Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3230302e32362e3137362e302f32312d3234203d3e203233323031.roa
File:                     3230302e32362e3137362e302f32312d3234203d3e203233323031.roa (raw, json)
Hash identifier:          Gbw9JfiMJGmBNxkDmLn8KiYuhfCvH0wLP7VEAmaCwC8=
Subject key identifier:   4B:98:99:B0:94:AB:BD:5A:6C:06:DB:AC:96:2A:AC:95:7E:DF:CF:DC
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       461AC37AF286AAC35DC2CF0E46E9F9F70F684666
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3230302e32362e3137362e302f32312d3234203d3e203233323031.roa
Signing time:             Tue 04 Feb 2025 18:40:26 +0000
ROA not before:           Tue 04 Feb 2025 18:35:26 +0000
ROA not after:            Tue 03 Feb 2026 18:40:26 +0000
asID:                     23201
IP address blocks:        200.26.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1a:c3:7a:f2:86:aa:c3:5d:c2:cf:0e:46:e9:f9:f7:0f:68:46:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Feb  4 18:35:26 2025 GMT
            Not After : Feb  3 18:40:26 2026 GMT
        Subject: CN=4B9899B094ABBD5A6C06DBAC962AAC957EDFCFDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:1e:dc:4a:f1:85:01:df:e7:6b:6c:db:71:
                    4b:45:b1:ce:37:31:33:97:5b:af:b2:35:47:36:92:
                    4a:44:08:84:bf:1d:bb:39:4f:c2:b1:fc:29:6d:2d:
                    66:24:4a:cf:0a:12:47:b1:0a:f2:7c:d5:59:86:fb:
                    8c:27:01:02:aa:17:4d:49:b1:97:eb:66:f3:cf:1e:
                    55:c1:f0:3d:bf:89:ef:02:44:60:49:d6:fb:f3:36:
                    6c:fd:ca:87:28:de:69:d9:53:60:98:2b:b7:50:af:
                    93:c2:ce:0d:ad:e4:26:73:49:3e:31:ce:f8:44:e3:
                    9b:66:5b:49:3f:9d:ac:fc:18:da:8f:30:2c:fa:8e:
                    7f:5c:19:5b:80:b4:ca:0d:52:16:cc:12:9d:16:e1:
                    25:4b:25:7e:c6:af:c7:34:81:64:eb:52:c1:3c:a2:
                    14:ed:73:fa:9a:de:0a:6e:ac:b5:77:99:be:df:63:
                    76:69:b3:80:aa:d3:e5:40:3e:5c:37:a4:63:79:08:
                    c0:7c:ee:7e:7b:71:a3:74:30:f1:af:8c:ad:84:24:
                    75:5d:8f:1d:ce:9a:e4:38:57:11:7a:92:3b:e3:ed:
                    27:1e:c6:9f:5c:b1:c1:8b:f3:5f:23:21:28:3b:87:
                    a7:b7:c7:6e:37:47:d7:b6:72:2a:e6:4f:07:0c:6e:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:98:99:B0:94:AB:BD:5A:6C:06:DB:AC:96:2A:AC:95:7E:DF:CF:DC
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3230302e32362e3137362e302f32312d3234203d3e203233323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:ef:95:24:3d:aa:1d:a4:e5:84:cf:e9:bb:0d:d2:51:6c:d8:
         b6:00:a6:6b:2b:e8:cb:20:3a:b5:8f:a8:53:55:58:ab:df:2a:
         f3:eb:51:4f:f0:42:0f:88:6c:f0:c9:16:16:b8:77:47:76:2c:
         48:37:d7:4d:24:d3:32:0d:dc:23:99:a6:57:d0:83:ba:cc:05:
         7a:37:2f:72:29:10:17:c8:df:b5:c3:e0:06:c3:21:07:ca:aa:
         9c:8a:48:dd:ef:e7:1e:2d:93:cb:0b:cd:17:69:2a:70:65:35:
         f5:46:7a:8b:81:08:52:50:21:00:0d:a5:7a:05:f4:db:ea:2f:
         1e:6d:e9:66:23:40:87:7e:21:e2:40:7e:36:f3:ca:f1:56:7e:
         5a:a4:a3:01:66:8d:be:cb:89:9f:b1:7e:fa:a3:9f:7d:21:e6:
         a7:f3:4d:e8:a9:e6:1c:f9:71:b6:80:67:cd:f4:79:b6:62:14:
         75:11:7c:8a:b5:56:ac:c8:bf:26:c5:b4:0d:a7:ed:42:d6:c8:
         27:28:70:e5:1c:a3:d5:66:9e:b7:78:78:58:ec:c1:d6:d8:4a:
         49:44:49:ce:00:c6:8b:e0:b4:2c:27:88:c4:60:ae:ab:7c:64:
         b6:ba:3f:ab:0f:f4:a0:ef:f5:29:6a:a7:91:9d:44:0b:72:26:
         75:5e:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:17 2025 by rpki-client