Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3230302e37362e3132302e302f32322d3234203d3e203238333937.roa
File:                     3230302e37362e3132302e302f32322d3234203d3e203238333937.roa (raw, json)
Hash identifier:          lH73fXz2gmzgu2kjijVjhyyV0eLiPG4uvRP4fKsUNBM=
Subject key identifier:   17:CD:49:14:91:B6:84:AA:D0:C0:86:1F:B3:BD:BA:D8:BE:52:13:25
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       7E1DF7C02F92DBE836AD4768611B5AA1B20856DE
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3230302e37362e3132302e302f32322d3234203d3e203238333937.roa
Signing time:             Mon 07 Apr 2025 02:10:00 +0000
ROA not before:           Mon 07 Apr 2025 02:05:00 +0000
ROA not after:            Mon 06 Apr 2026 02:10:00 +0000
asID:                     28397
IP address blocks:        200.76.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1d:f7:c0:2f:92:db:e8:36:ad:47:68:61:1b:5a:a1:b2:08:56:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: Apr  7 02:05:00 2025 GMT
            Not After : Apr  6 02:10:00 2026 GMT
        Subject: CN=17CD491491B684AAD0C0861FB3BDBAD8BE521325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:0c:1a:c5:63:cf:5c:43:4a:98:73:67:cb:
                    c1:ba:0a:1d:f3:cc:1b:70:ed:81:18:02:82:41:b0:
                    ab:a7:1b:9e:50:e9:64:56:b5:08:e0:71:04:50:76:
                    e5:c9:01:54:bc:e1:d7:73:4c:47:7f:2d:ae:55:10:
                    b6:78:35:2e:7a:86:a9:4c:87:d8:1b:b5:6f:3f:f0:
                    9c:c2:68:85:79:3d:2a:1e:58:16:d2:73:14:06:bf:
                    f3:33:67:e5:4f:18:d4:31:5b:4a:6f:72:c3:6d:d3:
                    5b:78:66:77:c8:68:af:9b:18:a6:8c:21:c2:bd:de:
                    24:58:13:29:3f:96:cd:12:9a:43:71:0c:83:34:f5:
                    06:5a:7a:89:15:1c:77:c9:2b:b1:b4:5e:38:45:6d:
                    07:5e:1a:81:86:3d:00:7d:48:af:e6:dc:0d:2e:fb:
                    6f:6f:df:8e:95:28:83:b2:6a:cd:7d:9e:41:e5:b9:
                    26:e4:ad:2c:ae:0b:fc:92:b6:6c:c6:fe:42:55:15:
                    4c:e8:25:1d:eb:19:12:8d:79:f4:41:77:c5:f9:7b:
                    db:07:f2:2b:42:27:f9:20:25:26:fa:07:fa:3c:ba:
                    38:21:04:ac:43:e2:eb:d5:23:3e:78:23:ca:97:e5:
                    62:00:4f:21:11:c8:ac:2f:29:e0:fd:47:9d:f6:5b:
                    a2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CD:49:14:91:B6:84:AA:D0:C0:86:1F:B3:BD:BA:D8:BE:52:13:25
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3230302e37362e3132302e302f32322d3234203d3e203238333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:3c:37:e2:95:bf:5b:61:c7:e5:e4:5a:d1:cd:50:6e:80:38:
         61:d7:fa:5a:99:69:a3:e5:5c:a1:cb:88:c1:c6:67:fc:79:d3:
         98:6f:1e:55:38:72:16:48:71:f1:57:e4:48:0a:d1:40:f6:95:
         42:20:a8:61:fe:5a:1f:8d:76:0f:b4:ea:cc:c3:c0:3c:fd:85:
         59:ee:bb:d0:74:5a:3f:22:07:9b:0d:0c:a6:74:b8:c2:2b:96:
         ea:67:ac:e3:aa:57:c5:e0:ae:4c:2f:c7:77:8b:3e:0b:52:db:
         2c:93:c5:8e:c6:9f:e2:fb:42:ff:c8:83:9e:c5:d5:f5:6c:b7:
         bf:85:26:6a:b5:d5:82:e7:d2:a4:d2:59:7d:87:ba:97:31:22:
         55:3c:74:c8:c3:b2:79:e4:0d:59:34:e9:b2:b6:07:02:a6:d8:
         b2:d8:58:05:17:d1:f2:ba:4e:fe:89:a2:ce:cd:53:c5:63:ec:
         cc:3c:07:df:f8:ec:4b:af:7a:48:65:30:2d:00:e0:a4:8f:4b:
         3e:b6:ea:57:bb:4e:9e:f7:3b:04:18:68:02:83:cb:cc:c8:c0:
         2e:31:d5:37:f9:15:0e:af:83:d6:52:e3:a2:1f:3c:b3:d9:09:
         57:0f:5a:0a:19:8d:92:e0:da:c5:6d:26:62:b1:20:cc:f4:32:
         9e:bd:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:14:29 2025 by rpki-client