Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232352e302f32342d3234203d3e203136363239.roa
File:                     3230302e31302e3232352e302f32342d3234203d3e203136363239.roa (raw, json)
Hash identifier:          +br3Fkg++/A0NSV+2aTAsLE03jy1Jbb2V5PQ0XlJwAU=
Subject key identifier:   DA:C0:2C:BF:B0:1D:BC:2E:2F:A4:92:5B:97:DC:B3:A2:9D:BE:2D:AC
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       2F0D8194E0F4C64F26D5F5D02524D7BB4476412B
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232352e302f32342d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:12 +0000
ROA not before:           Tue 05 Mar 2024 17:47:12 +0000
ROA not after:            Tue 04 Mar 2025 17:52:12 +0000
asID:                     16629
IP address blocks:        200.10.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0d:81:94:e0:f4:c6:4f:26:d5:f5:d0:25:24:d7:bb:44:76:41:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:12 2024 GMT
            Not After : Mar  4 17:52:12 2025 GMT
        Subject: CN=DAC02CBFB01DBC2E2FA4925B97DCB3A29DBE2DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:ef:9d:09:f5:00:41:94:59:0c:44:7a:09:
                    43:6b:c4:c4:66:a2:84:1e:bf:f8:eb:a8:b8:cd:16:
                    85:45:d4:ff:37:47:47:4c:77:a2:e4:cc:59:cc:18:
                    c3:57:62:ac:da:76:46:84:fa:2c:91:f4:60:ff:01:
                    ee:d0:0f:45:ec:1a:47:da:c0:0b:df:92:b9:2b:68:
                    ae:36:00:b3:7d:fe:0b:ea:a5:65:79:4e:1d:9b:6f:
                    dd:3d:c6:99:7c:1d:7b:46:cf:35:ba:d2:49:b8:6d:
                    3c:a5:95:bb:19:f5:7c:4b:ce:81:a5:91:39:26:3d:
                    fc:62:86:84:3b:37:61:4e:0d:0a:06:ed:46:06:59:
                    26:6b:84:29:31:45:49:e1:ed:83:cd:62:ad:80:29:
                    d3:46:4b:5f:69:99:27:7c:c1:af:93:bd:ad:3e:c7:
                    58:b2:89:2a:12:00:be:a2:ac:da:d3:9b:11:48:af:
                    d0:c5:9b:42:87:a6:03:4b:ab:19:26:7f:bd:fa:b4:
                    50:81:30:5b:dc:e7:af:b4:d9:cc:47:d5:b3:0e:3f:
                    6c:d8:eb:c9:15:c2:d7:28:db:e7:af:02:25:5f:2d:
                    df:e6:91:88:8e:78:4a:62:ff:d4:4f:ef:ea:9d:0f:
                    87:82:94:16:7e:f6:5b:e0:05:da:53:29:2b:d5:66:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C0:2C:BF:B0:1D:BC:2E:2F:A4:92:5B:97:DC:B3:A2:9D:BE:2D:AC
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232352e302f32342d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b2:d8:c6:3e:33:a5:f4:96:ca:f9:f0:76:fd:bb:78:e2:69:
         8d:fb:af:ec:b8:54:57:99:11:cb:ac:de:82:dd:93:4e:b8:1b:
         3e:a9:cb:7f:57:4d:4e:c6:48:dc:e4:44:5b:94:04:da:92:cd:
         bf:09:50:85:63:c1:61:5f:1b:c1:77:de:7f:e7:b8:69:ad:cf:
         30:ac:00:16:0d:35:07:20:be:ab:9b:a4:9d:e9:7e:75:10:6b:
         1b:11:29:b5:db:1b:f1:90:e9:01:7f:bc:05:90:44:f4:08:0a:
         0c:26:09:21:d0:9d:05:ee:d7:0e:c7:80:c3:b0:2e:46:d0:0d:
         cd:e3:bf:7f:74:13:dc:06:bf:49:bd:88:1f:2d:d9:f6:2b:4a:
         80:9c:58:71:e1:4d:80:7b:a0:d1:d3:aa:be:52:77:1c:4b:55:
         85:43:2b:6e:71:63:4e:21:b7:cd:c9:10:74:33:64:dd:43:c2:
         59:b7:14:09:84:fc:25:a6:04:89:42:38:f5:bc:d5:e2:10:9e:
         87:38:48:35:c1:94:dd:a1:2d:88:d6:99:28:e4:69:5a:4a:42:
         72:ae:66:bb:b4:0d:4e:04:80:d2:de:8e:7d:eb:b4:0f:e9:c3:
         22:52:55:43:b5:8b:ff:a1:38:57:18:7a:09:ad:ab:ba:4c:11:
         ab:2e:10:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org