Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e36342e302f31382d3234203d3e203136383134.roa
File:                     3230302e36382e36342e302f31382d3234203d3e203136383134.roa (raw, json)
Hash identifier:          49RybJpTvdc6o7PPhe9KVzEROl65Ax80/j06GwaCXzI=
Subject key identifier:   01:3A:EA:93:1A:6F:FE:BF:A0:6B:05:90:F8:EB:EB:67:A8:D7:FE:F7
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       35E39ABC0B494F751F9710061DE9497D33292461
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e36342e302f31382d3234203d3e203136383134.roa
Signing time:             Tue 04 Feb 2025 20:04:12 +0000
ROA not before:           Tue 04 Feb 2025 19:59:12 +0000
ROA not after:            Tue 03 Feb 2026 20:04:12 +0000
asID:                     16814
IP address blocks:        200.68.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e3:9a:bc:0b:49:4f:75:1f:97:10:06:1d:e9:49:7d:33:29:24:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Feb  4 19:59:12 2025 GMT
            Not After : Feb  3 20:04:12 2026 GMT
        Subject: CN=013AEA931A6FFEBFA06B0590F8EBEB67A8D7FEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:b5:91:37:de:93:fa:cc:6a:d8:04:ac:85:
                    81:d1:9b:27:51:9a:bf:4a:aa:13:56:90:59:37:2d:
                    fa:3f:bf:d5:8d:f6:a2:6a:48:f3:e0:f6:87:45:46:
                    75:de:77:cf:a8:53:b7:ce:75:ad:99:be:ad:ce:49:
                    fc:24:1c:ec:62:16:0b:bc:5f:b0:5e:c5:ca:d7:9d:
                    2b:49:67:14:af:09:3f:0d:8b:e2:e5:6e:76:9a:85:
                    b1:f5:43:08:cf:48:07:64:89:dc:d3:62:60:8d:26:
                    9b:12:01:c6:98:ac:24:e4:83:ec:7b:ed:5d:ad:d6:
                    2e:59:88:44:d1:0c:06:97:13:03:5a:ae:73:6e:40:
                    fd:02:66:f7:e8:73:bb:83:fe:42:0f:a6:6d:12:3d:
                    4e:2b:4d:fc:e6:26:df:f4:2f:59:38:4d:8e:22:3b:
                    a8:57:95:34:c8:f3:33:35:8d:b7:dc:84:d5:5b:cd:
                    dc:26:14:bc:bd:9e:67:2a:bc:f8:02:dc:2d:7a:11:
                    d6:4e:24:85:89:a9:79:53:50:e6:b9:e7:69:2e:d7:
                    a3:03:68:2b:f7:ff:21:91:35:16:85:0b:a1:e0:5f:
                    c5:86:18:d0:3d:c5:86:ee:50:cb:07:4a:bb:40:ed:
                    cd:07:01:a7:ae:6d:44:59:bb:30:39:d3:24:44:0f:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3A:EA:93:1A:6F:FE:BF:A0:6B:05:90:F8:EB:EB:67:A8:D7:FE:F7
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e36342e302f31382d3234203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:06:0f:35:76:bb:8e:74:15:c8:b4:79:75:ea:8d:0a:c7:5e:
         27:da:91:35:5c:b6:dd:30:24:2c:f3:2c:00:fa:87:1d:c2:4e:
         8e:3b:a3:88:f2:7c:f0:0a:7a:51:4e:42:c8:81:05:79:23:62:
         d7:40:f4:9a:dd:6a:a9:eb:7a:46:47:da:1d:52:be:21:8f:72:
         c6:fa:3f:2b:e3:10:06:59:d5:e3:58:8a:ad:75:d1:dc:58:93:
         59:b3:e8:46:8b:39:29:3b:53:1b:13:45:e2:a8:50:c0:d3:99:
         a4:b3:7e:91:2d:13:91:83:86:8d:1e:c7:6b:84:04:08:14:1e:
         f9:c5:fa:3b:13:41:63:5e:d9:00:3a:8e:01:62:3e:30:c4:53:
         d5:18:f3:bb:cf:e9:30:0e:ba:84:85:38:82:96:a0:8d:5d:c7:
         a4:89:af:69:91:4a:d0:f3:0f:38:2d:0a:53:33:ca:63:a6:54:
         59:d4:8d:fd:40:2b:bc:f6:18:27:42:7f:fe:cf:f4:1a:ea:81:
         47:99:99:10:fc:f5:8d:9b:6e:49:c4:d3:23:49:02:d9:15:76:
         c8:d4:34:4d:98:1d:d0:10:a1:ed:7f:24:94:18:c0:d5:4f:2c:
         10:90:e1:74:d3:a3:e1:da:d0:49:3f:19:b9:54:ff:85:bf:d4:
         84:07:17:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:38:14 2025 by rpki-client