Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3230302e36322e36342e302f31392d3234203d3e203134373534.roa
File:                     3230302e36322e36342e302f31392d3234203d3e203134373534.roa (raw, json)
Hash identifier:          YXsmbJH78VUcAhuyB0FzJF0P74n8HMRAUlYUJxtV0aE=
Subject key identifier:   B5:C2:E3:1E:42:89:67:47:4C:00:84:FB:E1:15:BF:CC:AB:27:3C:78
Certificate issuer:       /CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
Certificate serial:       27CAD08C326666AD2BCE6941C5A9F93F2B18983D
Authority key identifier: 51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3230302e36322e36342e302f31392d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:14:36 +0000
ROA not before:           Tue 04 Feb 2025 18:09:36 +0000
ROA not after:            Tue 03 Feb 2026 18:14:36 +0000
asID:                     14754
IP address blocks:        200.62.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 10:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ca:d0:8c:32:66:66:ad:2b:ce:69:41:c5:a9:f9:3f:2b:18:98:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
        Validity
            Not Before: Feb  4 18:09:36 2025 GMT
            Not After : Feb  3 18:14:36 2026 GMT
        Subject: CN=B5C2E31E428967474C0084FBE115BFCCAB273C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:1b:b7:7d:d8:11:d1:5d:91:55:48:3a:d5:
                    50:8f:5f:ea:74:6f:21:70:5b:b9:0d:0a:18:5c:99:
                    92:3f:45:fb:58:34:91:ae:59:ce:c5:52:cb:02:1d:
                    7d:a6:65:3a:bc:8e:33:90:0f:9e:c5:b8:5e:50:38:
                    0b:c3:c3:04:47:96:32:e3:21:21:e7:25:ae:5b:24:
                    b1:09:f1:13:d4:e8:06:4d:2f:9d:62:8a:76:49:77:
                    ab:91:7a:09:97:35:a8:6e:2b:81:cb:61:c5:d0:4d:
                    ae:3d:74:94:35:db:fe:bf:f4:cd:9d:29:28:cb:71:
                    26:24:d7:40:46:24:fd:4c:9f:98:be:1d:48:e3:b1:
                    d6:9d:17:a8:9b:43:fb:46:11:13:d3:f4:ae:63:3e:
                    40:18:71:72:4c:9f:c5:11:31:aa:63:38:58:3d:31:
                    5b:ac:a3:02:36:48:23:f7:ee:42:21:3f:bb:65:ae:
                    63:8d:ea:c3:18:5a:52:13:fb:da:a8:db:be:ac:46:
                    56:ec:9f:24:92:88:f2:42:7a:9c:9a:c5:10:11:08:
                    55:15:5f:d0:17:32:44:11:21:f6:b1:3f:0d:82:5c:
                    9f:99:51:0f:e3:b9:3f:c2:9d:7f:53:a3:dd:1c:cd:
                    bb:74:35:94:68:95:f1:b2:8c:a2:9b:91:27:80:27:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:E3:1E:42:89:67:47:4C:00:84:FB:E1:15:BF:CC:AB:27:3C:78
            X509v3 Authority Key Identifier:
                keyid:51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3230302e36322e36342e302f31392d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.62.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:44:9b:5d:80:42:94:f3:f7:1d:f2:9b:04:f3:d8:d3:2c:
         42:4d:5e:ea:9b:1b:48:3f:a4:9f:ee:2c:04:be:79:45:42:26:
         db:7a:fc:e4:3a:62:c0:2f:e2:46:77:32:43:94:1c:06:f6:6d:
         fd:0b:4a:74:e6:ea:64:a9:85:10:7d:da:fa:b7:0e:a9:3d:07:
         20:c7:9a:47:3a:8e:31:e4:50:22:ff:ed:be:7c:ad:40:32:67:
         7b:e7:b6:21:88:c8:63:cf:c5:4d:cb:f1:69:86:ef:d2:b6:fe:
         2d:0d:b5:97:c0:a0:5d:fc:48:22:44:ba:d1:de:a7:85:db:46:
         58:3c:6c:bb:6e:67:57:6e:46:e9:72:d7:55:ec:d8:ab:31:db:
         7f:6a:4b:9d:87:3f:70:60:42:85:ab:d5:b7:87:e5:25:e0:70:
         03:f2:76:c8:14:ec:c8:dd:70:2e:21:1b:38:97:81:46:49:bc:
         6d:90:e5:df:39:73:41:17:e1:ed:8a:f4:62:35:2b:ea:ed:e0:
         8b:dc:97:25:2f:d3:99:0e:e4:cf:0d:62:5a:52:d6:71:53:db:
         4d:b7:5e:f6:2e:f0:55:a6:9f:78:83:8d:52:17:78:05:9b:e9:
         1c:65:28:32:8d:92:53:a2:66:ca:a8:d0:e4:c8:ce:71:ed:06:
         bb:e7:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:36:08 2025 by rpki-client