Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/3230302e3131302e3139322e302f32312d3234203d3e203237393430.roa
File:                     3230302e3131302e3139322e302f32312d3234203d3e203237393430.roa (raw, json)
Hash identifier:          AXySny/aOaR4muMghrzk124F9lCVYW4RGdidnpnKFwU=
Subject key identifier:   70:60:B0:A2:33:88:8A:6E:74:20:AE:ED:F6:67:6F:DA:12:8B:E7:1B
Certificate issuer:       /CN=949C12357BC4AD5FFBEC5FBB36FE61882639A5B0
Certificate serial:       613753AC62B4B80C3187901DA9B929201400B850
Authority key identifier: 94:9C:12:35:7B:C4:AD:5F:FB:EC:5F:BB:36:FE:61:88:26:39:A5:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/3230302e3131302e3139322e302f32312d3234203d3e203237393430.roa
Signing time:             Tue 04 Feb 2025 18:13:23 +0000
ROA not before:           Tue 04 Feb 2025 18:08:23 +0000
ROA not after:            Tue 03 Feb 2026 18:13:23 +0000
asID:                     27940
IP address blocks:        200.110.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:37:53:ac:62:b4:b8:0c:31:87:90:1d:a9:b9:29:20:14:00:b8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949C12357BC4AD5FFBEC5FBB36FE61882639A5B0
        Validity
            Not Before: Feb  4 18:08:23 2025 GMT
            Not After : Feb  3 18:13:23 2026 GMT
        Subject: CN=7060B0A233888A6E7420AEEDF6676FDA128BE71B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:39:0c:58:da:90:99:36:78:df:ee:c0:d2:
                    53:9b:1a:47:75:68:f3:1b:69:68:a1:80:7c:a1:f4:
                    0d:3d:8a:8d:20:d3:f9:11:63:28:7d:55:51:a2:6e:
                    ee:b0:8b:df:f2:6f:02:b5:46:26:b8:10:01:64:df:
                    c3:47:b0:8f:dc:fb:72:9f:90:d9:22:ed:71:1f:82:
                    e5:b6:6f:71:da:4d:a5:f3:53:68:b2:1a:3b:75:2c:
                    d0:31:bc:44:21:58:dc:d4:66:08:37:07:a9:ca:0a:
                    ba:3a:44:04:cc:c2:5c:90:b8:1e:89:e9:be:fc:1a:
                    cd:81:88:3f:c4:81:f3:e1:20:41:4a:62:ec:78:70:
                    ff:74:bd:3a:58:a3:30:7d:74:16:19:cf:bf:fc:9c:
                    4c:19:70:a4:48:18:8d:d9:10:4e:bc:d2:1c:1e:d4:
                    a4:3e:21:06:ed:42:16:f9:bf:36:d6:15:31:ff:98:
                    59:2f:9f:0a:41:e0:45:b1:dd:c5:5d:3c:bb:0f:cf:
                    eb:8b:c1:75:fb:18:cf:ee:7b:6e:17:e4:44:f1:aa:
                    94:77:60:d2:a5:a7:ec:4b:b5:0a:bb:39:8c:2a:16:
                    91:a9:e8:ed:fd:7d:7f:bd:11:ab:be:c5:90:be:f0:
                    bd:4e:ba:91:16:c8:b0:23:88:db:74:a9:db:f7:a4:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:60:B0:A2:33:88:8A:6E:74:20:AE:ED:F6:67:6F:DA:12:8B:E7:1B
            X509v3 Authority Key Identifier:
                keyid:94:9C:12:35:7B:C4:AD:5F:FB:EC:5F:BB:36:FE:61:88:26:39:A5:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/3230302e3131302e3139322e302f32312d3234203d3e203237393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:c3:63:80:34:c1:da:20:e5:4a:f6:c2:bc:6c:cc:9d:06:67:
         62:7d:26:2c:7c:8b:e5:e5:5d:84:f9:eb:5e:69:5d:e5:82:6d:
         e7:91:fd:7e:58:42:10:62:ef:3d:77:e6:4f:54:1b:27:73:d4:
         30:2e:1b:c8:3e:ff:76:a4:d4:96:bc:37:e0:74:ed:15:a1:b0:
         9f:97:cf:53:c9:dd:e2:59:90:27:07:ee:13:5b:d7:61:80:3b:
         e1:74:70:69:d6:d1:9b:9c:ea:e7:09:c2:ad:f6:ff:ba:4e:9a:
         c9:e5:86:0d:17:8f:eb:68:96:e5:0b:cd:d8:53:cd:73:c6:57:
         5d:ed:63:ba:35:db:29:35:ed:cf:db:f2:70:22:ff:1c:00:1c:
         5d:e0:b7:80:10:39:dd:3c:d1:c7:7b:04:b7:12:c6:a1:7f:a3:
         cc:07:d9:2d:31:e2:0c:b4:6c:8d:6d:25:b6:43:fb:79:5c:b0:
         2b:95:ed:57:9b:f1:08:74:82:ab:4b:83:d8:11:85:17:37:43:
         4e:0f:0d:98:5d:a4:87:fe:31:c0:09:6e:b9:ce:1c:d5:64:68:
         1b:46:b2:a9:2f:52:1f:bf:3d:ff:17:70:e5:05:4d:fc:cd:a2:
         18:b4:d4:b0:f2:6c:ab:9e:8a:99:26:48:0c:57:f0:31:2a:50:
         70:f5:c6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:25 2025 by rpki-client