Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e37362e39362e302f32302d3234203d3e203136353331.roa
File:                     3230302e37362e39362e302f32302d3234203d3e203136353331.roa (raw, json)
Hash identifier:          CNgTTa5W9lPRLFY0Uji1+LVSgTAijkz0OIid8B19UGk=
Subject key identifier:   19:01:44:24:B7:AB:DB:DE:E7:22:EF:47:23:41:D9:15:0A:CD:27:49
Certificate issuer:       /CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A
Certificate serial:       6FA7D343FB0D2D70F548D6089BAB9ECC225CDF4B
Authority key identifier: 2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e37362e39362e302f32302d3234203d3e203136353331.roa
Signing time:             Tue 04 Feb 2025 18:29:35 +0000
ROA not before:           Tue 04 Feb 2025 18:24:35 +0000
ROA not after:            Tue 03 Feb 2026 18:29:35 +0000
asID:                     16531
IP address blocks:        200.76.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a7:d3:43:fb:0d:2d:70:f5:48:d6:08:9b:ab:9e:cc:22:5c:df:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A
        Validity
            Not Before: Feb  4 18:24:35 2025 GMT
            Not After : Feb  3 18:29:35 2026 GMT
        Subject: CN=19014424B7ABDBDEE722EF472341D9150ACD2749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:e2:ce:4a:ff:62:48:02:6c:22:18:9d:3c:
                    15:af:24:5c:47:a4:77:8d:3c:8f:dd:4e:72:55:af:
                    bc:f2:a3:02:17:02:76:95:e6:1f:fc:7c:b3:a0:78:
                    d9:85:17:bb:20:d2:b2:00:98:61:f9:5c:4e:9b:be:
                    4d:56:03:21:13:70:1c:5b:f4:c0:7e:5b:df:42:c6:
                    d3:f1:90:48:b9:7e:00:c8:d1:0b:c3:4a:23:77:62:
                    8a:78:e8:1f:b6:2c:c6:67:b4:bb:a6:03:52:47:40:
                    79:fb:10:f0:f7:39:06:54:57:60:7d:3f:39:51:63:
                    9f:2e:3d:51:1f:b2:ae:8b:17:56:b7:2e:90:40:d9:
                    ee:85:f3:12:e4:92:c7:8e:6f:18:b1:41:b5:cf:e5:
                    02:ba:dd:3f:d8:f7:e0:93:96:30:bb:1f:84:a5:de:
                    ab:2c:cf:9a:96:aa:36:14:dd:41:1b:a3:b8:09:14:
                    a3:6b:94:76:9b:5d:09:f4:63:3d:de:a9:66:88:a3:
                    81:af:56:ef:6b:9d:be:11:ab:2b:7d:a8:37:f8:d7:
                    99:46:7f:aa:4b:02:a1:64:c1:50:3d:a0:3b:eb:66:
                    a2:47:b8:e3:59:0e:de:9e:67:d4:ae:54:40:62:7c:
                    35:c4:21:5f:74:46:4c:e7:05:f0:e3:ad:c5:5c:9f:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:01:44:24:B7:AB:DB:DE:E7:22:EF:47:23:41:D9:15:0A:CD:27:49
            X509v3 Authority Key Identifier:
                keyid:2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3230302e37362e39362e302f32302d3234203d3e203136353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:d4:cc:9f:50:c5:ce:27:f5:ed:77:5a:3b:0c:3d:a4:0d:c7:
         b7:82:a9:05:7a:89:19:a0:dd:d1:59:56:43:26:c8:02:8c:d4:
         27:66:48:ea:0d:e3:39:4f:91:dd:a3:c0:5b:fb:20:d1:3b:ed:
         4f:d8:f1:4b:99:e5:b6:3f:60:c2:cf:ab:b0:50:ee:fc:16:e1:
         c5:35:ab:27:a5:aa:d9:11:10:0f:1b:dd:be:15:0d:54:0b:94:
         8f:6f:31:5d:ab:88:e6:cc:97:0b:6c:a5:c3:e0:1b:49:52:c4:
         4d:32:68:12:e8:b9:10:7c:0e:67:b8:7a:b2:26:7f:12:51:fa:
         b0:4a:ce:b3:e1:39:44:bd:37:a2:4a:27:f7:05:a5:ab:eb:9b:
         0a:52:72:04:77:8e:21:a5:48:6a:b7:0d:05:5a:14:0c:92:18:
         8f:19:b9:2b:75:da:bc:93:67:fd:75:c3:9d:f9:bf:fa:6f:31:
         da:49:ce:c1:cc:e9:98:72:ab:40:2f:e7:37:51:57:bc:5d:06:
         1d:c8:9a:55:fe:73:a3:c0:ea:7a:da:3f:7c:57:4a:9e:46:d6:
         0f:78:63:e0:ff:ba:9d:be:15:a3:b4:a9:2a:f3:ff:5f:14:fa:
         18:26:e8:48:32:65:c6:40:63:69:ec:ee:71:21:d9:5c:97:4d:
         f3:b2:77:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:36:07 2025 by rpki-client