Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33392e302f32342d3234203d3e2037343138.roa
File:                     3230302e32392e33392e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          fej59jd2UEwGzqMkMG1wNUh71Z8GvIE6V2LH4VYbIi8=
Subject key identifier:   03:A2:01:92:DB:F4:89:7A:B2:F8:D6:7A:3A:6F:8A:C2:30:56:85:0E
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       28BAE43C366A69E6BD89483846BC118D442EADCF
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33392e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:30:04 +0000
ROA not before:           Tue 04 Feb 2025 18:25:04 +0000
ROA not after:            Tue 03 Feb 2026 18:30:04 +0000
asID:                     7418
IP address blocks:        200.29.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ba:e4:3c:36:6a:69:e6:bd:89:48:38:46:bc:11:8d:44:2e:ad:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:25:04 2025 GMT
            Not After : Feb  3 18:30:04 2026 GMT
        Subject: CN=03A20192DBF4897AB2F8D67A3A6F8AC23056850E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:ab:b1:bc:ec:26:e2:93:07:0b:09:f8:07:
                    99:c1:1b:36:39:c4:9d:8a:36:6c:17:05:0c:61:9c:
                    dd:1d:75:18:1c:9c:20:c4:2a:b3:2b:ad:36:c3:09:
                    08:46:a4:bc:c0:90:2a:7e:c1:8b:40:ed:57:07:e8:
                    bb:af:99:44:99:86:de:7d:15:25:dc:14:ed:93:ab:
                    57:a0:9d:8f:9d:31:b2:3f:a8:4c:01:e7:37:a6:2b:
                    1b:23:94:19:ac:86:b0:2d:09:59:ca:ec:42:a8:1d:
                    cf:3e:f8:09:f9:94:cd:13:ac:0e:d5:35:00:ef:f6:
                    bc:75:f2:e8:c7:28:0f:3d:57:b3:3f:98:c6:df:75:
                    c0:9f:59:ec:50:30:5f:97:07:e6:cb:0a:86:a5:13:
                    59:2f:b9:a5:4c:82:f4:dc:f0:b4:ad:3c:e7:1a:03:
                    1b:46:5c:8e:a6:f7:db:96:bd:fe:cd:e3:3f:ef:08:
                    d2:d2:70:3a:78:6f:ca:b5:6e:5f:6f:81:02:65:7e:
                    4b:fc:6b:75:74:96:42:fa:75:83:db:b0:51:e3:95:
                    a2:e2:e5:57:69:af:1f:f4:4e:be:ff:4a:06:54:6b:
                    e7:7f:8f:4b:2c:24:d2:ae:08:c0:8d:9a:93:73:c9:
                    a2:ff:41:33:e2:1b:fd:7e:b9:30:16:87:1b:7b:d0:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A2:01:92:DB:F4:89:7A:B2:F8:D6:7A:3A:6F:8A:C2:30:56:85:0E
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33392e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:bf:ce:e3:fe:fc:61:9a:4c:26:8d:3b:e5:54:21:33:70:
         80:ae:e0:62:36:d2:41:2c:86:cd:48:14:09:90:29:a6:89:22:
         d2:4f:07:40:8c:c5:cf:0b:9f:1a:b8:8e:53:83:cc:e7:f9:8e:
         22:85:24:f1:24:49:bf:42:76:1a:75:00:f6:1d:70:9e:ce:17:
         56:d1:25:66:be:a3:a5:1d:f5:21:d0:8e:bf:03:81:73:88:09:
         b2:f5:8c:d5:22:4d:4b:21:e1:8c:47:ac:a4:cc:76:96:32:5a:
         d0:25:da:11:6c:1b:68:11:0b:69:98:0b:69:db:e3:ca:d9:1e:
         96:2e:cd:34:19:60:13:bf:26:01:69:3c:76:a6:ab:30:3c:9c:
         c4:7b:eb:d3:e8:ae:93:a4:07:63:27:4a:ad:7b:19:c6:ee:4e:
         04:56:29:4f:d7:fd:3d:a3:70:80:14:56:62:6e:40:f0:27:14:
         d9:0b:8c:aa:17:55:e2:a4:f9:2f:97:98:66:ab:8a:03:2d:6a:
         bd:88:01:f2:0c:68:59:a6:20:06:4f:48:a9:c0:f6:69:59:60:
         42:2b:3a:81:7c:50:ee:5e:21:9c:64:bf:fc:67:1c:a0:70:af:
         4e:1b:f1:b8:4e:29:49:9e:9a:14:00:30:f9:65:bb:66:85:b2:
         01:32:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:07 2025 by rpki-client