Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/3230302e332e3134342e302f32332d3234203d3e203532343838.roa
File:                     3230302e332e3134342e302f32332d3234203d3e203532343838.roa (raw, json)
Hash identifier:          CT7Fq9G+IQsu24Ks3ZoPWflZQcQJe3wso7hgtI1eaX8=
Subject key identifier:   F3:0C:FA:D8:F9:F8:33:D5:68:13:AC:BD:9B:39:E2:59:92:A6:8D:5F
Certificate issuer:       /CN=701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC
Certificate serial:       030823F81C76E46E6E23BF88F6021F550836AAD2
Authority key identifier: 70:1E:1F:D0:4F:15:49:BD:B6:2D:5F:31:FE:C6:DE:58:97:0D:CF:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/3230302e332e3134342e302f32332d3234203d3e203532343838.roa
Signing time:             Tue 04 Feb 2025 18:54:24 +0000
ROA not before:           Tue 04 Feb 2025 18:49:24 +0000
ROA not after:            Tue 03 Feb 2026 18:54:24 +0000
asID:                     52488
IP address blocks:        200.3.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:08:23:f8:1c:76:e4:6e:6e:23:bf:88:f6:02:1f:55:08:36:aa:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC
        Validity
            Not Before: Feb  4 18:49:24 2025 GMT
            Not After : Feb  3 18:54:24 2026 GMT
        Subject: CN=F30CFAD8F9F833D56813ACBD9B39E25992A68D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e1:7d:2d:30:97:93:d9:cd:ef:88:f8:de:6a:
                    0c:86:48:d4:05:00:c3:e2:1c:62:3f:b2:ba:5c:ce:
                    de:48:3c:74:fe:c6:22:85:52:ea:22:d5:79:5c:e4:
                    03:ea:e5:6c:06:00:98:22:b2:68:4f:67:33:2f:fe:
                    88:bb:ff:8e:37:6b:66:e5:40:1a:09:22:ad:9c:5c:
                    e2:55:70:38:d0:10:2d:83:5e:e2:9c:f1:6e:57:70:
                    84:a5:72:cb:6c:fd:38:27:f6:d5:9b:96:e5:f8:b5:
                    12:09:d5:ed:06:ae:40:6d:c4:dc:86:a4:30:69:c9:
                    c8:93:2e:a0:ea:8b:eb:ec:52:9d:a3:d2:23:35:de:
                    08:21:4b:ac:37:c5:35:d8:b1:a4:81:b8:52:41:cc:
                    69:60:58:19:e5:26:fe:b6:07:9f:d3:70:f7:95:7e:
                    69:b4:8c:e1:19:44:35:e1:2a:dd:40:4d:53:87:5f:
                    32:ff:62:63:0b:bd:4a:0b:ed:8e:bb:50:36:8a:66:
                    fb:a2:10:34:fb:21:c3:86:6c:43:eb:cc:8b:67:a4:
                    3f:cf:dc:c1:0d:07:2d:0d:3b:99:66:94:93:b1:b5:
                    b2:e9:af:70:48:da:7b:ff:cc:b0:95:a2:66:83:aa:
                    32:bc:06:ba:5a:17:8c:6f:1a:b1:6d:23:bc:7f:12:
                    85:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0C:FA:D8:F9:F8:33:D5:68:13:AC:BD:9B:39:E2:59:92:A6:8D:5F
            X509v3 Authority Key Identifier:
                keyid:70:1E:1F:D0:4F:15:49:BD:B6:2D:5F:31:FE:C6:DE:58:97:0D:CF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/3230302e332e3134342e302f32332d3234203d3e203532343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:6c:0f:5d:cf:2c:6c:a1:a4:9f:5a:74:8c:55:44:ec:65:
         7f:56:8c:35:31:75:ce:bc:d5:d9:32:2a:03:08:76:fc:00:8f:
         e1:9f:2b:0c:be:43:4e:92:d8:55:76:0a:6a:ab:bc:dd:c8:fc:
         c6:a0:cd:29:6d:b7:b7:fb:46:50:8c:fb:50:88:d6:2e:ab:c7:
         11:57:18:fe:ae:b7:86:6d:5b:e1:63:ce:40:38:93:ee:92:60:
         3e:0f:f0:90:e5:8f:e3:f0:33:54:34:02:f3:f0:b5:d5:9b:c3:
         bd:e9:5e:c7:5e:42:03:07:0c:de:3d:55:a8:a8:96:f6:0d:89:
         62:70:8c:45:ff:d7:65:fe:84:33:f9:c4:0f:6e:ff:40:e5:ae:
         e3:a4:5f:be:8b:62:7b:f5:4c:b2:6d:16:67:93:56:b4:7f:dd:
         1a:c8:b1:46:7e:ae:20:5c:17:04:f6:04:c8:36:ee:5b:ff:30:
         29:da:71:22:99:08:12:01:b0:c4:dc:4c:02:e6:33:57:66:c1:
         7d:1e:20:f6:1c:dc:8e:1a:0f:56:6a:68:2b:d4:f6:98:60:81:
         75:a1:ed:18:51:35:a2:5c:0b:e1:a6:4f:74:b4:22:dd:88:70:
         c5:40:ee:9e:bd:87:6f:3e:8b:07:ff:33:78:43:02:41:22:65:
         7a:ae:9d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:08 2025 by rpki-client