Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e34342e302f32342d3234203d3e203532343638.roa
File:                     3230302e38302e34342e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          jfdPBsrI8tUrYvx4+0OkhyhFcX1hvf09Ahmze44LyVo=
Subject key identifier:   0F:92:8D:50:94:8D:48:FD:84:7B:CA:33:3A:BA:98:FE:FF:49:D6:E3
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       6F25650F3C568A68020861F22AA827172140B379
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e34342e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:23:56 +0000
ROA not before:           Tue 04 Feb 2025 18:18:56 +0000
ROA not after:            Tue 03 Feb 2026 18:23:56 +0000
asID:                     52468
IP address blocks:        200.80.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:25:65:0f:3c:56:8a:68:02:08:61:f2:2a:a8:27:17:21:40:b3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:56 2025 GMT
            Not After : Feb  3 18:23:56 2026 GMT
        Subject: CN=0F928D50948D48FD847BCA333ABA98FEFF49D6E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:c2:c3:59:83:30:53:ce:7d:67:c5:13:6b:
                    33:4e:9c:ee:30:7f:9a:cb:d1:91:65:6f:a8:88:55:
                    2d:f5:3c:43:e2:39:14:1c:b2:73:46:06:9b:75:ef:
                    2c:3c:8b:c3:00:f7:3b:d2:4f:af:e8:2f:bb:02:fb:
                    f2:7c:08:f8:93:a4:08:f2:69:f4:25:6c:9f:f4:2c:
                    e0:09:06:6f:85:8a:ed:38:44:e8:8b:7d:e9:42:c7:
                    c0:93:65:d0:cd:8d:35:1e:08:aa:98:22:d1:e8:80:
                    39:51:35:2a:83:ab:72:15:1c:b5:27:4b:18:29:c4:
                    66:19:77:19:64:63:40:a9:5e:10:2f:4e:70:6a:51:
                    2c:38:b4:55:89:d2:43:90:1b:16:1a:ff:24:cf:b8:
                    a9:c5:b4:e2:2c:9c:f2:a3:fb:e7:76:47:67:88:a5:
                    a6:3c:9f:d4:ba:34:65:65:de:0e:8b:07:e3:28:23:
                    92:1b:0d:00:7f:22:83:8e:f6:5e:86:5f:3f:42:56:
                    8e:fc:21:07:29:c6:8a:ec:c9:a9:7a:e9:4a:c4:b6:
                    5b:cb:59:c4:3f:3a:0d:56:38:35:64:c0:71:50:99:
                    17:77:51:d5:0c:ee:2a:da:7f:c3:0c:25:56:9b:ac:
                    5d:7d:19:70:d4:44:b4:28:24:fe:46:ba:22:f2:3d:
                    0c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:92:8D:50:94:8D:48:FD:84:7B:CA:33:3A:BA:98:FE:FF:49:D6:E3
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e34342e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:04:52:ab:cd:fa:f3:8a:27:81:0e:5f:08:f5:58:07:74:8e:
         40:8f:4c:be:5f:46:7d:7e:0b:ad:66:23:82:c9:2b:5b:7d:bf:
         df:ff:d8:fe:60:a5:e0:83:0f:ad:f6:8a:5f:14:97:1d:de:9a:
         66:5b:fc:6d:a2:be:aa:aa:db:5d:70:bd:c7:a1:bf:8b:15:41:
         64:18:e5:f0:69:20:ca:e1:a9:70:41:d5:0b:2b:e2:41:84:8b:
         01:9e:0a:8f:73:7f:ff:6b:d5:d2:32:82:11:d3:4c:32:61:0f:
         53:03:7c:da:ec:04:ad:68:37:20:7d:74:18:ce:1e:2d:71:b3:
         9e:a3:b8:09:a8:b7:e5:50:06:77:61:aa:b6:19:a4:e8:bb:e7:
         cd:4f:f6:ef:3c:57:05:67:bd:0a:63:7b:76:16:6a:a6:09:e7:
         7c:83:3f:87:e4:8d:99:4f:b5:dd:13:39:20:7a:d3:79:b1:5a:
         23:5f:ec:04:81:ef:f8:f3:6b:b1:8d:7b:62:31:60:af:d2:a0:
         d7:56:bf:97:98:60:ea:03:4b:77:15:f7:fa:e2:e6:22:e4:5c:
         31:49:d9:50:a3:8d:45:ff:85:66:8d:8d:aa:70:37:12:98:06:
         3a:87:cc:f7:34:15:93:14:37:10:d2:28:d4:c5:47:ea:57:a1:
         36:1a:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:38 2025 by rpki-client