Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/3230302e3130352e3139322e302f31392d3234203d3e203236323130.roa
File:                     3230302e3130352e3139322e302f31392d3234203d3e203236323130.roa (raw, json)
Hash identifier:          qelB4Uktwoo2vmOrRiX9VNyPwi6eZHjG4fgco9OOzQY=
Subject key identifier:   66:A2:46:77:53:48:67:E5:AB:C9:DA:FD:16:70:41:5D:79:95:A4:7A
Certificate issuer:       /CN=0E2398E228CAF8263D654C1F35A155213634B840
Certificate serial:       4FADA40A4670A48F08055D4742375EA3DA287068
Authority key identifier: 0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/3230302e3130352e3139322e302f31392d3234203d3e203236323130.roa
Signing time:             Tue 04 Feb 2025 18:17:49 +0000
ROA not before:           Tue 04 Feb 2025 18:12:49 +0000
ROA not after:            Tue 03 Feb 2026 18:17:49 +0000
asID:                     26210
IP address blocks:        200.105.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ad:a4:0a:46:70:a4:8f:08:05:5d:47:42:37:5e:a3:da:28:70:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2398E228CAF8263D654C1F35A155213634B840
        Validity
            Not Before: Feb  4 18:12:49 2025 GMT
            Not After : Feb  3 18:17:49 2026 GMT
        Subject: CN=66A24677534867E5ABC9DAFD1670415D7995A47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:35:de:15:00:69:22:b7:14:95:76:84:f1:
                    d0:fe:b1:d7:24:49:ad:dc:26:ae:87:87:8a:ed:74:
                    3a:8b:ff:a5:c3:5d:74:d9:39:4b:e9:45:6d:95:91:
                    ee:d6:7d:60:a7:1d:d3:3a:b5:4b:06:e5:cf:d7:c7:
                    8c:0c:0c:c6:73:f3:ff:4d:2a:a9:ad:cb:59:d3:29:
                    41:97:33:56:c3:40:f9:3a:21:c3:ef:f4:e8:20:32:
                    62:87:3a:28:d3:02:05:bb:e0:ff:b0:1c:b0:23:43:
                    68:9b:41:42:ca:11:64:16:59:16:4d:6d:c4:b4:5d:
                    30:62:32:0a:55:dd:8a:b8:61:00:97:85:2e:99:b0:
                    89:2b:da:c9:db:b9:24:d8:0a:2c:32:25:19:38:90:
                    36:db:e1:87:44:14:5b:30:e7:e5:82:9f:74:6b:46:
                    14:5f:14:9c:97:a0:6f:0e:bc:a6:e2:1f:c4:c1:34:
                    48:2a:15:ee:57:7f:18:60:c1:49:d3:05:1b:23:dd:
                    47:7d:45:50:18:be:b5:9f:00:b2:e4:f3:da:dc:c1:
                    d6:29:fa:74:c1:13:55:3d:62:fe:8f:dd:05:2d:ab:
                    b2:99:5a:0d:7f:88:5a:6a:05:89:64:01:db:40:47:
                    a8:7d:bc:e2:ff:c5:0a:5d:e2:14:89:fa:96:f1:f6:
                    5d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A2:46:77:53:48:67:E5:AB:C9:DA:FD:16:70:41:5D:79:95:A4:7A
            X509v3 Authority Key Identifier:
                keyid:0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/3230302e3130352e3139322e302f31392d3234203d3e203236323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.105.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:67:f7:5a:f1:ed:93:d2:7b:f7:b5:55:5c:80:a6:a2:fd:90:
         23:62:6a:81:c4:00:8b:03:87:85:bf:fa:be:b9:2e:e6:4a:93:
         d4:45:0e:d0:26:bc:03:33:d8:c6:00:eb:09:4a:11:f4:a5:71:
         56:4f:f4:56:7d:47:82:e4:af:1d:99:fa:05:16:d3:6a:72:db:
         71:00:2c:2f:b7:b7:5f:06:2e:44:1d:0b:77:f9:62:34:3d:de:
         03:07:4f:c9:bd:07:98:94:3f:a1:22:64:90:ca:9f:69:ee:a2:
         18:93:6b:9f:46:c5:1e:40:bf:c1:bd:84:82:67:df:b2:fc:29:
         55:62:30:9a:6d:3c:22:8d:d3:27:95:da:9e:05:70:e0:be:8f:
         ca:f3:3e:74:8c:11:b4:e2:94:42:03:3c:00:5c:37:3d:63:67:
         93:99:34:a9:01:70:46:7b:86:16:0e:6e:f4:15:2d:46:49:ca:
         de:e9:2a:b3:a8:d4:6e:6e:e9:f2:4c:ea:a0:b2:72:08:ed:7f:
         d7:da:67:23:19:3e:95:78:c7:39:6f:d3:2b:86:67:5e:35:a1:
         00:8f:aa:0b:12:2d:6f:13:1e:61:81:e7:a2:44:cb:a1:ae:43:
         c1:e8:a7:cd:88:2b:04:9a:b5:aa:4e:62:01:8e:e6:76:c6:32:
         bd:2a:55:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:54:54 2025 by rpki-client