Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3230302e36322e39362e302f31392d3234203d3e203134373534.roa
File:                     3230302e36322e39362e302f31392d3234203d3e203134373534.roa (raw, json)
Hash identifier:          OlPLoFF8q2PxQjDllsShqBRLcE8yszjqHNkqSUzr9X4=
Subject key identifier:   B5:AD:15:51:0D:9A:D3:EE:84:19:FC:5D:14:33:2B:65:83:F2:8B:68
Certificate issuer:       /CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
Certificate serial:       1881342A022A21B9E165682A98B4806949EF557E
Authority key identifier: 51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3230302e36322e39362e302f31392d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:14:36 +0000
ROA not before:           Tue 04 Feb 2025 18:09:36 +0000
ROA not after:            Tue 03 Feb 2026 18:14:36 +0000
asID:                     14754
IP address blocks:        200.62.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 10:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:81:34:2a:02:2a:21:b9:e1:65:68:2a:98:b4:80:69:49:ef:55:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
        Validity
            Not Before: Feb  4 18:09:36 2025 GMT
            Not After : Feb  3 18:14:36 2026 GMT
        Subject: CN=B5AD15510D9AD3EE8419FC5D14332B6583F28B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7a:b3:5d:c8:8c:87:d0:d9:15:03:b6:3a:5f:
                    ad:7a:70:eb:2d:0f:c5:b3:62:03:ef:85:55:bf:2e:
                    de:8f:67:b3:81:18:6f:57:5e:cb:3c:ed:19:c7:cc:
                    19:e2:ec:b9:1b:59:d7:f1:9c:fd:01:44:09:69:09:
                    32:06:fc:3c:c2:1d:38:84:07:60:23:ac:ad:84:27:
                    6f:fa:9b:65:53:18:c1:02:16:d9:85:f5:4f:2c:4d:
                    6e:b5:eb:38:40:73:6a:58:de:68:c3:be:bb:a2:5c:
                    61:63:69:26:26:aa:84:0f:73:98:bd:37:19:bf:e1:
                    a1:c9:ac:ff:cf:ed:30:22:4f:95:e4:58:76:d2:da:
                    58:98:ff:8f:93:fc:bb:dd:22:64:b0:1c:2b:9f:58:
                    cb:d0:e6:90:ac:24:f2:85:cd:99:2d:b3:09:eb:4a:
                    da:59:d3:84:24:45:94:a5:57:cd:2d:a2:52:95:97:
                    07:49:4b:a6:1d:58:3c:fa:8c:2a:03:86:80:9f:8c:
                    34:91:19:dd:d2:9a:1c:94:e7:b7:d5:4a:8d:a3:23:
                    a2:ab:72:13:da:f4:86:34:c2:88:c6:96:82:60:11:
                    6b:b2:ce:93:16:d6:20:e6:89:91:1a:f7:9d:27:61:
                    ba:fc:12:91:f9:07:92:eb:30:40:b4:06:eb:a2:4b:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AD:15:51:0D:9A:D3:EE:84:19:FC:5D:14:33:2B:65:83:F2:8B:68
            X509v3 Authority Key Identifier:
                keyid:51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3230302e36322e39362e302f31392d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.62.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:6e:55:83:6d:86:a5:25:3d:eb:3b:31:ae:b8:ab:30:f7:88:
         ce:c0:b2:ea:83:93:ce:30:22:37:5d:f2:60:9d:b0:62:b5:ae:
         09:6f:4f:78:30:93:4d:23:17:39:08:fb:9c:b3:c1:3e:ec:70:
         f8:ed:7c:f4:e4:24:10:15:9a:48:69:17:9c:ab:38:d8:83:ba:
         d2:2b:24:91:89:ad:34:95:0e:34:d1:29:78:0e:70:2d:6b:8f:
         f5:2c:03:f2:b7:a4:e3:a9:9d:66:c5:59:67:83:10:6d:70:4b:
         36:34:ed:9c:5e:0e:62:b0:ac:4f:47:4f:15:05:f3:c6:68:f0:
         4e:ac:d4:53:00:ea:8b:2e:8c:72:32:c8:17:13:50:33:60:41:
         a5:08:45:d0:fd:5a:66:3f:c5:98:d5:f0:22:ce:84:a5:04:f9:
         b6:ad:ad:b0:cc:06:54:96:e1:8d:dd:02:0f:c0:b3:27:14:37:
         d1:5a:b3:28:14:5b:61:51:95:3d:2f:e7:2f:b9:c6:16:c7:44:
         ab:de:03:64:60:95:fe:33:aa:36:8f:88:f6:c4:af:02:98:d5:
         28:9b:2c:9b:66:50:73:2b:d0:ab:fa:d2:cb:e0:26:57:3a:5c:
         74:01:9c:b0:eb:c9:76:e3:38:6b:b8:50:96:20:4c:e5:db:25:
         83:80:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:36:07 2025 by rpki-client