Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3230302e3131392e3138342e302f32312d3234203d3e20323632323032.roa
File:                     3230302e3131392e3138342e302f32312d3234203d3e20323632323032.roa (raw, json)
Hash identifier:          lVomHJ/GvodgHh9z+rd/m6wIgSx12d1Zd5oke9InzqA=
Subject key identifier:   8E:9F:5F:D1:20:74:74:34:48:20:7F:E8:6D:5E:4E:4B:1B:DC:26:2E
Certificate issuer:       /CN=C3A4C72D613B89220886ECA00755498ABF1F663F
Certificate serial:       113B05AC8D76D9917FFDC7F66BDC886AEB0B4206
Authority key identifier: C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3230302e3131392e3138342e302f32312d3234203d3e20323632323032.roa
Signing time:             Tue 04 Feb 2025 18:39:53 +0000
ROA not before:           Tue 04 Feb 2025 18:34:53 +0000
ROA not after:            Tue 03 Feb 2026 18:39:53 +0000
asID:                     262202
IP address blocks:        200.119.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3b:05:ac:8d:76:d9:91:7f:fd:c7:f6:6b:dc:88:6a:eb:0b:42:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A4C72D613B89220886ECA00755498ABF1F663F
        Validity
            Not Before: Feb  4 18:34:53 2025 GMT
            Not After : Feb  3 18:39:53 2026 GMT
        Subject: CN=8E9F5FD12074743448207FE86D5E4E4B1BDC262E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:1f:27:39:e3:20:37:0d:22:8f:40:78:98:
                    b9:1f:32:a8:72:45:4b:e3:c7:ab:81:7e:28:dc:79:
                    c1:fe:41:7c:79:82:74:8c:71:7d:c2:7e:30:88:2d:
                    d3:ed:88:f3:28:a0:5a:29:6e:54:0d:4d:7c:6d:cd:
                    3c:ae:54:82:9f:43:e6:09:c9:91:98:a2:c3:82:c5:
                    ec:4f:8e:c3:40:ec:a7:11:34:6c:07:e5:7e:a3:17:
                    6a:de:ca:3f:89:83:70:15:67:69:1d:27:65:ec:ee:
                    66:8a:37:fb:a9:52:88:26:f3:bf:8d:df:62:66:50:
                    e7:7e:1b:10:d1:99:7b:a4:69:60:83:9f:61:2f:15:
                    4f:eb:a4:e4:ff:2e:02:f1:14:c9:98:a1:29:0e:40:
                    65:3d:1d:2e:7c:47:82:b4:49:a0:73:46:45:95:bf:
                    c8:02:b4:56:e2:b7:8a:fe:6a:67:66:90:fb:54:9b:
                    92:3b:b8:cc:41:49:35:a1:88:17:ef:ee:ca:1a:42:
                    bf:84:05:60:09:db:df:10:c1:c0:a9:e5:8b:21:54:
                    08:f1:d3:f0:04:24:8a:c6:80:d6:c3:db:89:5d:15:
                    2e:44:a3:a6:cf:52:3f:84:8c:14:e3:03:d5:0e:a2:
                    4f:0f:a4:47:e2:ba:22:62:91:fc:0c:b9:2c:03:fb:
                    1a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9F:5F:D1:20:74:74:34:48:20:7F:E8:6D:5E:4E:4B:1B:DC:26:2E
            X509v3 Authority Key Identifier:
                keyid:C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3230302e3131392e3138342e302f32312d3234203d3e20323632323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:f6:26:d9:61:eb:b9:2b:17:de:a1:47:6b:5e:f8:e4:59:de:
         79:37:27:1c:c2:00:e8:ff:1d:e4:a6:a2:b4:10:26:01:34:24:
         1c:2f:3c:55:b3:bf:1d:17:9d:ff:90:0e:c4:a3:f2:bf:9e:9a:
         72:b7:eb:2e:ea:2e:0e:ef:51:02:f1:dc:3c:a6:f7:3e:0a:a1:
         8d:54:a7:2b:28:15:4f:a5:d1:b8:dc:3b:d6:d3:4d:10:6e:f5:
         6c:10:8d:43:d5:b9:51:f9:1d:19:ea:eb:d9:1e:02:50:12:36:
         a4:00:ca:d2:db:df:2d:03:fe:ed:ad:7b:45:65:86:05:b8:12:
         1b:53:23:77:f3:d5:46:fa:68:ca:42:89:a8:92:f9:d7:6e:2b:
         7e:bc:6b:c6:6b:21:18:69:ce:a8:36:c4:c8:10:ad:32:7f:9f:
         e3:84:82:4d:e2:f8:a6:21:b2:f1:58:83:1a:d4:97:8a:82:bb:
         27:b3:7d:c6:b5:13:f6:5d:9c:19:4b:02:f6:d8:70:5f:bd:a4:
         ba:a2:a6:b0:7b:b8:0e:fd:cd:e4:ca:4c:c4:ad:17:81:29:70:
         c3:21:37:25:42:7c:30:63:f8:31:69:94:0e:3e:f2:39:d3:3f:
         fd:34:f9:29:da:ba:31:4f:2f:18:e7:05:72:3d:90:ed:74:af:
         f7:cd:30:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:15 2025 by rpki-client