Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3132382e302f31392d3234203d3e203138373437.roa
File:                     3230302e36312e3132382e302f31392d3234203d3e203138373437.roa (raw, json)
Hash identifier:          pgBJAoicZfWcyCt2MVFVOrDljMMSwm+Bpr10gYsUxoo=
Subject key identifier:   9A:B6:EE:55:1C:BB:9D:16:72:CC:30:5B:8A:7B:F1:6E:C7:82:FB:44
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       0A54689DC9745CE90715701FE911322FCC62020E
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3132382e302f31392d3234203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 18:23:54 +0000
ROA not before:           Tue 04 Feb 2025 18:18:54 +0000
ROA not after:            Tue 03 Feb 2026 18:23:54 +0000
asID:                     18747
IP address blocks:        200.61.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:54:68:9d:c9:74:5c:e9:07:15:70:1f:e9:11:32:2f:cc:62:02:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:54 2025 GMT
            Not After : Feb  3 18:23:54 2026 GMT
        Subject: CN=9AB6EE551CBB9D1672CC305B8A7BF16EC782FB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:37:ac:9c:1b:1e:90:1c:db:dc:2f:2e:62:
                    ab:c0:cd:84:89:a1:a9:9a:74:39:42:55:6d:53:48:
                    d1:25:be:20:b6:6f:d8:ff:73:1b:a8:6a:8d:3a:5a:
                    8f:0a:9d:61:b0:cb:62:d1:4a:15:1e:5e:f5:4f:fd:
                    9d:cd:67:db:81:7c:14:88:2d:02:a6:32:a8:aa:73:
                    f9:b3:a6:1f:f3:57:a2:ad:8c:8a:e0:07:6d:a8:4f:
                    b5:74:d1:86:fc:b6:45:27:d6:1f:9f:28:b1:b1:a9:
                    a8:6d:a9:9f:cd:9c:f4:7d:d3:41:aa:55:12:0c:34:
                    34:97:8f:4c:24:23:d7:9a:ee:0b:20:04:2a:4d:18:
                    15:de:aa:c5:66:f0:1e:59:a3:b3:c2:4d:5b:52:02:
                    96:d6:b4:d0:5f:67:4d:02:f1:2f:62:36:19:07:7c:
                    98:2a:d4:a4:38:42:42:bf:f3:e6:c6:29:d6:aa:b4:
                    9d:66:eb:be:15:3c:fb:4c:38:c3:3b:c0:9e:b8:01:
                    16:aa:b8:ef:98:31:63:05:36:52:95:37:97:42:bd:
                    9d:58:58:8a:2e:6c:f8:16:4a:37:13:09:70:87:34:
                    10:cf:c5:64:b5:c1:d4:15:b9:5c:2b:05:53:f5:ab:
                    1a:ba:66:fb:67:61:80:61:be:80:69:86:72:a8:bd:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B6:EE:55:1C:BB:9D:16:72:CC:30:5B:8A:7B:F1:6E:C7:82:FB:44
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3132382e302f31392d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:dc:11:92:0c:6b:cb:d5:86:89:8b:f0:73:09:25:cd:58:
         d7:7d:20:9a:ae:f5:17:32:69:58:fd:c9:56:aa:17:f7:30:b4:
         24:4f:03:1a:99:9b:13:49:f2:a5:88:9e:e5:a2:e0:8c:af:c1:
         0b:fc:21:d6:ab:e0:3b:74:7b:0b:37:46:dd:d6:a4:ea:48:35:
         15:e6:d9:63:4b:23:97:e2:2d:b2:01:82:df:cd:3a:f8:0b:de:
         ad:e3:37:14:34:5e:4f:5a:d4:60:f9:c8:e1:08:c9:66:b3:18:
         4e:ff:f5:08:fe:14:2c:bb:d0:05:7c:a1:76:1b:0f:84:59:f3:
         1e:81:f5:4a:c0:1c:3c:c4:03:93:8a:48:48:0f:cb:a1:8b:c2:
         34:e1:89:7e:a9:b2:e0:e9:95:c6:a1:62:e7:5a:8e:d2:a7:e5:
         50:a7:f6:b4:cf:ca:68:3e:de:d2:fa:66:50:84:7b:cb:38:5d:
         a1:bc:6a:18:ed:54:4a:95:01:3d:a2:e4:fc:5f:9c:ff:de:49:
         92:77:88:f6:64:5a:fc:6f:0d:64:f1:83:06:27:aa:80:62:cc:
         47:69:80:be:ec:84:69:70:db:47:b5:e1:2e:9a:80:1c:c7:f7:
         74:83:0f:ef:d5:3c:4b:1f:9a:1e:0e:7e:d4:f8:4f:00:77:50:
         27:15:4c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:08 2025 by rpki-client