Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4A6241FACA7C561DDC59405131228389B7B96D56DD6CACA7DE7D2D320DD0FE2/0/3230302e3132362e34382e302f32342d3234203d3e20323632323537.roa
File:                     3230302e3132362e34382e302f32342d3234203d3e20323632323537.roa (raw, json)
Hash identifier:          HYXSDeIXHIuU4JtpZ/CAkhOtytqJhQCdZ4PzN9AYbJw=
Subject key identifier:   29:3E:5F:E2:84:4E:65:10:FD:76:AF:EB:CA:CA:DE:3F:9C:27:03:69
Certificate issuer:       /CN=184235E31F698CFFFECF0E6820F30FD56301CEE5
Certificate serial:       7B21884AD10FC84626B97F53D7C648F553D811A2
Authority key identifier: 18:42:35:E3:1F:69:8C:FF:FE:CF:0E:68:20:F3:0F:D5:63:01:CE:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/184235E31F698CFFFECF0E6820F30FD56301CEE5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4A6241FACA7C561DDC59405131228389B7B96D56DD6CACA7DE7D2D320DD0FE2/0/3230302e3132362e34382e302f32342d3234203d3e20323632323537.roa
Signing time:             Tue 04 Feb 2025 19:58:30 +0000
ROA not before:           Tue 04 Feb 2025 19:53:30 +0000
ROA not after:            Tue 03 Feb 2026 19:58:30 +0000
asID:                     262257
IP address blocks:        200.126.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C4A6241FACA7C561DDC59405131228389B7B96D56DD6CACA7DE7D2D320DD0FE2/0/184235E31F698CFFFECF0E6820F30FD56301CEE5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C4A6241FACA7C561DDC59405131228389B7B96D56DD6CACA7DE7D2D320DD0FE2/0/184235E31F698CFFFECF0E6820F30FD56301CEE5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/184235E31F698CFFFECF0E6820F30FD56301CEE5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 14:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:21:88:4a:d1:0f:c8:46:26:b9:7f:53:d7:c6:48:f5:53:d8:11:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184235E31F698CFFFECF0E6820F30FD56301CEE5
        Validity
            Not Before: Feb  4 19:53:30 2025 GMT
            Not After : Feb  3 19:58:30 2026 GMT
        Subject: CN=293E5FE2844E6510FD76AFEBCACADE3F9C270369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bd:ac:e6:c2:86:f5:26:d3:bc:13:52:42:1d:
                    db:15:b9:58:50:b0:76:83:b4:bf:f8:3a:25:cc:e9:
                    3c:81:d6:01:9b:c0:03:0d:2e:43:dd:08:93:93:7e:
                    07:bb:85:b7:1e:0e:f2:a1:48:8e:6a:c7:3a:5f:4c:
                    00:bc:d9:2f:2e:26:16:f8:f4:c3:b0:01:62:1d:64:
                    e9:92:75:12:50:64:28:86:8a:48:7c:1e:bf:9e:2f:
                    e1:55:f7:01:29:fb:a7:2b:8c:89:63:7a:28:11:3a:
                    d9:04:fa:eb:90:20:f4:45:81:06:1e:89:d1:ea:8a:
                    29:ac:e4:f1:d4:6d:b5:89:65:94:e9:7b:5c:3a:94:
                    8b:5b:f9:e9:d5:50:bb:0b:e2:f9:b0:af:82:75:b8:
                    75:e9:00:f8:a8:82:2f:be:a3:a7:90:b4:80:0a:96:
                    06:03:8e:95:23:00:91:3d:ee:0f:38:65:b9:bf:fe:
                    09:e5:d4:2a:af:ba:8c:d3:40:53:4c:97:56:7f:00:
                    1a:6d:66:bd:06:03:6f:79:2f:62:6c:78:25:c0:38:
                    24:69:e3:7e:bd:52:c6:b5:aa:dc:76:01:f3:e3:2f:
                    11:07:3d:24:2b:ee:e6:4e:fa:79:42:ae:ff:1b:67:
                    12:1b:5b:a2:d0:2d:db:56:65:66:33:47:38:09:f2:
                    e5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3E:5F:E2:84:4E:65:10:FD:76:AF:EB:CA:CA:DE:3F:9C:27:03:69
            X509v3 Authority Key Identifier:
                keyid:18:42:35:E3:1F:69:8C:FF:FE:CF:0E:68:20:F3:0F:D5:63:01:CE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4A6241FACA7C561DDC59405131228389B7B96D56DD6CACA7DE7D2D320DD0FE2/0/184235E31F698CFFFECF0E6820F30FD56301CEE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/184235E31F698CFFFECF0E6820F30FD56301CEE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4A6241FACA7C561DDC59405131228389B7B96D56DD6CACA7DE7D2D320DD0FE2/0/3230302e3132362e34382e302f32342d3234203d3e20323632323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:fe:19:cb:f1:95:34:78:e3:69:d9:c3:3f:e9:7e:e7:3f:d2:
         52:3b:cc:1d:1f:4f:64:40:0d:b1:4f:2b:48:f8:08:9a:81:97:
         87:13:6f:90:28:c6:4c:fe:7b:44:89:4b:77:78:c0:d4:a2:e2:
         b0:6e:a2:54:83:60:ea:ab:37:0a:2a:de:13:91:15:92:47:61:
         25:3d:33:0f:fa:7e:cb:67:45:00:a5:3c:e3:12:f3:46:f8:f5:
         24:0f:22:a4:f6:4c:cd:32:42:34:e8:fb:f5:f0:58:31:a5:c7:
         fd:57:89:e9:2b:f6:33:3d:74:41:b8:ae:48:8b:37:c4:e5:4f:
         18:4c:7c:52:62:fb:83:6a:40:de:d5:be:43:0b:cf:ef:db:35:
         06:fb:cf:2a:37:23:ef:29:91:a3:77:d6:8c:bc:07:ad:83:6d:
         78:95:84:02:57:b2:da:c8:ca:7e:df:54:7e:58:05:77:94:37:
         85:ca:8a:95:a2:7a:1e:a3:da:b0:2a:57:4d:74:57:3f:9c:4f:
         74:a1:c4:e8:7f:65:9f:79:7a:12:74:30:b0:50:b5:5d:c7:32:
         c4:f9:9c:8c:6f:07:a4:3a:df:5e:a4:e7:d1:32:ca:e7:1a:67:
         dd:e7:54:ba:cc:dc:f8:44:8e:f9:ca:19:1c:c8:ec:6a:9e:d0:
         d3:f3:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:51:34 2025 by rpki-client