Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33382e302f32342d3234203d3e2037343138.roa
File:                     3230302e32392e33382e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          pFYADk3c3KT4gH/M3cN66RO2mmr5AyxTol4WTZLwRto=
Subject key identifier:   69:38:F5:11:5D:8C:52:63:55:E9:9C:1E:DC:C0:67:BA:9E:03:B2:B5
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       48A57C35587238B41BDF2C2DE13A860673049E97
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33382e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:11 +0000
ROA not before:           Tue 05 Mar 2024 17:47:11 +0000
ROA not after:            Tue 04 Mar 2025 17:52:11 +0000
asID:                     7418
IP address blocks:        200.29.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a5:7c:35:58:72:38:b4:1b:df:2c:2d:e1:3a:86:06:73:04:9e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:11 2024 GMT
            Not After : Mar  4 17:52:11 2025 GMT
        Subject: CN=6938F5115D8C526355E99C1EDCC067BA9E03B2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:cd:68:c1:55:c4:68:52:53:c3:05:ab:97:
                    30:d2:14:f6:a5:9b:77:31:16:89:7f:6d:14:26:a3:
                    8c:0b:b6:0c:3b:33:7f:6c:ae:a4:ce:34:c9:5a:f5:
                    c1:59:96:c9:39:7b:80:84:b1:af:52:de:59:24:38:
                    fa:fa:0b:4a:91:cc:74:b8:bd:75:de:d4:af:14:b8:
                    48:56:56:8a:f3:50:a1:e2:c0:bd:3f:27:b9:5e:cd:
                    99:1e:46:a1:62:87:76:c3:e9:6b:cc:67:49:d7:2e:
                    76:12:8a:8c:ff:cb:b5:6f:1b:a0:bb:e4:56:26:ac:
                    e8:27:08:87:53:9c:21:aa:8f:c4:6c:7d:7f:b0:89:
                    b1:11:00:52:46:fb:1a:db:b5:57:33:4d:e9:65:8b:
                    56:14:55:4b:9f:73:64:7a:6a:b2:c5:5c:49:2b:1d:
                    87:85:d9:08:d3:c5:e0:0e:9a:20:dc:05:2e:5a:5c:
                    af:4b:59:a2:ae:6a:51:72:ad:51:a8:e1:6d:83:d8:
                    98:2d:31:fd:bd:e6:0a:bf:5e:77:2b:f3:ba:ef:93:
                    c5:43:3d:2d:ef:bd:4f:3e:2c:da:50:bc:c2:9b:fb:
                    81:4c:09:14:26:2b:67:e7:4b:d1:f7:28:f2:8b:56:
                    0a:66:50:07:75:96:3a:17:db:e4:52:88:82:65:8e:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:38:F5:11:5D:8C:52:63:55:E9:9C:1E:DC:C0:67:BA:9E:03:B2:B5
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33382e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:33:e1:20:e8:d6:11:d2:de:f1:6a:c2:be:c8:67:2e:ae:9a:
         ad:7c:bd:5f:d2:21:94:8b:88:42:b4:cd:23:6c:a6:0b:17:53:
         8e:b6:99:9c:80:f6:ba:03:07:c1:b0:3b:07:a6:f4:61:ec:af:
         17:8e:5f:0f:8c:8e:1e:aa:eb:c4:29:4c:8e:f1:9b:58:9b:84:
         83:0e:26:d1:e5:11:f9:45:e2:a0:5d:95:92:33:44:7d:50:ec:
         b0:75:6b:0f:d6:b9:8c:7b:fa:e9:f1:a4:e1:3c:d3:93:fa:94:
         58:55:6a:a1:07:d4:d0:5d:bc:31:5f:b6:e9:af:95:03:8a:35:
         90:ca:67:5f:43:41:9f:79:62:1a:d5:79:5b:a8:16:6a:c7:ee:
         23:0a:64:0d:1a:92:d4:c6:e7:b9:0e:c9:5d:01:52:18:28:3b:
         61:fd:2c:de:77:0d:34:53:70:f6:50:a8:b9:4a:2f:cf:f6:2e:
         ab:e5:5d:33:e9:49:40:29:90:61:c5:4b:f0:0a:f0:63:ca:b5:
         e2:8d:e4:ee:ff:41:f1:83:33:f7:1b:4c:c3:fb:80:45:a4:64:
         94:8d:d9:7d:d5:f7:78:9a:24:e0:da:99:6e:29:5e:cb:ae:97:
         47:7b:2a:fe:2d:4e:32:ce:84:98:40:7a:f8:3d:56:4e:7a:92:
         66:f2:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:13:58 2024 by rpki-client on console-ams.rpki-client.org