Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e3131302e3132382e302f31392d3234203d3e203138373437.roa
File:                     3230302e3131302e3132382e302f31392d3234203d3e203138373437.roa (raw, json)
Hash identifier:          WLegLcEn4471DuI4Zu13/4S7Z74oyTibNWfwaAZp46c=
Subject key identifier:   A5:B0:80:2F:94:C8:ED:25:57:53:45:AE:47:3C:00:D2:6B:76:8E:CB
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       7C7ED06745EC261F778242971E45BD5040125365
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e3131302e3132382e302f31392d3234203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 18:23:57 +0000
ROA not before:           Tue 04 Feb 2025 18:18:57 +0000
ROA not after:            Tue 03 Feb 2026 18:23:57 +0000
asID:                     18747
IP address blocks:        200.110.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7e:d0:67:45:ec:26:1f:77:82:42:97:1e:45:bd:50:40:12:53:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:57 2025 GMT
            Not After : Feb  3 18:23:57 2026 GMT
        Subject: CN=A5B0802F94C8ED25575345AE473C00D26B768ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:4b:aa:66:d3:fd:2f:09:40:d7:e8:c1:44:
                    ea:6e:4c:c8:81:56:44:75:8a:c2:cc:9e:fe:42:15:
                    f7:6e:85:c1:9c:32:7b:4e:55:40:74:9c:12:77:7f:
                    0a:8e:11:4a:04:ab:f8:37:b7:cc:ed:15:b8:0e:0f:
                    15:64:63:9c:3e:2b:57:7e:a4:f9:78:6c:5c:fa:30:
                    a6:ea:fd:de:8f:db:17:6e:3d:f9:84:28:e9:3f:70:
                    1f:ce:29:7d:e8:71:ea:77:68:be:84:5b:70:d5:2d:
                    da:0f:a0:21:69:b0:eb:78:ec:bf:e2:5f:48:ef:96:
                    17:21:39:00:98:eb:27:37:72:6f:33:a7:90:00:f1:
                    e8:be:cd:82:a5:1a:68:e6:be:97:d7:78:1a:7c:b0:
                    5e:5e:f1:7e:2a:b4:ac:3c:d3:a0:6a:b2:eb:0a:92:
                    34:85:b4:01:ef:1b:b1:fa:46:e4:f5:ac:0b:76:b7:
                    12:bb:01:5d:3f:b3:92:67:70:e3:d7:86:77:6f:34:
                    c2:09:d4:8d:5f:ff:da:cc:e1:3d:2b:8a:59:4c:2d:
                    0d:5c:50:66:5c:8e:52:0b:65:2a:af:ed:d6:57:ea:
                    16:f5:f5:af:fd:f3:59:31:bd:2d:41:86:ad:ab:2d:
                    93:ee:63:ae:8b:9f:79:28:10:ff:11:a7:e9:11:d2:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B0:80:2F:94:C8:ED:25:57:53:45:AE:47:3C:00:D2:6B:76:8E:CB
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e3131302e3132382e302f31392d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         30:58:65:ef:a4:53:f1:fa:67:bc:3f:72:9b:41:f1:39:7e:4f:
         57:5d:30:ce:86:43:30:17:43:ab:d7:be:7d:6d:ee:88:7c:8f:
         1c:a4:59:19:ba:49:22:ae:0e:43:39:2f:1f:99:a3:95:e1:5d:
         57:3f:98:c3:53:c1:8b:e8:ad:d1:94:d2:16:12:fb:86:12:7b:
         57:31:59:a2:06:ca:f8:39:0c:ff:7c:6e:e3:da:9d:a6:bd:d4:
         a3:6d:36:fc:38:0a:95:05:ce:c5:07:35:2d:bf:7d:08:62:c4:
         3b:a7:1f:58:ae:37:8f:47:72:0a:05:97:12:ab:d1:53:85:4e:
         4f:26:8b:2f:1a:f4:06:4e:ce:68:bc:0a:aa:4b:b1:ab:c0:19:
         d6:37:bd:e8:74:dd:63:9b:18:cd:e6:1e:4b:0d:02:7d:11:37:
         12:32:99:92:8c:e2:eb:40:e4:3a:17:21:d6:cc:32:ee:9a:b7:
         de:76:da:e4:0c:b1:01:d4:90:b0:f2:26:dc:2c:28:e3:f5:40:
         8d:01:ef:74:21:89:07:45:8d:cd:2b:0d:2c:b5:f4:33:81:1d:
         c0:e0:1f:04:49:94:51:d0:38:ea:81:76:9f:f1:99:c3:f0:e2:
         c2:0b:68:ac:6e:fb:f8:7a:c9:e4:c4:d7:1d:f7:8a:5f:c6:2e:
         23:9b:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:31 2025 by rpki-client