Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3132382e302f32302d3232203d3e203133393939.roa
File:                     3230302e37372e3132382e302f32302d3232203d3e203133393939.roa (raw, json)
Hash identifier:          LuPangeeJxt/gezii9HQQIo2LY2lFhzzJw3jq35ieG4=
Subject key identifier:   3D:1C:BA:27:71:14:80:39:80:73:E4:1D:9A:45:6F:88:44:DE:B9:58
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       4C3394F63C3CA7926CEC8A34CF1584F073D18DB1
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3132382e302f32302d3232203d3e203133393939.roa
Signing time:             Thu 16 Jan 2025 06:55:00 +0000
ROA not before:           Thu 16 Jan 2025 06:50:00 +0000
ROA not after:            Thu 15 Jan 2026 06:55:00 +0000
asID:                     13999
IP address blocks:        200.77.128.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:33:94:f6:3c:3c:a7:92:6c:ec:8a:34:cf:15:84:f0:73:d1:8d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jan 16 06:50:00 2025 GMT
            Not After : Jan 15 06:55:00 2026 GMT
        Subject: CN=3D1CBA27711480398073E41D9A456F8844DEB958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:d9:0e:53:ee:7e:0a:66:74:aa:97:01:4e:
                    61:ad:15:48:35:a6:46:25:24:58:41:8c:60:12:92:
                    34:a6:bd:e2:ac:ce:a3:ef:dc:55:a4:e0:3e:98:9a:
                    50:d1:cf:a4:bb:a1:8f:d5:7a:92:52:f3:ab:6a:af:
                    8c:65:25:a6:e8:30:50:47:ce:c4:9d:dc:5a:9b:93:
                    9d:16:63:0a:7b:be:bb:16:90:4f:7a:13:62:8f:c1:
                    24:36:41:f9:84:e9:d5:15:ff:c7:c8:9f:3c:7e:0e:
                    5a:49:97:90:be:39:55:6c:b8:70:64:9a:fe:db:14:
                    d3:b1:ab:12:df:40:b6:be:0e:eb:10:ac:ee:f3:11:
                    80:78:4f:11:ac:58:2f:e1:80:84:e4:e9:91:dc:97:
                    e1:ea:80:a6:ea:58:34:5b:4a:04:3c:0c:a9:4f:e4:
                    8c:6d:23:55:49:b2:44:b8:dd:a0:a6:18:8f:e3:99:
                    84:81:dd:2d:3f:13:6e:f1:d8:ed:cf:cc:bb:42:74:
                    55:ee:95:2b:7d:95:2d:9f:2b:39:3c:b2:2c:a1:dc:
                    18:19:ae:f4:cd:a1:b8:3a:69:6b:84:45:fe:5d:a0:
                    d8:17:1c:70:73:02:c7:cf:d0:a9:42:5c:fe:43:61:
                    9b:09:bd:c4:db:23:6e:33:76:d5:b0:36:6e:a9:44:
                    cb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1C:BA:27:71:14:80:39:80:73:E4:1D:9A:45:6F:88:44:DE:B9:58
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3132382e302f32302d3232203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:14:08:a8:6c:8b:c9:54:e7:eb:99:ae:d8:44:06:03:0b:16:
         5e:75:0a:21:ce:5a:2e:22:c6:30:73:f3:70:cb:1a:63:2a:dc:
         cb:ef:68:ac:9a:b5:73:0e:68:21:90:f6:2b:a8:9a:af:b0:00:
         6d:e0:fe:98:9b:1f:9d:8c:93:f5:fe:c9:0b:3e:32:82:aa:0d:
         61:ed:29:d3:f1:2a:ab:d4:3f:0f:b2:60:22:4d:9c:0a:55:69:
         51:11:7f:f0:40:6e:b2:11:6e:af:6f:e7:9b:19:ed:7b:43:84:
         45:56:dc:ff:65:0c:9e:ae:67:24:05:1b:fb:56:8f:d6:d5:10:
         ff:57:8d:76:f1:ac:11:64:0f:2a:20:5e:47:d2:6f:8e:7a:81:
         10:cf:47:70:83:13:a4:19:f4:51:f7:cf:26:01:68:b0:b2:8c:
         f2:ef:53:8d:71:c0:4b:82:d7:34:d1:2f:b4:c4:36:fc:92:78:
         da:37:15:fc:10:14:9c:28:50:6d:ca:88:cd:8c:48:e8:ab:aa:
         df:9e:4b:72:b9:24:7d:11:b0:c6:6d:c8:32:32:bb:a4:ef:61:
         25:be:1e:69:28:cf:25:f4:d2:a2:e4:4b:fc:03:91:a6:c5:03:
         f0:a8:20:12:e1:c0:79:05:01:d9:9b:3c:a2:2b:46:a6:12:1c:
         49:1d:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:53 2025 by rpki-client