Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e302e302f31382d3234203d3e203138373437.roa
File:                     3230302e38302e302e302f31382d3234203d3e203138373437.roa (raw, json)
Hash identifier:          kAqMhFXYWOKjDU427+M2aFGRL6supRLWaZyoyQNkXE8=
Subject key identifier:   7E:E9:37:FF:00:AA:9F:F2:61:86:0C:20:56:DE:34:91:E5:3D:B0:4C
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       5853864F3CDBD9908CA5C46D95CA196623BD6B35
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e302e302f31382d3234203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 18:23:57 +0000
ROA not before:           Tue 04 Feb 2025 18:18:57 +0000
ROA not after:            Tue 03 Feb 2026 18:23:57 +0000
asID:                     18747
IP address blocks:        200.80.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:53:86:4f:3c:db:d9:90:8c:a5:c4:6d:95:ca:19:66:23:bd:6b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:57 2025 GMT
            Not After : Feb  3 18:23:57 2026 GMT
        Subject: CN=7EE937FF00AA9FF261860C2056DE3491E53DB04C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:a8:fd:6c:56:d7:39:00:bc:bf:9d:3e:d3:
                    bc:e8:cc:73:26:ef:59:c0:15:85:ef:1c:e4:ef:f5:
                    15:ff:d0:87:5a:d6:6b:19:4c:3b:05:9c:8b:f7:d3:
                    94:44:8e:a1:07:d0:cc:b5:1a:81:d3:ea:a8:29:db:
                    c3:62:18:70:09:a6:d3:86:92:6b:77:a2:eb:1b:cd:
                    46:e8:8c:54:5f:33:64:dd:39:4b:3a:89:3f:41:30:
                    c2:6a:bc:7b:c3:bc:a5:75:8c:5d:2f:a5:f2:c6:74:
                    e9:53:d7:33:ae:6a:a4:2f:f2:0c:e7:0e:98:31:53:
                    bb:d6:db:b3:78:ae:5c:66:40:25:9b:a4:76:b2:fd:
                    73:4b:8a:82:7a:95:a0:38:9f:56:c6:ff:d0:42:79:
                    e7:65:64:68:ae:a7:ed:1d:23:25:23:64:bd:bf:33:
                    ff:8a:47:04:2b:14:61:28:14:1f:ec:33:91:7e:c3:
                    57:8a:b2:5f:00:aa:f7:0a:b4:f8:69:c7:92:bb:84:
                    42:0a:ea:e2:86:18:e4:73:6c:f5:fa:89:16:af:93:
                    4d:fa:06:2e:9b:bf:3a:37:68:77:c2:8c:55:df:d2:
                    08:1a:41:ac:85:09:79:cc:82:76:ec:77:1f:60:33:
                    d8:9a:31:ea:c2:41:a2:a9:c0:35:fd:66:85:5b:03:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E9:37:FF:00:AA:9F:F2:61:86:0C:20:56:DE:34:91:E5:3D:B0:4C
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e302e302f31382d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:4d:62:8b:a7:ae:c8:28:cd:52:02:ec:41:3c:5f:3f:bc:
         7a:42:5d:9d:4f:d2:0f:20:23:b4:79:72:a7:c8:1e:21:02:77:
         4e:59:b1:ed:f3:8d:d6:b8:22:2d:5d:10:f5:ed:72:ed:4d:58:
         97:f6:a6:aa:24:e2:18:8d:09:c3:80:a7:24:2a:ef:a3:d9:28:
         a6:90:dd:7a:f1:dc:d6:20:18:01:cc:6a:cf:9a:0d:91:9f:34:
         8d:1e:a9:af:2a:a4:ca:ba:4b:91:a8:3b:4f:50:91:1a:47:77:
         9e:5d:f7:ae:b3:d3:50:80:e7:30:7f:79:4c:57:58:29:53:d4:
         57:f7:a6:64:f3:f2:41:ea:e9:23:cf:72:56:33:32:15:ec:ee:
         c6:51:33:5d:b5:2d:7e:c1:5a:ad:15:27:35:a3:05:58:a3:2b:
         de:6c:07:ec:bc:1e:91:9a:bd:8f:56:6c:2d:30:1a:dc:83:99:
         59:b6:63:49:8c:47:8a:5d:83:41:02:71:b7:43:76:be:a6:5e:
         9b:53:e1:7b:cf:d0:1e:ce:28:28:18:75:24:7e:85:54:ff:ab:
         20:85:41:0e:ac:25:60:3d:7b:27:9a:32:21:11:a6:2a:09:50:
         a4:2c:e1:af:39:81:0f:c4:17:13:41:1a:b8:6c:9f:e1:4b:2a:
         0c:57:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:33 2025 by rpki-client