Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e372e31362e302f32302d3231203d3e203237363531.roa
File:                     3230302e372e31362e302f32302d3231203d3e203237363531.roa (raw, json)
Hash identifier:          V15NFzJplCH0LEBR2x3+lQxKFRTmGIf8TTRNstu5ljI=
Subject key identifier:   6F:36:D7:65:8C:B4:02:85:09:7A:F3:52:D8:81:B3:54:A2:F2:69:E1
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       7948E6CC3737FF4C176B6C1C0A99A04CE12AB6A7
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e372e31362e302f32302d3231203d3e203237363531.roa
Signing time:             Tue 04 Feb 2025 19:56:34 +0000
ROA not before:           Tue 04 Feb 2025 19:51:34 +0000
ROA not after:            Tue 03 Feb 2026 19:56:34 +0000
asID:                     27651
IP address blocks:        200.7.16.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:48:e6:cc:37:37:ff:4c:17:6b:6c:1c:0a:99:a0:4c:e1:2a:b6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Feb  4 19:51:34 2025 GMT
            Not After : Feb  3 19:56:34 2026 GMT
        Subject: CN=6F36D7658CB40285097AF352D881B354A2F269E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fe:3b:f6:8e:40:5e:52:b9:b7:a4:85:b2:c0:
                    6a:78:87:b3:44:9f:79:f0:d0:ad:8c:9e:dd:f4:d7:
                    9e:86:4a:dc:5e:f6:2b:f0:99:c1:ed:31:d6:a2:f6:
                    7a:dc:ba:31:ba:1f:8a:06:e8:98:7c:fd:12:39:54:
                    4d:e0:16:27:e8:f0:38:ae:52:4e:48:e4:cd:cf:31:
                    26:0b:8b:ee:de:46:5d:fd:ea:01:69:3f:cf:9a:7c:
                    5e:c7:ce:1c:4d:3b:41:1e:68:94:9b:bb:70:9b:5e:
                    6d:8e:91:99:b0:a0:8e:09:a4:d1:e0:95:51:7a:31:
                    f4:b1:23:b4:cd:e5:b4:93:7e:4a:75:40:bb:78:a0:
                    50:55:ba:39:cc:ea:64:3c:3e:19:8e:d7:b3:61:27:
                    bd:6c:13:e6:9f:a4:4e:fb:8a:ef:63:4f:77:95:9c:
                    56:fc:1b:c2:03:f5:40:7a:5b:53:b3:c5:23:0e:c4:
                    5e:bb:31:91:2d:dc:e1:21:25:a2:dd:70:f0:3c:7b:
                    eb:70:47:7d:74:7a:00:37:0a:6f:d7:f6:94:13:16:
                    d5:e1:36:2a:f4:07:6d:f9:16:12:04:d6:32:f1:10:
                    70:8a:2c:7a:a6:cf:70:6a:b8:80:b5:ef:57:32:30:
                    79:3e:cf:1c:3d:f9:71:aa:c7:da:28:6c:f4:52:4e:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:36:D7:65:8C:B4:02:85:09:7A:F3:52:D8:81:B3:54:A2:F2:69:E1
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e372e31362e302f32302d3231203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:2e:84:ed:be:6a:45:9c:fc:27:9c:bf:ce:ba:c8:cb:bd:fc:
         20:27:da:88:9c:13:0b:52:26:98:d9:c6:85:17:ca:71:da:57:
         12:69:11:b0:7d:37:00:1a:04:f8:51:b8:b0:58:0d:7c:bb:9e:
         37:9a:7b:72:34:0a:8c:4b:bf:e3:48:bc:d7:6f:7a:7d:0a:23:
         64:3d:26:aa:9f:1d:84:e4:5f:3b:7c:1b:8b:a7:26:47:d8:8a:
         31:ae:6b:a4:c3:50:99:c3:f1:2f:c5:af:56:5a:d5:c0:77:f5:
         b9:db:98:9f:3a:f3:20:47:ff:77:cc:e8:26:15:3a:2b:c0:b7:
         68:3a:29:ea:57:fc:d5:79:1f:54:d1:d4:4a:4a:88:28:7f:41:
         5f:d3:d5:72:27:78:d1:e6:e9:04:3b:a7:6a:c1:f8:ca:e8:18:
         f1:ef:47:db:43:33:b3:56:4e:c5:bd:7f:00:13:d4:ba:53:83:
         c1:22:22:4b:1c:fa:58:3f:15:3c:68:72:5a:25:b6:5c:6a:9d:
         4c:91:5a:97:a7:29:be:dd:8b:bd:f2:56:4b:2d:31:9d:09:dd:
         65:c5:7a:3f:78:6c:75:92:94:62:86:1b:ab:b0:5c:18:04:21:
         0c:d6:ed:40:d1:92:12:cc:9a:40:61:2e:91:89:b8:72:75:b6:
         8e:57:36:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:44 2025 by rpki-client