Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4567172185850CEC9BE2959E769514AF2262389E8334AE8CCC3A85B879DED61/0/3230302e31302e3133392e302f33302d3332203d3e203130343532.roa
File:                     3230302e31302e3133392e302f33302d3332203d3e203130343532.roa (raw, json)
Hash identifier:          hGVXPNN0P9TuNvQYVwH8gjyF6BecVjGKqVs2TVptLZs=
Subject key identifier:   D4:1A:A1:5F:FE:C0:4E:64:B7:BA:1A:EF:59:0E:C0:AF:30:37:2C:93
Certificate issuer:       /CN=147AF07FFD41440B633C6F37B8B85C5EBD8610B6
Certificate serial:       1643D0B83218208A7D75C1D9CDD0B239634A3A14
Authority key identifier: 14:7A:F0:7F:FD:41:44:0B:63:3C:6F:37:B8:B8:5C:5E:BD:86:10:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/147AF07FFD41440B633C6F37B8B85C5EBD8610B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4567172185850CEC9BE2959E769514AF2262389E8334AE8CCC3A85B879DED61/0/3230302e31302e3133392e302f33302d3332203d3e203130343532.roa
Signing time:             Tue 04 Feb 2025 18:12:52 +0000
ROA not before:           Tue 04 Feb 2025 18:07:52 +0000
ROA not after:            Tue 03 Feb 2026 18:12:52 +0000
asID:                     10452
IP address blocks:        200.10.139.0/30 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C4567172185850CEC9BE2959E769514AF2262389E8334AE8CCC3A85B879DED61/0/147AF07FFD41440B633C6F37B8B85C5EBD8610B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C4567172185850CEC9BE2959E769514AF2262389E8334AE8CCC3A85B879DED61/0/147AF07FFD41440B633C6F37B8B85C5EBD8610B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/147AF07FFD41440B633C6F37B8B85C5EBD8610B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:43:d0:b8:32:18:20:8a:7d:75:c1:d9:cd:d0:b2:39:63:4a:3a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147AF07FFD41440B633C6F37B8B85C5EBD8610B6
        Validity
            Not Before: Feb  4 18:07:52 2025 GMT
            Not After : Feb  3 18:12:52 2026 GMT
        Subject: CN=D41AA15FFEC04E64B7BA1AEF590EC0AF30372C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:4d:b0:87:3d:92:c8:73:e0:a2:7a:24:5a:
                    98:49:b3:4f:ce:4d:de:8b:90:38:58:94:2f:21:2b:
                    21:18:5f:05:68:bb:de:38:3b:14:79:50:ea:78:08:
                    ae:ac:9f:e1:92:46:c8:fc:22:66:f0:99:2b:24:e3:
                    ae:51:e1:1e:6d:1b:8f:b9:e1:e7:0a:27:4a:30:04:
                    24:34:8d:04:60:4c:4e:3e:bd:51:a7:4d:20:0f:73:
                    2f:de:4b:b2:81:f2:e0:39:a2:a1:f6:78:95:0c:42:
                    78:36:03:b5:d8:cb:c3:ad:2b:35:0e:82:f6:a5:be:
                    a6:94:5e:24:0b:fc:56:16:20:a3:bc:16:a2:e6:0a:
                    f2:be:a2:77:d4:d1:ba:56:43:3c:ba:d3:ec:cb:c0:
                    12:2d:ff:cc:a5:18:ff:41:54:01:7f:46:0e:7d:91:
                    6b:d7:e2:62:50:7e:5b:17:cd:45:7c:88:f6:a6:5e:
                    6e:16:72:ec:dd:61:65:6c:18:cf:67:21:86:0c:64:
                    fe:02:99:99:eb:f0:4d:53:3f:7f:bf:cd:06:36:50:
                    3b:2c:06:9a:af:b1:ef:ab:59:e1:0e:52:f8:ca:f2:
                    11:9b:cf:c3:98:14:5f:33:e7:c5:dc:39:a0:f1:ba:
                    b2:0b:a7:2c:61:d1:f9:fe:4d:3a:5e:75:60:6f:4d:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1A:A1:5F:FE:C0:4E:64:B7:BA:1A:EF:59:0E:C0:AF:30:37:2C:93
            X509v3 Authority Key Identifier:
                keyid:14:7A:F0:7F:FD:41:44:0B:63:3C:6F:37:B8:B8:5C:5E:BD:86:10:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4567172185850CEC9BE2959E769514AF2262389E8334AE8CCC3A85B879DED61/0/147AF07FFD41440B633C6F37B8B85C5EBD8610B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/147AF07FFD41440B633C6F37B8B85C5EBD8610B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4567172185850CEC9BE2959E769514AF2262389E8334AE8CCC3A85B879DED61/0/3230302e31302e3133392e302f33302d3332203d3e203130343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.139.0/30

    Signature Algorithm: sha256WithRSAEncryption
         34:c3:51:39:67:8b:74:c2:03:ef:8f:e4:4c:52:f2:d4:77:4c:
         19:42:a8:fd:3d:4b:d8:2b:ad:66:70:46:53:11:25:d0:35:83:
         91:dd:89:70:61:3a:27:c7:c2:2e:c8:a1:e7:bf:f9:c1:75:ab:
         00:69:50:7c:7a:7f:c5:da:6d:2b:f5:1b:86:62:d0:23:fe:52:
         82:1a:3a:5d:1d:fe:7a:38:86:78:91:ca:77:fc:19:88:72:9a:
         10:8b:66:d2:f8:ee:c5:0b:e4:d4:1f:db:b2:73:67:05:b4:de:
         4b:66:64:d0:02:2e:83:18:24:e1:46:9e:d5:8c:07:50:12:40:
         a9:10:15:a5:61:92:96:0b:19:91:70:ce:bd:69:f0:53:51:c2:
         f7:28:80:d4:9a:d1:71:9b:97:e2:dd:99:d5:2c:06:97:97:c3:
         cb:5c:fd:37:6b:b5:a0:59:8f:c0:6c:81:e5:ec:65:bf:bc:69:
         15:cd:b8:a1:ac:96:78:24:ed:02:26:a2:59:c7:ea:be:6c:60:
         09:08:ba:21:fd:4b:1b:e8:8f:1e:a0:5f:a6:c2:5c:32:bd:16:
         fb:da:1a:02:2e:74:ce:b7:71:e4:88:8f:5c:09:6c:f0:89:b3:
         89:3b:6d:b3:35:57:2f:e8:a8:20:c3:96:47:7b:83:e6:3e:fe:
         c2:e2:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:01 2025 by rpki-client