Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3231362e302f32322d3234203d3e203134313837.roa
File:                     3230302e34372e3231362e302f32322d3234203d3e203134313837.roa (raw, json)
Hash identifier:          HE077o8NrVy6KhP/pv1u5JIbeaHz8qi4dkfEVrZeEAo=
Subject key identifier:   A9:BD:41:83:B3:A0:FF:F1:CD:35:2D:B9:B4:7D:DD:DF:B9:6F:3C:47
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       44E112B4D1D24A51F105C22626F13C3869CAB3C8
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3231362e302f32322d3234203d3e203134313837.roa
Signing time:             Tue 04 Feb 2025 18:00:22 +0000
ROA not before:           Tue 04 Feb 2025 17:55:22 +0000
ROA not after:            Tue 03 Feb 2026 18:00:22 +0000
asID:                     14187
IP address blocks:        200.47.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e1:12:b4:d1:d2:4a:51:f1:05:c2:26:26:f1:3c:38:69:ca:b3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Feb  4 17:55:22 2025 GMT
            Not After : Feb  3 18:00:22 2026 GMT
        Subject: CN=A9BD4183B3A0FFF1CD352DB9B47DDDDFB96F3C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:27:d3:69:8f:d5:eb:c8:b4:ad:b0:35:3d:90:
                    5f:f9:76:0a:ae:65:d3:33:ce:2e:b3:fb:22:20:d8:
                    2e:b3:82:62:10:f1:2a:8b:3c:9e:12:05:a2:a9:16:
                    8e:e8:4a:67:1d:22:f9:c6:d6:b1:66:c7:b2:bb:a7:
                    c4:01:bd:6d:ef:e3:09:2d:33:47:d4:05:70:46:94:
                    f0:7a:25:75:c6:35:13:ab:14:e6:bb:7f:1b:04:b3:
                    25:69:60:2a:cb:dc:87:da:75:e1:98:2a:7c:91:2e:
                    22:55:3f:3f:48:46:15:b4:3a:88:c3:1e:aa:01:62:
                    d3:09:ee:27:06:84:11:54:c5:90:69:a5:a5:11:b4:
                    5a:2d:1a:a6:02:2a:b1:a8:7e:b1:c0:36:b7:f4:14:
                    d6:e3:ef:b3:72:68:b9:0a:e7:5d:45:ee:99:16:52:
                    c0:c4:ba:28:52:96:9c:ce:65:64:e2:85:ce:bc:b9:
                    2c:07:68:8e:ad:67:ca:56:c9:7e:11:db:1e:c3:32:
                    8f:59:a8:72:37:1f:55:1f:b8:e1:d5:aa:b6:88:0a:
                    5b:9e:2c:74:61:1a:c3:01:ae:b0:df:65:cb:a6:38:
                    34:75:43:51:33:0a:05:a3:88:d7:19:36:92:92:49:
                    23:30:e2:70:cb:7c:4c:1f:1e:8b:14:f5:1d:28:db:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BD:41:83:B3:A0:FF:F1:CD:35:2D:B9:B4:7D:DD:DF:B9:6F:3C:47
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3231362e302f32322d3234203d3e203134313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:68:7b:52:06:d3:06:2b:02:cc:5b:ea:8f:ff:71:d8:56:b6:
         8d:f2:5d:50:c2:54:ae:53:39:9f:ac:fb:20:09:c7:59:7f:f6:
         77:ff:84:39:db:ac:5a:6e:ec:00:b7:53:f7:51:dc:0f:c9:15:
         2c:4f:d3:9e:d8:55:b3:5b:cd:4a:7e:21:00:32:0b:d1:23:64:
         07:9d:b0:a2:c4:ec:47:fb:74:e7:f6:34:bd:60:9d:78:9e:f2:
         ac:c7:34:24:b5:5f:9b:42:02:5e:0a:3c:59:b3:63:22:77:64:
         90:02:26:29:a5:20:43:c9:bd:78:7a:68:21:80:b4:43:06:43:
         20:c2:49:e3:8d:da:bc:f1:9b:1b:fc:35:0c:52:59:11:a5:fb:
         4c:47:26:39:e3:ba:b5:6c:b2:9f:5f:e0:c8:31:07:bb:cb:06:
         57:ee:bf:93:f6:91:af:6c:90:a4:ce:7e:5f:1e:78:3d:d5:17:
         0a:9d:9a:c2:7e:e7:82:64:68:3f:81:ae:0e:64:e5:45:64:c5:
         5e:f2:66:69:00:6c:1d:a8:b2:8d:a8:79:3f:37:34:2b:ad:71:
         02:a5:f1:15:a7:29:3b:3b:99:2e:6b:eb:8e:b7:ae:6f:c6:46:
         f6:be:dc:65:a3:18:a5:59:f0:82:e6:07:2f:72:5e:70:f8:94:
         d8:d1:32:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:59:24 2025 by rpki-client