Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/3230302e3130362e3138342e302f32322d3234203d3e20323731373739.roa
File:                     3230302e3130362e3138342e302f32322d3234203d3e20323731373739.roa (raw, json)
Hash identifier:          e4hZwhC5tM1o0BG3vj5vPQOq0Dr/kdbjYR06+g42ymY=
Subject key identifier:   A0:F0:A1:BE:12:25:BB:54:79:60:43:FC:80:02:A8:55:67:53:CB:49
Certificate issuer:       /CN=6947D5FD9ADEAB385611F86AE68248A0E982D6D5
Certificate serial:       082F500E02E7D5BF7BB993DA68A26926A5A7A9F3
Authority key identifier: 69:47:D5:FD:9A:DE:AB:38:56:11:F8:6A:E6:82:48:A0:E9:82:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/3230302e3130362e3138342e302f32322d3234203d3e20323731373739.roa
Signing time:             Tue 04 Feb 2025 18:47:31 +0000
ROA not before:           Tue 04 Feb 2025 18:42:31 +0000
ROA not after:            Tue 03 Feb 2026 18:47:31 +0000
asID:                     271779
IP address blocks:        200.106.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2f:50:0e:02:e7:d5:bf:7b:b9:93:da:68:a2:69:26:a5:a7:a9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6947D5FD9ADEAB385611F86AE68248A0E982D6D5
        Validity
            Not Before: Feb  4 18:42:31 2025 GMT
            Not After : Feb  3 18:47:31 2026 GMT
        Subject: CN=A0F0A1BE1225BB54796043FC8002A8556753CB49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:3a:71:d6:3b:31:07:27:5b:b8:56:87:72:
                    98:ab:15:20:f8:5b:1d:fe:b9:a9:18:3d:d7:8d:ef:
                    b8:c6:ea:5b:7e:05:79:a0:12:dc:70:0f:cb:29:6c:
                    64:6b:04:82:31:6d:af:c6:60:1c:44:8a:80:26:67:
                    a8:b3:65:77:27:6c:bb:44:6b:95:a6:0a:f0:24:15:
                    0b:0d:f3:ed:b3:1c:01:80:26:2a:0d:fb:4b:cc:da:
                    82:bc:e6:ca:e1:31:08:2e:29:73:03:1a:82:3c:5c:
                    a5:74:85:6a:f3:3d:d8:ae:d4:bf:e1:a3:13:ae:68:
                    aa:2e:89:ed:7d:94:ff:27:b6:65:73:9d:1f:43:b9:
                    64:b7:13:a3:cc:3a:47:a9:37:ba:b7:e4:88:f6:84:
                    39:3f:b9:74:3c:12:ae:2b:f2:c9:59:c8:b3:48:46:
                    f1:1b:86:03:4b:d7:f0:70:d8:6d:8b:e9:df:38:1a:
                    0e:d3:76:0e:ec:50:82:8b:0d:9d:07:a1:91:6d:6f:
                    af:7b:b9:a7:a3:11:ea:e7:01:26:bb:bc:e8:08:5e:
                    09:95:85:24:79:7d:22:02:78:c7:6e:5d:c9:da:17:
                    ad:dc:c6:a3:df:0e:9a:c3:e7:3d:c2:73:4c:10:cb:
                    3a:c9:cc:9d:a7:80:45:7c:d7:f9:10:a4:fd:fb:34:
                    65:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F0:A1:BE:12:25:BB:54:79:60:43:FC:80:02:A8:55:67:53:CB:49
            X509v3 Authority Key Identifier:
                keyid:69:47:D5:FD:9A:DE:AB:38:56:11:F8:6A:E6:82:48:A0:E9:82:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/3230302e3130362e3138342e302f32322d3234203d3e20323731373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:39:af:f2:47:fe:1f:47:13:29:8c:4a:c9:ac:d8:33:9e:cf:
         a6:c7:19:7c:0e:60:9c:c5:30:bd:f6:eb:75:08:c5:f7:ce:64:
         f0:e2:36:be:f0:5c:f2:fd:c9:00:b7:05:64:dd:ba:f4:56:a7:
         ca:5b:ec:bd:d6:ee:55:be:7a:43:56:cd:4b:e0:32:8d:fc:66:
         15:2c:98:45:b0:a1:4a:4d:50:0d:4f:59:bb:9a:48:21:af:fb:
         fc:5e:35:9e:f4:63:67:07:6f:ea:b8:78:ea:05:7a:dd:a3:cc:
         fc:a9:2a:36:e3:cb:65:4d:52:dd:e8:e6:a2:e4:ec:58:16:ee:
         b1:a8:0f:9b:74:e4:93:02:a6:e4:df:5c:32:a7:90:d3:62:a3:
         c0:e6:d2:75:7d:b8:57:a9:dd:21:6e:e4:0f:e2:25:8c:10:71:
         45:56:55:07:68:6b:81:c3:4a:e3:b2:23:b7:1b:d2:d8:f1:a6:
         89:86:f8:ff:17:74:56:56:f9:47:57:c0:07:ae:58:20:8e:65:
         8a:0e:26:1b:19:11:8c:66:0e:0f:2f:ab:c2:ca:23:6f:b9:0a:
         84:ba:97:80:8e:3e:dc:f3:ca:0b:bb:60:66:7e:1d:d3:0a:3a:
         f3:29:22:95:bc:fa:ea:7b:d1:bd:7e:f6:c8:3f:ed:6f:bd:c5:
         26:f6:ce:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:50:05 2025 by rpki-client