Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e36342e302f31382d3234203d3e2037343138.roa
File:                     3230302e3131322e36342e302f31382d3234203d3e2037343138.roa (raw, json)
Hash identifier:          QGcF9Jh9flUbvQ8LqU4wSv+WY3dADHlOTh1/LObdZBE=
Subject key identifier:   56:5A:06:63:30:BF:90:3B:EA:18:7B:38:0B:72:5C:4B:AE:46:A1:0C
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       201A75A1ABB462DFDD6320B48101C06A01012F74
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e36342e302f31382d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:29:44 +0000
ROA not before:           Tue 04 Feb 2025 18:24:44 +0000
ROA not after:            Tue 03 Feb 2026 18:29:44 +0000
asID:                     7418
IP address blocks:        200.112.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1a:75:a1:ab:b4:62:df:dd:63:20:b4:81:01:c0:6a:01:01:2f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:24:44 2025 GMT
            Not After : Feb  3 18:29:44 2026 GMT
        Subject: CN=565A066330BF903BEA187B380B725C4BAE46A10C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6e:07:82:08:0a:44:dd:9e:d0:0a:79:8a:b0:
                    40:1f:bb:33:8f:11:85:ae:ea:ff:c2:12:96:39:d6:
                    87:5e:de:24:2b:a2:99:24:17:c4:d4:2a:2b:88:5b:
                    91:a0:45:b2:4b:36:fc:18:f4:1c:0e:37:a6:f6:5a:
                    54:40:ed:31:ff:65:7c:21:b5:8f:0e:54:aa:33:0b:
                    fd:58:9e:0b:35:58:f1:a1:8c:21:0e:96:7b:b9:8f:
                    a5:ea:9c:82:c0:92:9b:21:42:b1:08:0a:5a:f2:6f:
                    ff:ed:04:1f:22:4e:99:97:29:a3:96:aa:c2:dd:4a:
                    84:42:94:cc:e5:be:b6:9f:9c:47:69:e0:a7:b5:f0:
                    bc:5a:aa:77:82:13:b4:1d:bb:e4:9b:29:27:3c:40:
                    2a:2e:f3:c9:bf:38:b6:3a:ae:67:f7:22:82:33:94:
                    6c:f8:e8:44:bd:48:8d:de:27:1e:f2:6c:d6:3f:97:
                    70:57:53:a1:89:f8:3a:c8:36:a9:45:77:6c:73:9d:
                    b1:8f:72:86:38:61:1e:be:70:d3:6f:82:8f:c3:18:
                    3f:89:cb:f6:2c:02:b8:95:9c:ab:5d:12:62:ea:a7:
                    0c:ca:3e:2f:95:de:4c:7b:84:46:9e:f8:95:7f:24:
                    ed:1d:17:bd:25:81:2b:dd:8e:b0:d6:75:db:88:af:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5A:06:63:30:BF:90:3B:EA:18:7B:38:0B:72:5C:4B:AE:46:A1:0C
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e36342e302f31382d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         40:5d:f4:68:f2:57:86:2b:91:8e:f3:cd:5e:e3:95:9e:18:94:
         bc:61:38:e6:c8:dd:1a:77:75:eb:1a:1e:7f:ca:79:6f:b3:27:
         77:2c:1b:2a:fc:ae:86:90:98:08:7a:4d:b2:62:ed:f7:78:b1:
         2e:27:77:82:a4:e2:fa:4c:a6:6c:f3:60:78:2e:87:b2:8d:cf:
         c5:6a:0f:06:20:d6:bb:e1:0b:9d:a6:af:9b:4f:c2:1d:54:73:
         37:04:28:2f:8c:07:d6:8e:08:de:7c:a7:31:a3:f7:61:2a:7b:
         d0:65:8e:74:d1:99:f5:60:41:fe:fc:d4:be:87:7f:9b:20:9b:
         12:6c:6f:51:20:1a:55:99:4f:31:ad:21:7f:55:50:78:e9:93:
         01:7d:f7:b2:ed:84:41:09:97:5c:b1:ef:b2:2e:56:5b:ed:36:
         fa:3a:18:ad:7b:8f:6a:44:a6:4e:d6:ec:1c:50:c6:78:6f:38:
         c2:27:a4:9b:40:b0:bf:13:78:a6:07:3c:cb:b2:0f:19:76:aa:
         c0:41:51:8d:cf:e5:49:72:03:8a:88:34:2f:88:fb:2e:93:1f:
         67:31:04:ae:43:cc:5c:eb:5a:ae:fb:a8:73:9e:ad:33:9f:58:
         8c:ad:e8:e8:1b:b5:e4:ed:70:af:c0:db:10:5f:91:d9:8b:ac:
         be:1a:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:15 2025 by rpki-client