Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3134352e302f32342d3234203d3e203532323730.roa
File:                     3230302e36312e3134352e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          mfnnFgOVK0FCb1It4Q6OZY1AztL4xh6zeRjjC+EOpJk=
Subject key identifier:   5D:24:E9:FB:3D:22:18:E3:AB:7A:07:6B:33:B1:C1:7B:E2:04:3E:FA
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       76ED0A213EA4B5E5202C397E122B1F573E5537A4
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3134352e302f32342d3234203d3e203532323730.roa
Signing time:             Tue 04 Feb 2025 18:23:57 +0000
ROA not before:           Tue 04 Feb 2025 18:18:57 +0000
ROA not after:            Tue 03 Feb 2026 18:23:57 +0000
asID:                     52270
IP address blocks:        200.61.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ed:0a:21:3e:a4:b5:e5:20:2c:39:7e:12:2b:1f:57:3e:55:37:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:57 2025 GMT
            Not After : Feb  3 18:23:57 2026 GMT
        Subject: CN=5D24E9FB3D2218E3AB7A076B33B1C17BE2043EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:f3:4b:a1:33:65:05:49:37:74:aa:e1:47:
                    30:47:1d:8b:ca:8e:3a:63:e2:b5:5c:b4:9e:19:b4:
                    f0:5d:38:cf:ac:24:69:a3:7b:e9:6c:5e:70:67:db:
                    19:a9:37:34:df:34:cc:3a:ca:3d:74:aa:dd:db:7a:
                    ae:9b:e6:9c:13:89:d8:8a:e0:e2:64:db:82:b4:bf:
                    81:95:6a:fe:43:38:b0:84:e2:f0:1c:a7:7f:3c:1f:
                    f0:0d:da:14:2b:00:7c:e2:97:a9:e5:78:ba:96:a4:
                    03:94:84:05:b1:a9:bf:f1:5c:35:d1:93:0b:45:d7:
                    4a:11:4e:5a:b6:f1:71:a3:87:9c:23:54:c5:9b:79:
                    bf:68:20:b0:58:56:ee:87:b8:6b:79:1f:b6:2c:04:
                    65:e1:01:7a:7e:82:55:10:5b:a4:bf:01:57:8b:75:
                    a7:31:d9:33:57:58:d1:54:a7:bb:f9:77:02:94:9e:
                    03:3f:c3:12:86:f2:aa:f8:c7:86:32:3f:14:9f:61:
                    5c:ae:84:8a:be:df:45:e3:da:d5:d9:b2:68:a0:cf:
                    87:5f:41:00:81:36:4a:f8:a2:3d:ea:3b:2f:1c:e0:
                    37:47:ed:99:6a:26:86:c8:9e:18:45:93:0e:9b:ae:
                    c6:b1:5e:fd:00:ac:16:f8:a9:6f:ee:3d:26:0d:3a:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:24:E9:FB:3D:22:18:E3:AB:7A:07:6B:33:B1:C1:7B:E2:04:3E:FA
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3134352e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:12:59:0d:89:71:f6:06:ac:f4:7f:06:ab:65:e6:9b:7b:20:
         fa:9f:c2:27:65:62:f4:30:00:48:3a:59:80:19:ac:4a:af:90:
         2b:60:76:f0:fb:3b:07:ba:83:af:a9:da:19:b3:78:be:54:16:
         4b:6f:99:8d:53:b6:6d:c5:cc:6a:2d:0b:bb:9a:c8:da:bf:ed:
         b2:ff:8f:5c:70:0e:e3:4b:0c:f9:82:c3:fa:a1:d2:83:d1:7f:
         b5:c2:f6:27:17:f6:8a:d4:03:b6:48:8b:89:d5:1f:0e:a7:d2:
         cb:3a:bb:08:41:d5:ca:a7:64:f0:60:96:5f:9a:4e:1b:18:3f:
         f5:91:c1:fa:83:27:2e:8e:77:58:db:d0:c8:2c:06:1d:d6:3b:
         dd:39:bd:00:de:75:5a:6e:bb:56:1e:aa:c6:b8:83:46:f3:ca:
         e0:c0:71:19:ed:35:52:e9:27:a3:14:75:d5:09:d8:59:7e:79:
         57:3c:36:89:3a:20:c5:35:02:78:ba:1d:06:6a:a6:39:80:36:
         8f:79:2c:9b:bc:1d:48:dd:98:5a:7b:18:57:69:eb:20:e6:24:
         51:5a:90:92:1b:c0:af:7e:c0:ba:24:59:e6:07:f1:de:92:a4:
         a7:0f:ab:3a:7e:81:01:b2:75:25:8c:25:5f:a2:a5:18:f3:71:
         eb:6e:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:09 2025 by rpki-client