Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/3230302e332e3139322e302f32342d3234203d3e20323635363936.roa
File:                     3230302e332e3139322e302f32342d3234203d3e20323635363936.roa (raw, json)
Hash identifier:          i3hzzfmuiKTa4TZ8BFPsHHZyM3bV9rkBIJ0c3aDZ1oI=
Subject key identifier:   80:B4:9A:27:5F:51:65:73:7B:77:A0:91:25:71:A9:7D:1D:48:4F:DD
Certificate issuer:       /CN=A4810347EA70678F1F1785A618883EAA51B29441
Certificate serial:       61C92A2CEF8C28BF2A304F5FA5924EBAE348B6D6
Authority key identifier: A4:81:03:47:EA:70:67:8F:1F:17:85:A6:18:88:3E:AA:51:B2:94:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4810347EA70678F1F1785A618883EAA51B29441.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/3230302e332e3139322e302f32342d3234203d3e20323635363936.roa
Signing time:             Tue 04 Feb 2025 18:43:37 +0000
ROA not before:           Tue 04 Feb 2025 18:38:37 +0000
ROA not after:            Tue 03 Feb 2026 18:43:37 +0000
asID:                     265696
IP address blocks:        200.3.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/A4810347EA70678F1F1785A618883EAA51B29441.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/A4810347EA70678F1F1785A618883EAA51B29441.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4810347EA70678F1F1785A618883EAA51B29441.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c9:2a:2c:ef:8c:28:bf:2a:30:4f:5f:a5:92:4e:ba:e3:48:b6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4810347EA70678F1F1785A618883EAA51B29441
        Validity
            Not Before: Feb  4 18:38:37 2025 GMT
            Not After : Feb  3 18:43:37 2026 GMT
        Subject: CN=80B49A275F5165737B77A0912571A97D1D484FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:af:1a:08:ce:96:1e:fe:c0:01:d0:e6:91:
                    7b:8d:0a:55:92:ea:31:3c:8d:91:3e:62:e5:fd:a3:
                    d0:da:79:e2:03:70:73:d9:e2:d8:29:36:11:9f:db:
                    9b:b5:50:fb:c6:31:4a:9d:86:50:55:7f:0d:63:07:
                    9d:22:24:48:61:7d:13:21:d5:d0:39:bf:64:2d:0b:
                    0b:b4:3f:d6:d4:0b:de:4a:e1:ed:fc:da:b8:7e:af:
                    aa:b4:c1:19:a3:00:ff:ab:15:70:0d:f5:b5:36:7d:
                    81:b3:28:2d:a4:8c:19:96:43:b1:76:30:9a:4e:2a:
                    d1:63:19:4d:c5:b5:95:1e:6d:c4:22:f5:d7:17:59:
                    bc:7f:b5:68:0a:25:85:3b:e2:07:21:c6:a8:c4:77:
                    8b:66:f8:e2:e2:40:91:dd:f0:3f:ba:92:fb:7f:4c:
                    9c:dd:0d:3c:19:ce:ea:c1:bb:2f:8a:fe:a2:fd:5b:
                    70:04:83:2c:80:08:fd:ed:61:94:0d:ab:b0:d9:3a:
                    b3:53:cf:f5:ad:5e:00:95:29:f0:61:3d:25:28:b6:
                    00:60:15:da:2b:46:74:3e:92:5d:02:9a:f7:8c:5a:
                    66:8f:b4:39:0e:84:6f:54:2f:2d:4c:d3:71:9e:89:
                    98:22:99:a9:a0:17:d1:d4:2f:7b:33:35:10:b4:a2:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B4:9A:27:5F:51:65:73:7B:77:A0:91:25:71:A9:7D:1D:48:4F:DD
            X509v3 Authority Key Identifier:
                keyid:A4:81:03:47:EA:70:67:8F:1F:17:85:A6:18:88:3E:AA:51:B2:94:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/A4810347EA70678F1F1785A618883EAA51B29441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4810347EA70678F1F1785A618883EAA51B29441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/3230302e332e3139322e302f32342d3234203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:1e:06:f4:0f:23:44:1e:ca:fa:82:11:af:3c:72:54:41:3f:
         7d:8f:8d:e1:9b:8d:90:27:4c:cf:9e:4e:17:27:87:1e:fb:8c:
         77:0e:3b:20:e6:3d:e0:d4:45:c8:d9:5b:91:44:fc:d1:5e:a3:
         27:6c:93:66:64:b8:7c:91:79:2b:7c:18:c1:d8:cd:fe:2f:46:
         58:b3:78:87:19:ad:53:54:67:70:1b:f5:71:f2:bb:fa:4e:64:
         7c:76:c5:2a:18:52:8f:3f:72:53:6f:9a:aa:1b:ac:e8:15:f3:
         d0:b2:22:d4:bb:7c:ac:a5:e1:d8:a0:ca:b0:2c:00:a1:12:7a:
         10:0f:ea:60:69:04:c7:6b:74:68:c7:67:4a:51:33:e0:32:97:
         d4:93:8e:1f:a5:0e:4a:a4:ab:0c:18:c8:ed:60:ab:62:1c:08:
         b4:bb:02:83:d2:24:df:71:31:ad:82:76:f5:d0:c7:f0:52:33:
         bd:e5:55:26:4a:97:b7:b1:e5:53:bb:d1:dd:4e:bb:ca:86:b7:
         d5:dd:8b:bf:75:b4:ca:6f:ae:7f:c1:21:64:c1:c5:88:f9:07:
         04:36:0b:23:68:75:07:d1:66:01:9c:fb:de:8c:2c:13:e3:0f:
         bb:79:a5:30:22:e1:7d:9f:26:20:2e:a9:0d:c8:cf:8a:f3:d7:
         df:7f:94:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:19:59 2025 by rpki-client