Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235332e302f32342d3234203d3e20323732303336.roa
File:                     3230302e31322e3235332e302f32342d3234203d3e20323732303336.roa (raw, json)
Hash identifier:          QLXF1SK9xdz6CR/hF4kCaGoYEMYGpd5dQ5fsgZCRJG8=
Subject key identifier:   34:0C:66:1B:80:AE:57:68:F2:24:13:7D:B5:97:E1:75:C5:7C:C4:C3
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       3AE06772A261B2CFA8578783E048165FB91422F4
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235332e302f32342d3234203d3e20323732303336.roa
Signing time:             Fri 21 Mar 2025 22:25:00 +0000
ROA not before:           Fri 21 Mar 2025 22:20:00 +0000
ROA not after:            Fri 20 Mar 2026 22:25:00 +0000
asID:                     272036
IP address blocks:        200.12.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e0:67:72:a2:61:b2:cf:a8:57:87:83:e0:48:16:5f:b9:14:22:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Mar 21 22:20:00 2025 GMT
            Not After : Mar 20 22:25:00 2026 GMT
        Subject: CN=340C661B80AE5768F224137DB597E175C57CC4C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:be:6e:08:be:fe:3b:b3:10:c6:d6:b6:58:
                    8f:6e:14:49:16:73:31:8e:38:2d:6b:1e:e9:0f:b3:
                    ff:0f:d9:4f:af:9f:c9:34:57:dd:90:d1:1f:2b:02:
                    40:02:13:0e:ad:1c:18:70:ed:ca:6e:38:f9:15:31:
                    5f:6d:6e:1e:32:7a:c5:e4:b9:33:ff:57:b8:1a:25:
                    a5:af:e6:1b:0c:45:75:56:ac:6c:af:4c:24:dd:4d:
                    2b:22:00:80:87:0c:82:b3:fc:6f:be:bc:70:d8:31:
                    aa:95:b5:1f:69:f8:58:50:68:da:21:e7:de:0f:3b:
                    8a:38:5e:21:15:0e:ec:86:e7:63:60:ad:07:6d:cc:
                    4e:6e:c6:74:8b:82:d6:cc:56:41:75:52:b6:64:40:
                    73:4c:16:28:ee:61:62:6e:33:89:72:3e:99:17:55:
                    9e:40:59:d0:2f:ee:07:64:c1:84:79:5a:d2:ee:aa:
                    5d:14:74:b1:17:b8:40:5b:3b:f6:eb:22:1e:26:db:
                    22:42:e8:26:40:26:99:20:58:9a:84:80:ee:38:be:
                    05:c7:1a:92:93:6f:54:f4:f9:ff:83:ef:92:4c:cc:
                    0a:cb:79:48:26:47:31:15:d5:6b:cc:8a:b9:e6:a9:
                    de:5a:e4:6a:d2:14:66:c3:6d:9c:d0:c4:70:35:e1:
                    85:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0C:66:1B:80:AE:57:68:F2:24:13:7D:B5:97:E1:75:C5:7C:C4:C3
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235332e302f32342d3234203d3e20323732303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:4c:bb:35:00:8e:41:67:7d:50:be:39:c4:bc:4d:76:9b:01:
         6a:68:26:88:ea:6f:9d:8a:14:ab:a3:ba:e7:c1:7a:52:59:36:
         aa:0c:f2:a3:67:14:2a:87:8c:62:1e:36:14:d3:47:b9:0b:24:
         31:ec:59:92:dc:f5:ef:ab:8d:e6:eb:ca:42:e6:c4:f4:4a:55:
         7d:96:c8:d2:16:db:73:5a:63:68:89:64:11:41:66:fa:92:97:
         5d:e9:b8:63:eb:a6:9e:0c:3a:be:14:96:31:cc:27:17:15:41:
         de:f4:5a:e0:f8:90:8c:d7:bb:ac:27:86:90:d3:c6:e1:b4:48:
         e5:55:7c:37:c9:8e:80:b5:b9:bb:f0:85:05:cd:ed:b0:33:81:
         b2:4a:46:5b:a4:2b:be:94:c3:86:47:f8:a7:bf:69:18:da:ce:
         72:e0:ae:30:8a:9a:d5:3b:71:64:35:97:ed:6b:c3:d4:c3:ef:
         2f:b8:5e:ac:03:67:52:40:f5:ef:06:fe:a4:9b:14:9e:18:57:
         9f:9a:14:bd:22:9b:ba:b1:80:6d:68:81:34:5d:29:8a:e8:ee:
         58:4c:14:19:dd:96:77:b8:97:3e:d1:b2:1d:d9:15:c5:b0:21:
         49:8e:ba:c6:0c:91:44:dc:7a:38:c8:0f:89:82:9e:c1:14:68:
         4c:4a:bc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:21:00 2025 by rpki-client