Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/3230302e372e38322e302f32342d3234203d3e203631343638.roa
File:                     3230302e372e38322e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          FOD8OQk20A/eq2N9y6ackZVwqKJUvTQb1AdF0WNa5lY=
Subject key identifier:   3D:EA:EA:6A:BC:98:66:DE:59:A1:6B:DC:26:23:D2:06:8B:91:E0:7B
Certificate issuer:       /CN=1DA6040C06A3A84F21E90A663523AAC82609A9F3
Certificate serial:       3FD0DDC5D4C877F37E09206B52C14922A20D59A2
Authority key identifier: 1D:A6:04:0C:06:A3:A8:4F:21:E9:0A:66:35:23:AA:C8:26:09:A9:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/3230302e372e38322e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 19:59:47 +0000
ROA not before:           Tue 04 Feb 2025 19:54:47 +0000
ROA not after:            Tue 03 Feb 2026 19:59:47 +0000
asID:                     61468
IP address blocks:        200.7.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d0:dd:c5:d4:c8:77:f3:7e:09:20:6b:52:c1:49:22:a2:0d:59:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA6040C06A3A84F21E90A663523AAC82609A9F3
        Validity
            Not Before: Feb  4 19:54:47 2025 GMT
            Not After : Feb  3 19:59:47 2026 GMT
        Subject: CN=3DEAEA6ABC9866DE59A16BDC2623D2068B91E07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:a4:30:4b:d3:01:6a:fb:29:ad:b3:34:b3:
                    57:05:80:bb:3d:ee:b6:6d:6e:28:43:e8:c5:d7:82:
                    70:4b:0d:b2:9d:66:a8:e7:6e:f7:61:76:22:0a:18:
                    6d:e1:cf:0b:d6:0a:84:f4:dc:0f:01:ba:50:ea:ad:
                    61:a6:b1:b6:49:36:c4:b5:6d:c8:f7:3e:6d:d9:53:
                    9b:9a:d5:bf:b3:8e:b8:e6:7f:55:52:ab:aa:12:4f:
                    16:12:ce:7d:b8:24:4e:4e:4e:04:1c:ed:5e:43:a7:
                    f6:4c:8f:03:d3:8c:1c:ae:ba:d7:6b:36:2c:fa:5b:
                    df:19:b2:41:09:7a:7c:22:48:7e:b7:a6:37:2e:e7:
                    82:25:c3:b1:23:4d:20:05:6b:3c:ea:87:80:83:e3:
                    40:15:35:de:ad:45:0c:d5:d9:7f:3e:9d:26:6f:a1:
                    a0:35:e6:ba:f7:4d:8d:8b:1d:47:dc:c5:a9:0a:a1:
                    20:be:27:b6:49:7d:24:f8:43:89:0b:7c:85:6b:78:
                    da:58:23:e0:36:aa:a1:72:9d:2e:bc:81:21:a6:16:
                    5f:58:8b:04:af:86:1a:62:47:8d:3c:6a:fe:7f:15:
                    ed:c5:3d:64:41:6b:0c:16:05:cc:c2:ae:2b:81:26:
                    6c:03:51:6f:82:59:0d:ab:3b:bf:87:3c:f1:3d:9b:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EA:EA:6A:BC:98:66:DE:59:A1:6B:DC:26:23:D2:06:8B:91:E0:7B
            X509v3 Authority Key Identifier:
                keyid:1D:A6:04:0C:06:A3:A8:4F:21:E9:0A:66:35:23:AA:C8:26:09:A9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DA6040C06A3A84F21E90A663523AAC82609A9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D581214F91BB761A4C452AC003EF7144B2A99AB26A6651EED7A58E837CCCE36A/0/3230302e372e38322e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:85:98:88:6c:b4:78:4a:b5:4d:96:fd:e9:28:e3:fc:60:fa:
         0e:43:33:41:11:13:9c:b6:01:8d:cc:b4:67:97:70:93:e0:2c:
         e1:41:ef:1d:a0:1c:6b:1b:5f:d8:4a:89:9d:33:20:84:8f:ac:
         81:0b:ee:d2:ce:7b:e4:78:db:63:3c:9a:49:7a:bd:49:6b:db:
         a9:b1:0e:11:76:31:5d:fe:14:10:3d:bb:a8:75:57:0e:95:ed:
         24:c1:42:ad:35:a4:d5:17:5c:fd:3a:7f:5c:b4:18:83:47:ad:
         00:ed:c7:c1:54:df:05:b1:13:20:fa:c3:be:f7:48:a1:58:60:
         21:ec:ff:a1:d8:92:7e:e8:f6:ea:27:ad:53:b3:e9:1a:6c:88:
         2e:0c:dd:c1:fe:9c:e3:13:b3:ca:13:37:f1:e5:2f:5a:f0:72:
         de:be:11:18:01:7e:46:8c:17:0b:fa:20:d6:7f:86:f9:c4:8a:
         9d:ab:9b:6c:14:24:72:47:07:c6:1c:a5:af:66:69:bb:62:08:
         87:53:14:5e:da:4d:9c:02:d3:ac:14:52:6a:f5:a3:a8:e1:68:
         19:a8:60:ab:8c:1d:e6:31:bf:9a:ae:ed:e1:05:ec:18:a8:42:
         7e:b6:8e:13:66:4b:ef:8b:62:27:ca:f5:6e:c6:21:d4:a9:1e:
         99:e5:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:48 2025 by rpki-client