Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/3230302e35392e3231322e302f32322d3234203d3e20323730303032.roa
File:                     3230302e35392e3231322e302f32322d3234203d3e20323730303032.roa (raw, json)
Hash identifier:          LF31rAqTnhNi3Memiy/L8t2UZgKuqwN9GoViOg8y8wo=
Subject key identifier:   96:A6:F9:82:1F:51:93:71:D9:D1:7F:26:D9:8F:A4:15:30:C7:D2:EB
Certificate issuer:       /CN=D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8
Certificate serial:       2053625F8046F191FA601FDF5A3820AAB3CD55D6
Authority key identifier: D0:F8:6C:4A:DF:00:47:64:4A:C1:EE:EA:EF:57:C4:26:E9:E5:09:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/3230302e35392e3231322e302f32322d3234203d3e20323730303032.roa
Signing time:             Tue 04 Feb 2025 18:06:55 +0000
ROA not before:           Tue 04 Feb 2025 18:01:55 +0000
ROA not after:            Tue 03 Feb 2026 18:06:55 +0000
asID:                     270002
IP address blocks:        200.59.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:53:62:5f:80:46:f1:91:fa:60:1f:df:5a:38:20:aa:b3:cd:55:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8
        Validity
            Not Before: Feb  4 18:01:55 2025 GMT
            Not After : Feb  3 18:06:55 2026 GMT
        Subject: CN=96A6F9821F519371D9D17F26D98FA41530C7D2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:32:73:b0:81:54:5e:35:b0:7a:32:16:30:
                    77:1d:17:27:1c:8c:eb:0f:15:1a:de:a2:dd:30:db:
                    4a:9f:ff:91:f5:81:3b:24:b5:42:b2:47:15:f4:c2:
                    6e:68:4f:c9:59:2f:60:f7:65:44:50:c5:61:f0:0a:
                    43:2c:86:69:3a:21:5a:03:b0:dc:fd:b7:6b:f5:55:
                    86:e9:b9:83:bd:07:45:00:71:dd:e1:0f:f0:58:a2:
                    30:dd:0e:a9:c9:d4:c7:86:9c:ec:67:c4:bb:45:a5:
                    37:9f:24:93:99:62:2f:83:db:86:dc:4b:fc:c1:24:
                    83:4e:08:6c:62:82:6b:df:ff:9a:70:12:7d:a4:18:
                    1b:50:ce:98:95:38:ff:24:cf:29:3b:d2:16:ec:8f:
                    e9:c4:4d:0d:79:2d:6a:3a:6b:5d:af:6d:fa:b3:a7:
                    52:ee:8b:c9:8f:75:6d:a2:f2:2f:27:52:fe:88:98:
                    2e:29:fa:6b:ab:70:1c:4c:3f:f1:e5:e9:e7:d7:cb:
                    dd:5d:e9:ce:82:e2:0b:56:87:12:8c:c8:be:59:3e:
                    6d:5a:db:7b:b2:72:53:56:05:63:22:b2:c5:9a:c1:
                    0e:af:d6:f7:de:35:c6:03:19:9f:30:9b:bb:2a:d8:
                    c8:4a:2c:7f:72:89:36:aa:aa:33:66:41:04:69:39:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A6:F9:82:1F:51:93:71:D9:D1:7F:26:D9:8F:A4:15:30:C7:D2:EB
            X509v3 Authority Key Identifier:
                keyid:D0:F8:6C:4A:DF:00:47:64:4A:C1:EE:EA:EF:57:C4:26:E9:E5:09:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/3230302e35392e3231322e302f32322d3234203d3e20323730303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:02:a4:82:9d:28:dc:55:17:2f:aa:d4:b2:d0:d1:60:9b:25:
         59:0b:14:2c:67:82:64:05:47:2c:23:40:b6:70:e7:73:ab:21:
         11:02:4d:fd:97:97:dd:6f:22:94:7f:a3:7b:d8:ce:dd:87:3b:
         ba:da:84:56:83:c6:79:fa:a0:db:b9:d7:e7:d3:de:62:b2:7b:
         55:04:7d:12:38:67:08:27:c3:85:15:e2:8a:a8:dd:9a:2d:52:
         3e:92:99:c9:67:ae:78:c9:58:f2:f1:f9:35:21:0e:8b:95:a8:
         52:9d:29:60:45:43:ce:98:b9:08:d8:02:10:be:75:17:0e:77:
         c2:9e:84:b0:65:89:a7:d8:4d:4b:2b:16:e5:ad:96:57:3b:aa:
         24:07:75:97:41:1b:2f:85:b7:51:e8:c6:c9:6e:de:cf:e2:67:
         b3:56:11:d0:f3:e6:4b:bb:4e:e0:ec:c8:b4:1f:5c:54:c4:f4:
         5a:0e:d3:ae:2f:3e:ec:f6:73:d1:eb:99:2e:3d:8a:04:5f:ce:
         08:08:f9:46:5a:9a:bb:23:91:86:ea:24:03:30:45:3b:cd:95:
         be:d3:33:cb:e2:c8:75:bf:35:30:ee:b2:d6:7e:9c:74:db:83:
         d9:0c:c1:9b:28:21:f7:a9:7f:49:8d:35:4a:ae:bf:18:41:a7:
         ac:5e:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:03 2025 by rpki-client