Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/3230302e3131352e34312e302f32342d3234203d3e203532333435.roa
File:                     3230302e3131352e34312e302f32342d3234203d3e203532333435.roa (raw, json)
Hash identifier:          hSVdINcDcPVuQRdItapxty5I0JYdEQQi1+Pa5ucavJU=
Subject key identifier:   18:C7:AB:1A:31:3F:29:B4:B0:5F:73:41:8D:96:54:B2:77:40:01:20
Certificate issuer:       /CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E
Certificate serial:       1788ED1FB9FEB8097CF8027843917DB6DC058D66
Authority key identifier: 37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/3230302e3131352e34312e302f32342d3234203d3e203532333435.roa
Signing time:             Tue 04 Feb 2025 20:05:20 +0000
ROA not before:           Tue 04 Feb 2025 20:00:20 +0000
ROA not after:            Tue 03 Feb 2026 20:05:20 +0000
asID:                     52345
IP address blocks:        200.115.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:88:ed:1f:b9:fe:b8:09:7c:f8:02:78:43:91:7d:b6:dc:05:8d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E
        Validity
            Not Before: Feb  4 20:00:20 2025 GMT
            Not After : Feb  3 20:05:20 2026 GMT
        Subject: CN=18C7AB1A313F29B4B05F73418D9654B277400120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:a3:c6:8b:b2:4a:83:ea:23:a2:f3:f3:4d:
                    e0:21:96:13:53:5d:04:ac:b5:55:35:fe:ad:94:b0:
                    4c:40:d8:88:19:01:74:e8:2b:8a:47:cf:45:5c:b4:
                    08:c7:af:fb:09:ca:b8:97:68:ac:c9:d4:e0:d2:f3:
                    d2:09:5a:7e:54:d5:75:70:d5:d6:92:73:32:a8:f0:
                    26:36:d0:22:74:04:f0:bd:fd:5d:e6:e3:a2:ba:6c:
                    e8:18:56:1b:7b:62:cf:ec:29:ee:7b:6f:cd:62:2a:
                    e1:59:a2:02:e5:fb:13:67:f5:a6:a0:80:04:aa:10:
                    dd:31:26:24:cc:7c:99:5d:ca:82:d1:1f:c7:9a:6a:
                    e9:fa:59:b7:92:28:0b:94:f7:06:78:65:89:cf:18:
                    42:1e:c6:1b:be:d0:97:8b:84:47:cb:c2:63:a9:18:
                    b2:0b:7d:c4:93:ef:53:ce:0e:1a:0b:ad:a6:5f:ab:
                    e7:68:31:3e:93:c0:4c:22:55:b7:b1:41:cd:90:f0:
                    5d:b3:a1:51:97:30:dc:32:5e:b0:39:77:1a:5f:09:
                    65:71:57:82:20:1e:14:44:05:27:b2:ea:b0:e2:c6:
                    3e:20:aa:9f:15:1f:bb:16:d5:5e:11:b2:2c:64:5e:
                    3c:c0:24:34:06:38:7a:22:5a:fd:b8:d7:ac:e4:c7:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C7:AB:1A:31:3F:29:B4:B0:5F:73:41:8D:96:54:B2:77:40:01:20
            X509v3 Authority Key Identifier:
                keyid:37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/3230302e3131352e34312e302f32342d3234203d3e203532333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:15:fa:9f:56:98:fa:d9:0c:c3:da:dc:68:da:c7:1d:70:19:
         6a:c9:83:08:33:11:70:29:79:f9:a1:62:c6:f3:3f:1d:c7:b7:
         27:9d:f7:cd:7e:ac:57:1b:e7:e9:fd:77:9e:12:9e:63:31:07:
         26:8a:c7:2d:a2:db:d7:6f:d8:c3:83:38:be:78:29:7e:59:bd:
         8d:ae:1b:1c:47:8e:f6:d0:f4:5f:3a:a0:12:b8:29:a9:3a:82:
         9b:b7:8d:2c:61:9c:ab:9c:a4:35:87:ee:b8:a5:1d:34:9e:47:
         9d:b3:67:2c:e6:eb:be:62:dd:82:e1:80:28:e5:d0:88:52:a3:
         c2:df:04:71:26:b9:13:48:10:41:8f:88:d2:d3:f7:26:ee:5b:
         90:9e:38:78:40:92:56:36:a4:c1:ca:91:26:96:43:a7:56:c4:
         6e:87:27:bd:75:42:8f:82:fd:7b:79:f9:27:b6:bc:2c:3a:21:
         f4:8a:8e:aa:64:86:06:0e:d4:d0:68:19:42:86:2e:ab:a9:70:
         f2:3d:ed:7c:79:3a:af:9c:3f:8b:85:75:22:cc:10:41:10:b3:
         bf:b5:99:32:da:0b:06:8e:b9:16:ab:b0:f9:10:f7:1b:fa:db:
         2e:c4:34:73:57:e1:4e:1b:47:09:33:b1:52:b2:4e:93:35:15:
         dd:fd:7b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:45 2025 by rpki-client