:
         33:f4:b8:88:2d:ba:7e:6a:04:02:1d:45:37:5f:9e:a9:94:b3:
         92:a5:42:17:97:72:65:7b:ba:11:d2:5d:81:50:7a:70:af:b0:
         40:3e:12:20:ef:81:cd:a2:39:79:9c:b5:e6:b3:67:8b:55:eb:
         f2:6e:17:07:41:51:b1:82:af:ac:17:38:72:44:c7:8a:8e:c1:
         6a:a5:e0:e1:c0:ad:11:15:7b:a3:19:15:84:56:37:90:fb:93:
         c3:3d:49:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:17 2025 by rpki-client