Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e203237373335.roa
File:                     3230302e37332e36372e302f32342d3234203d3e203237373335.roa (raw, json)
Hash identifier:          WhyasQ0IyDsRkfeOokxrTE6IMbVix9vvSWwZ5txyHs8=
Subject key identifier:   6F:4B:CD:50:8B:A3:92:A8:68:16:19:87:B5:26:94:F8:A0:47:28:00
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       7D6DE309D29526C14A8529F3EB57536B0B7969AD
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e203237373335.roa
Signing time:             Tue 04 Feb 2025 18:23:51 +0000
ROA not before:           Tue 04 Feb 2025 18:18:51 +0000
ROA not after:            Tue 03 Feb 2026 18:23:51 +0000
asID:                     27735
IP address blocks:        200.73.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6d:e3:09:d2:95:26:c1:4a:85:29:f3:eb:57:53:6b:0b:79:69:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:51 2025 GMT
            Not After : Feb  3 18:23:51 2026 GMT
        Subject: CN=6F4BCD508BA392A868161987B52694F8A0472800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:96:08:2d:e8:a3:12:eb:6b:d7:7f:ed:da:
                    35:3a:79:e7:15:97:e2:12:45:8c:ed:aa:8f:5f:b2:
                    05:21:af:4c:f4:e3:3f:66:7b:e6:89:0b:e0:0b:cf:
                    2c:37:8d:d4:80:d3:dd:b6:c6:7b:bd:6b:2e:26:f5:
                    52:0b:df:43:ff:39:bf:9c:b8:e9:5a:3d:bc:5d:41:
                    31:04:00:21:56:88:6b:32:8a:17:6d:d3:b6:1b:64:
                    6a:21:84:20:d1:f1:1b:5b:0f:95:0f:0c:6c:c5:be:
                    7c:8d:99:81:bf:23:ec:08:2c:a9:ab:3d:e2:ab:05:
                    34:14:23:1d:9f:97:53:6d:b9:da:92:cb:5d:20:89:
                    81:ea:68:b9:b6:7b:21:88:20:72:13:1f:aa:ab:e4:
                    b9:80:2d:b6:f9:42:30:3b:35:56:9e:b8:70:d6:02:
                    e2:7f:0d:79:68:0e:f4:ea:35:6b:2a:59:0e:46:2a:
                    cf:ec:46:f7:ac:b5:39:33:43:3f:2c:71:89:75:34:
                    2f:a1:87:1c:27:07:c9:b3:a7:4f:46:f3:40:d8:bb:
                    c1:48:38:35:d1:dc:c0:23:75:dd:d2:4b:96:78:b9:
                    4f:0b:4a:96:db:6e:32:fb:ad:64:bb:34:1d:d7:43:
                    64:a7:55:7a:70:5f:64:44:6a:20:d3:19:7d:6a:19:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4B:CD:50:8B:A3:92:A8:68:16:19:87:B5:26:94:F8:A0:47:28:00
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e203237373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:ad:ab:03:30:c6:93:69:c6:7f:cf:fd:0c:13:9b:58:1f:cd:
         30:e4:62:07:6b:82:2d:90:4a:d9:39:3a:df:37:02:04:71:52:
         28:ac:92:ae:00:76:54:c0:c0:73:9b:99:c6:17:b2:1a:c1:b7:
         e6:ad:93:4d:bc:64:cb:fa:b4:04:c9:c5:29:48:11:97:82:1d:
         66:ef:6e:df:ba:92:e4:f7:6c:24:49:34:6b:02:76:53:13:1e:
         83:e7:34:56:37:50:53:71:37:08:e6:19:93:dc:37:16:82:4f:
         d4:f4:aa:1c:70:da:7b:73:88:b1:ba:06:0f:cf:d0:c9:22:19:
         3e:0c:7e:91:c4:02:56:78:04:ef:a8:ae:af:cf:c5:e0:ac:37:
         55:01:41:1e:9a:87:bd:5d:d2:c1:45:89:c4:64:8b:7d:27:c3:
         89:fa:e0:95:64:ce:28:f3:80:80:bb:20:1c:0a:eb:1a:14:9a:
         fd:37:d7:8b:04:2b:9c:ed:7b:52:13:df:28:da:f2:bc:cc:bb:
         2e:e2:89:da:ca:f4:9b:9f:e6:14:48:80:c2:2f:ef:18:f8:ad:
         31:10:46:eb:a6:3c:41:27:d5:6f:f6:23:cb:d2:71:de:11:12:
         11:a0:da:05:66:70:04:89:4e:d7:1e:cf:b6:db:d7:54:27:f6:
         f3:fc:5f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:12 2025 by rpki-client