Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e39312e3230382e302f32342d3234203d3e20323639393534.roa
File:                     3230302e39312e3230382e302f32342d3234203d3e20323639393534.roa (raw, json)
Hash identifier:          llhktCUm2EgjIg9iP7jWOM2zLIVJCHnDleziWiW6x08=
Subject key identifier:   B8:06:6B:92:6E:0D:5C:F2:F6:3F:A0:D8:04:4D:43:0C:81:42:DC:7B
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       4D8D2CC5CFF2232EBC0E2A8E0424A758529DE702
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e39312e3230382e302f32342d3234203d3e20323639393534.roa
Signing time:             Tue 04 Feb 2025 18:23:53 +0000
ROA not before:           Tue 04 Feb 2025 18:18:53 +0000
ROA not after:            Tue 03 Feb 2026 18:23:53 +0000
asID:                     269954
IP address blocks:        200.91.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8d:2c:c5:cf:f2:23:2e:bc:0e:2a:8e:04:24:a7:58:52:9d:e7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:53 2025 GMT
            Not After : Feb  3 18:23:53 2026 GMT
        Subject: CN=B8066B926E0D5CF2F63FA0D8044D430C8142DC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:29:8e:d8:41:73:35:56:6b:17:5a:04:05:
                    34:30:04:95:99:32:8b:28:af:e0:0c:d6:90:f5:1d:
                    2d:fd:c7:d1:42:82:01:d8:01:c1:6a:8b:f0:ce:c5:
                    7b:7b:42:66:5b:58:be:09:17:0f:64:8b:5b:55:a7:
                    24:2c:b6:b6:f6:b6:28:97:77:f5:d9:4d:6f:4f:7d:
                    12:ae:c0:d3:8a:b1:ad:60:c9:1b:69:25:59:12:67:
                    e7:51:3d:8d:4a:e0:81:02:cb:41:37:d0:09:0e:58:
                    51:a2:2a:90:87:02:d1:a9:b1:d5:b9:11:0a:b9:8a:
                    d5:40:fa:8f:0f:94:ff:bf:ac:f7:77:7b:bd:b3:bd:
                    ba:b8:10:66:19:21:e2:12:10:bf:59:ae:e0:84:a4:
                    34:1a:69:9d:bc:b8:26:46:a3:ec:0c:45:a2:15:fb:
                    98:f9:fa:8b:17:76:30:df:98:22:12:7f:36:80:49:
                    e4:c3:47:08:7f:14:74:0c:ce:06:72:64:6c:fa:de:
                    a7:25:dd:96:40:1e:d1:7d:35:fd:01:85:61:c1:53:
                    ee:34:a6:f7:e2:78:68:3e:d8:89:0d:d4:86:2d:af:
                    94:e0:c5:7b:fd:ae:db:d3:26:fa:27:3e:78:76:14:
                    5b:60:ad:ab:85:e0:11:a8:3b:d9:e3:6e:e6:ad:85:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:06:6B:92:6E:0D:5C:F2:F6:3F:A0:D8:04:4D:43:0C:81:42:DC:7B
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e39312e3230382e302f32342d3234203d3e20323639393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:f4:fc:c2:33:78:80:08:ca:93:22:c4:a5:00:41:0b:09:0b:
         49:1e:b7:2e:0e:88:67:81:97:a9:ed:33:b1:9a:c7:df:d5:41:
         6c:34:14:5b:37:0c:64:5e:7b:a4:65:48:7f:85:a4:4c:24:82:
         5e:3c:db:7f:05:6e:19:a7:2b:a2:be:70:12:1c:7d:16:20:48:
         60:47:3d:d3:98:d4:ce:ea:81:6e:34:6f:21:ca:71:15:fb:0a:
         e8:8a:95:c8:7c:a7:b6:88:00:f5:04:22:ec:60:6d:c7:68:fd:
         57:80:14:7c:ec:4f:8f:2a:bc:4f:b4:0e:19:8b:18:47:c5:2d:
         a3:30:e6:43:b4:32:4e:c4:47:7d:78:d3:cd:03:06:36:ea:27:
         06:a7:2d:80:83:b6:2f:7d:4e:45:48:01:ff:6a:1e:05:b6:ed:
         43:0e:ea:e0:b3:1d:ad:61:57:d5:49:69:2b:13:35:9e:5d:a7:
         0e:d9:c0:8e:e1:8a:c1:cc:e4:27:6d:0e:7d:44:a6:b9:0c:18:
         0b:f9:c8:aa:7b:c2:fb:54:0c:51:53:86:cb:5a:d2:bc:87:8a:
         06:31:f1:0c:96:d4:8c:7e:db:dc:cf:0b:00:91:20:51:18:ed:
         16:6e:a1:e1:66:7b:b1:03:38:ea:7a:32:3b:78:46:78:7b:3b:
         15:d3:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:29 2025 by rpki-client