Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e372e362e302f32332d3234203d3e203237363738.roa
File:                     3230302e372e362e302f32332d3234203d3e203237363738.roa (raw, json)
Hash identifier:          T+FUSurAMEDkGqE+zSaqOhtYg/Enn1Qoh7IE3gWDRTA=
Subject key identifier:   68:CC:0E:85:BD:D2:2B:F7:49:80:41:91:51:3E:C1:41:EA:D9:0A:76
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       796AB43B0A7D007EC4F12E4E8B00220B53678B55
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e372e362e302f32332d3234203d3e203237363738.roa
Signing time:             Tue 04 Feb 2025 20:05:49 +0000
ROA not before:           Tue 04 Feb 2025 20:00:49 +0000
ROA not after:            Tue 03 Feb 2026 20:05:49 +0000
asID:                     27678
IP address blocks:        200.7.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 07:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6a:b4:3b:0a:7d:00:7e:c4:f1:2e:4e:8b:00:22:0b:53:67:8b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Feb  4 20:00:49 2025 GMT
            Not After : Feb  3 20:05:49 2026 GMT
        Subject: CN=68CC0E85BDD22BF749804191513EC141EAD90A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:87:f1:9a:37:d0:2e:5e:ed:4a:11:11:57:c9:
                    75:1b:34:16:0b:25:48:8b:fd:d7:e7:ed:7b:f1:c8:
                    91:b9:e1:af:a7:ca:ae:67:7d:bb:0d:ee:96:0e:f8:
                    53:14:e6:21:df:47:7e:69:35:13:89:5f:70:66:4d:
                    3d:a3:70:ce:62:71:03:80:0b:cb:a9:97:99:5b:90:
                    69:8a:20:d8:ff:33:49:3d:3d:e9:fb:dc:ec:85:92:
                    10:9c:ce:9d:b0:cc:cf:97:00:ad:71:df:40:ba:45:
                    76:76:37:4f:07:ef:eb:de:dd:cb:71:de:21:a2:3e:
                    3a:66:6c:84:b3:f9:0a:f6:e9:eb:cc:9b:03:dc:d7:
                    12:ee:f1:52:78:04:79:36:00:9d:d9:96:45:a3:f6:
                    88:34:96:cc:f9:ae:a7:cc:a6:51:e7:4a:fb:0b:99:
                    7e:b8:67:4e:a8:9d:a3:ee:80:37:44:23:af:f6:cf:
                    c3:a0:26:c5:59:c7:47:44:16:74:06:54:b5:ac:ec:
                    b1:5a:03:0b:5e:69:d0:72:1e:d4:ec:64:0f:0c:b9:
                    86:7f:72:99:fd:26:e1:cb:6f:3e:8c:60:3d:d0:e3:
                    ac:96:a0:13:fc:30:97:07:0b:c5:64:d4:8b:21:bf:
                    5b:54:3d:bd:c0:d2:9a:e3:7d:8c:fa:b1:79:a5:ed:
                    06:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CC:0E:85:BD:D2:2B:F7:49:80:41:91:51:3E:C1:41:EA:D9:0A:76
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e372e362e302f32332d3234203d3e203237363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:fc:2f:ea:72:78:99:b4:dc:80:38:0b:36:9a:cd:91:c9:
         bb:1d:d9:53:0b:d8:da:6e:c8:ef:10:90:c9:69:49:ce:20:23:
         8b:41:92:7b:9c:b2:86:58:ad:7f:08:94:d1:da:6f:29:56:f2:
         94:5e:39:68:38:a5:c5:3a:75:90:c3:20:d0:7d:09:b6:65:ba:
         b0:94:f6:a1:5f:94:e6:f2:aa:ad:84:05:f5:88:73:b0:40:89:
         72:4f:28:a8:b2:a4:6d:bd:50:5f:b7:0e:ec:3d:9b:40:74:28:
         29:14:3c:c7:f8:aa:bd:0c:b9:10:89:d4:26:ba:23:e6:58:92:
         c9:ac:d4:aa:cb:d2:8c:f8:f7:b2:e4:ac:e5:98:11:77:1d:c8:
         ac:00:ce:b1:8e:67:03:b8:bd:67:67:d2:93:de:fe:eb:dc:8a:
         7c:a5:78:d2:cc:1b:7c:8d:c5:5b:42:f7:ec:99:a5:3a:36:52:
         33:43:a7:a9:a8:c2:f8:be:7d:70:8d:a9:a5:6c:35:40:95:81:
         0d:1c:ad:e4:85:fe:b6:fa:6a:cc:26:89:e0:4c:50:f5:21:9e:
         d4:d3:96:81:89:da:c6:f3:93:22:b7:59:88:72:7b:5e:74:8a:
         6b:1c:ce:41:b8:a1:24:97:84:81:02:03:03:52:97:40:4e:ae:
         07:f0:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:58:25 2025 by rpki-client