Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3137322e302f32322d3234203d3e203134313837.roa
File:                     3230302e34372e3137322e302f32322d3234203d3e203134313837.roa (raw, json)
Hash identifier:          GtqHOPLwt12CTRVGY1qf/xz+UaBPFbzeQcNkdQwYBiA=
Subject key identifier:   7C:9C:0D:F1:59:31:81:EE:DB:D4:90:F1:B4:11:FF:C7:8B:8A:A0:A5
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       693290E5BB63D16F164AB948C129A671AAAAAEE4
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3137322e302f32322d3234203d3e203134313837.roa
Signing time:             Tue 04 Feb 2025 18:00:22 +0000
ROA not before:           Tue 04 Feb 2025 17:55:22 +0000
ROA not after:            Tue 03 Feb 2026 18:00:22 +0000
asID:                     14187
IP address blocks:        200.47.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:32:90:e5:bb:63:d1:6f:16:4a:b9:48:c1:29:a6:71:aa:aa:ae:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Feb  4 17:55:22 2025 GMT
            Not After : Feb  3 18:00:22 2026 GMT
        Subject: CN=7C9C0DF1593181EEDBD490F1B411FFC78B8AA0A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:4c:6d:b1:d9:9e:d6:1d:77:ca:25:67:96:
                    11:46:ee:06:f8:68:cb:65:80:d7:e1:d6:66:cd:74:
                    7f:26:6f:39:4d:03:7b:ea:56:e5:3e:35:c1:95:fb:
                    d2:13:73:02:90:eb:2d:48:ca:01:03:e2:e5:dc:a8:
                    3a:4d:2c:87:7b:ad:c1:9a:e0:64:c7:ce:cf:9e:cc:
                    61:16:f3:34:73:49:ca:b8:4d:b8:11:24:e5:01:75:
                    d7:d2:cf:aa:12:d3:7f:09:a8:fe:47:33:1a:f9:29:
                    00:13:e4:a7:70:84:34:a5:7f:e0:14:9c:cd:61:fc:
                    b1:d6:bd:0f:8e:b0:96:bc:b5:58:d9:e4:42:ef:6a:
                    ea:ec:be:fd:62:31:b6:c3:ac:17:61:57:70:90:0c:
                    63:ce:fa:0f:1f:f1:3c:a4:0e:32:d1:a4:b8:39:ed:
                    e6:51:26:0d:2e:ff:35:27:fe:d4:d2:b1:42:02:6e:
                    41:fb:b8:78:58:4c:47:f2:47:2e:07:2c:b3:3a:df:
                    2e:7d:26:14:3b:82:aa:63:88:1d:69:57:cd:cf:1b:
                    21:fd:c8:c2:1e:09:1c:b6:23:d2:a5:ea:90:84:7f:
                    79:a2:12:d6:87:60:8a:a1:73:27:31:e8:d3:2e:4f:
                    36:58:bd:8e:41:8a:9f:42:67:56:f4:cf:f7:fc:41:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9C:0D:F1:59:31:81:EE:DB:D4:90:F1:B4:11:FF:C7:8B:8A:A0:A5
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3137322e302f32322d3234203d3e203134313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:97:b7:10:3f:e9:ff:96:f7:61:18:b4:29:d8:a6:db:38:70:
         d6:79:58:75:06:d1:14:f1:8d:29:79:96:58:69:6c:b6:cd:9c:
         83:ea:02:2d:84:2f:88:50:09:fb:50:05:fe:0a:59:21:69:1f:
         07:e7:4c:ac:12:03:34:08:05:d6:f9:a2:21:81:fb:d8:f9:cb:
         f3:e2:a5:6a:86:1c:36:9d:c7:92:10:cd:8c:20:07:12:ee:4d:
         3c:3d:b2:f4:e6:0e:5e:71:bf:6a:f5:9d:a1:cf:0d:89:36:39:
         98:ab:68:b1:ee:7b:22:d6:fa:56:4d:78:78:0c:fe:b3:50:e7:
         b0:b3:27:54:bb:1e:9e:0e:96:4a:bd:67:b3:13:6d:3e:df:18:
         d3:cb:a9:23:c9:20:10:61:11:d3:bd:ac:f4:de:6c:f9:05:38:
         4b:b9:01:26:a0:53:85:fd:03:e5:7a:57:d0:45:24:c4:b8:d1:
         97:51:32:55:66:19:03:c5:51:0d:e6:2d:4c:10:f3:dd:99:ae:
         f8:94:ce:69:6e:94:16:46:b5:13:1f:84:2b:9a:de:d6:4c:54:
         5d:69:a6:cb:52:ef:2a:6e:2b:dc:87:71:1f:85:70:32:ca:08:
         41:fa:e8:8f:df:6d:d0:bb:5c:be:39:ea:f7:5d:7e:78:af:0b:
         82:62:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:21:14 2025 by rpki-client