Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3234302e302f32302d3233203d3e203132303636.roa
File:                     3230302e34322e3234302e302f32302d3233203d3e203132303636.roa (raw, json)
Hash identifier:          776uSe53RfBCUzJQA2RKPpmiCKGSlHkWiN8/eN1iRXQ=
Subject key identifier:   19:5C:2B:F8:5D:2F:B2:D9:29:46:D5:2D:56:B4:26:4D:D3:C1:77:D1
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       47E77EFA06FBFA6461E8E689AB7D9E4C6D89066E
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3234302e302f32302d3233203d3e203132303636.roa
Signing time:             Tue 04 Feb 2025 18:47:05 +0000
ROA not before:           Tue 04 Feb 2025 18:42:05 +0000
ROA not after:            Tue 03 Feb 2026 18:47:05 +0000
asID:                     12066
IP address blocks:        200.42.240.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e7:7e:fa:06:fb:fa:64:61:e8:e6:89:ab:7d:9e:4c:6d:89:06:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:42:05 2025 GMT
            Not After : Feb  3 18:47:05 2026 GMT
        Subject: CN=195C2BF85D2FB2D92946D52D56B4264DD3C177D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:39:d0:05:fb:5c:23:a5:76:db:0c:54:b3:
                    67:cb:e3:f2:d5:08:78:f0:95:49:44:d8:78:26:ed:
                    ec:84:f0:b8:51:7f:fc:3d:8f:5b:09:6e:b4:09:a8:
                    20:0b:96:a2:d8:49:6d:8f:f1:e4:0f:b8:8d:d1:66:
                    1e:cc:6e:bc:2a:0d:78:69:30:ca:ff:1d:7c:56:91:
                    e0:be:5d:1a:c9:c3:aa:f2:f7:ad:b7:c7:68:06:4b:
                    2f:7e:69:c2:26:ea:f3:39:e9:fc:98:9a:ff:58:9d:
                    3a:1f:27:62:91:6f:4c:bc:af:6f:4f:56:80:8c:5d:
                    e1:ed:e8:cf:9a:2d:06:52:b3:5d:bb:09:aa:99:46:
                    b7:70:19:77:9c:86:ee:f3:76:70:a1:1a:76:72:24:
                    a6:3e:de:c3:ff:10:30:7f:5e:0d:68:b1:fb:15:ab:
                    f6:b9:a7:79:3d:55:03:a8:2c:b2:94:f2:43:fe:d3:
                    d4:66:32:a3:91:ec:53:76:6a:fa:e2:1f:72:14:36:
                    47:2f:73:3a:6d:41:59:38:a4:f7:c4:5c:3d:8b:a7:
                    ca:bd:5e:49:7b:cf:4e:cf:a5:85:c2:13:5a:78:01:
                    f7:56:cd:64:94:e1:5a:0f:0b:61:9e:90:f3:4d:4a:
                    14:75:0e:12:c6:94:6e:64:bb:a1:9a:34:9a:8c:f0:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5C:2B:F8:5D:2F:B2:D9:29:46:D5:2D:56:B4:26:4D:D3:C1:77:D1
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3234302e302f32302d3233203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:ec:2e:6e:f8:f2:c5:8a:5d:2c:a8:96:08:a8:24:ee:18:aa:
         ec:ca:03:eb:f9:0c:e6:4a:4d:01:f9:b2:13:4f:93:ab:80:6f:
         0e:c0:c5:d2:1d:f9:c2:b4:4f:fd:58:e5:e6:29:cd:35:0b:8b:
         ba:60:75:35:6e:46:c6:bc:b6:96:15:1b:43:d5:a7:42:ee:fe:
         a8:e2:54:64:ea:03:22:25:96:1c:90:6a:db:87:4b:d5:7e:1f:
         8f:a8:41:fa:30:44:b8:4d:10:f3:5f:58:01:97:bc:4f:2a:b4:
         02:44:9a:ac:dc:d3:62:06:ea:00:01:40:09:0a:f7:6c:f2:69:
         87:51:26:b2:78:7a:e3:e0:76:21:6a:47:e3:da:34:a9:98:67:
         f9:6a:d1:18:0f:53:97:42:f8:d4:a8:b2:43:46:e3:8e:f1:f5:
         53:18:28:6f:f7:31:5d:1e:93:f6:62:69:81:58:2f:61:6d:56:
         8a:52:21:12:8f:28:f5:60:65:07:ff:a1:b1:b7:c8:7a:82:53:
         99:41:92:b0:2a:1d:1d:21:31:36:93:eb:0d:7b:e7:ab:e5:25:
         f9:e2:36:cf:42:33:64:72:30:58:92:43:d2:35:4e:99:8b:97:
         54:ef:67:fb:a5:78:c9:6b:4e:ba:4a:cc:9f:f6:d8:ee:a1:7f:
         ee:09:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:40 2025 by rpki-client