Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36392e3139322e302f31382d3234203d3e203136383134.roa
File:                     3230302e36392e3139322e302f31382d3234203d3e203136383134.roa (raw, json)
Hash identifier:          XBLhwK4SeV/2VXOUXNkzAZ4wYGRAnYAB4yQTyKj1jjY=
Subject key identifier:   46:77:32:42:9B:25:32:6B:35:2F:D1:B5:C8:FA:F5:C3:11:95:A0:19
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       0A3BF8B08B3FBE757F93D755A231F1E39FB4E907
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36392e3139322e302f31382d3234203d3e203136383134.roa
Signing time:             Tue 04 Feb 2025 20:04:08 +0000
ROA not before:           Tue 04 Feb 2025 19:59:08 +0000
ROA not after:            Tue 03 Feb 2026 20:04:08 +0000
asID:                     16814
IP address blocks:        200.69.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3b:f8:b0:8b:3f:be:75:7f:93:d7:55:a2:31:f1:e3:9f:b4:e9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Feb  4 19:59:08 2025 GMT
            Not After : Feb  3 20:04:08 2026 GMT
        Subject: CN=467732429B25326B352FD1B5C8FAF5C31195A019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:34:96:72:32:4b:10:ec:ec:07:ed:c4:5a:
                    8a:22:75:4b:28:11:72:2e:3f:73:2a:da:d7:cc:c3:
                    8d:98:35:f9:03:45:31:8a:bb:17:4e:0f:23:22:01:
                    a0:33:f9:54:9c:87:80:e4:b0:85:f0:7b:d4:7c:9d:
                    b7:3c:6c:79:87:4a:93:55:98:0e:c0:5c:ee:49:37:
                    d1:63:c0:75:d1:fa:b6:12:45:41:d0:4f:b8:dd:ec:
                    24:f8:11:3a:62:d5:e1:bf:a4:ca:18:78:3b:ec:b6:
                    07:17:e2:57:03:5e:dc:64:2b:23:b8:9b:4a:51:32:
                    fd:a2:95:40:43:a2:02:9a:3b:c7:a9:3a:42:0e:e8:
                    bf:68:26:a6:6b:5e:80:db:c0:1c:df:d1:8f:66:ff:
                    37:1e:2e:74:cc:81:59:0b:1c:10:99:b9:6c:7f:ad:
                    0e:6f:ce:fa:62:69:95:76:28:a1:57:60:8d:36:75:
                    d3:d4:e4:0b:bc:cc:49:bf:54:df:c3:9e:69:8e:40:
                    cf:2c:38:52:a5:3a:98:ad:18:ed:47:fb:f2:4a:2e:
                    19:d6:ac:a3:fa:c2:7e:53:d8:5a:a2:ba:25:7d:90:
                    88:4c:91:20:a4:3b:1b:f8:99:c6:61:1d:fe:87:49:
                    32:3d:98:7f:2d:8a:0c:0f:2e:39:6d:ad:3b:be:7a:
                    d8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:77:32:42:9B:25:32:6B:35:2F:D1:B5:C8:FA:F5:C3:11:95:A0:19
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36392e3139322e302f31382d3234203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9c:15:1f:b0:7c:30:8d:20:d9:fb:e1:3b:9f:3c:36:55:86:5c:
         6d:e1:2a:6e:61:89:67:9b:d8:3d:66:e1:a2:cb:99:ca:4b:8c:
         9d:bf:c3:c2:8a:a3:5c:15:53:f8:df:f2:ae:90:b5:9c:63:0b:
         63:7d:c0:13:9c:08:c2:f0:ca:26:04:2c:49:be:b2:78:fd:24:
         db:3f:9b:02:e0:c2:c9:51:ac:5f:5d:7e:92:04:b5:d3:52:2b:
         d3:f3:b1:bf:a9:8f:93:b7:5e:4d:f5:e1:2f:72:91:f5:5a:27:
         46:2a:8e:32:b3:7c:f8:19:a6:60:11:1a:39:07:f9:c5:9b:c7:
         b4:6b:65:ac:06:38:a8:34:1c:c3:ac:8f:78:71:38:c6:e0:64:
         c1:06:11:d2:eb:89:13:90:1b:dd:a1:fa:d2:55:a4:6f:f6:aa:
         8a:23:35:41:03:32:b2:41:f9:e5:27:73:ed:58:29:9e:28:2d:
         a3:68:30:d3:ae:23:14:fc:90:54:50:39:4f:6c:4d:3d:c1:b0:
         4a:7a:cc:7a:04:6e:de:58:27:47:e5:9f:c3:b5:fc:71:a6:d1:
         46:61:11:78:eb:30:02:ef:fe:eb:49:c0:8e:ee:2f:12:73:94:
         f4:e6:ec:e3:48:43:5e:cd:99:45:a4:09:2f:ac:b0:10:8c:fc:
         17:b7:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:38:01 2025 by rpki-client