Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34322e302f32342d3234203d3e2037303034.roa
File:                     3230302e32392e34322e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          8r1kD5qfgJpbSTLZzuGtcmGRAnaz74Okpeqczt5cpBQ=
Subject key identifier:   54:52:0A:4D:24:E0:B5:4B:EE:7B:B9:D1:95:68:D4:8D:DC:0C:69:E1
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       0A9292DEC871F991F7CDA016CEE78811A8BD8737
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34322e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:52:09 +0000
ROA not before:           Tue 05 Mar 2024 17:47:09 +0000
ROA not after:            Tue 04 Mar 2025 17:52:09 +0000
asID:                     7004
IP address blocks:        200.29.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:92:92:de:c8:71:f9:91:f7:cd:a0:16:ce:e7:88:11:a8:bd:87:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:09 2024 GMT
            Not After : Mar  4 17:52:09 2025 GMT
        Subject: CN=54520A4D24E0B54BEE7BB9D19568D48DDC0C69E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1b:c2:60:d5:49:24:6a:93:5c:98:10:f2:db:
                    c6:ef:ba:aa:22:fb:92:ce:c4:a2:d9:58:49:7b:40:
                    53:46:3d:25:dd:f2:58:55:e9:17:02:7b:79:e0:0e:
                    5f:ba:81:31:ba:c7:9b:7e:b8:ca:45:7d:47:d9:61:
                    1f:94:11:ea:8f:db:ca:d0:f5:43:05:e5:03:81:7c:
                    0d:5e:fe:f3:86:68:df:21:db:fd:68:fd:4a:aa:09:
                    9d:f5:37:46:d3:20:5c:65:95:c7:db:42:e1:dc:20:
                    13:09:b6:30:9b:9f:29:88:95:3a:aa:dc:61:06:f0:
                    98:a3:de:24:e3:c7:f2:04:bb:40:c5:8e:3b:d8:6e:
                    97:ee:7e:30:ae:15:48:20:e4:4a:16:e1:14:d7:9c:
                    2f:5f:ca:0b:a3:b0:df:88:4d:bf:4f:c2:e7:44:67:
                    23:dc:51:4d:7b:80:f7:59:00:29:6b:53:d2:09:8f:
                    f1:e8:d8:b2:00:8c:47:17:7b:40:91:8e:59:e4:7a:
                    18:f2:2d:16:bc:2d:79:c9:7d:50:19:cc:2e:f4:2e:
                    d1:51:1c:b6:20:43:c7:69:91:a1:c1:99:fc:ce:55:
                    92:f7:84:81:39:5f:87:13:4e:50:f6:b9:a4:67:c7:
                    5a:48:61:f4:55:b9:aa:c3:1a:50:b1:a3:a0:8a:f2:
                    3c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:52:0A:4D:24:E0:B5:4B:EE:7B:B9:D1:95:68:D4:8D:DC:0C:69:E1
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34322e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:09:92:67:dc:fc:6b:38:58:a8:a8:0b:fd:99:86:57:53:11:
         e1:d0:a7:38:c8:5f:2d:a7:6f:62:c3:82:2e:8f:d6:da:31:88:
         0b:46:92:32:30:15:91:a8:13:c4:68:93:e9:70:a1:1b:22:e4:
         d6:f9:46:73:1f:97:e5:e6:20:e2:33:02:c8:9f:d4:b2:f4:09:
         6e:c4:0f:60:98:b8:98:41:20:25:ae:53:26:cc:7c:6d:9e:42:
         73:e5:3f:62:10:af:5f:32:d5:2f:89:1d:75:0d:51:e6:2a:4a:
         aa:42:d9:8e:ec:ab:3b:f1:34:29:16:8b:41:9d:33:47:9b:9b:
         06:89:2b:12:a7:d0:7b:11:bc:72:7e:a8:3c:49:a2:95:08:2a:
         aa:f3:c1:82:54:66:fa:61:1c:78:52:5d:ff:74:7c:34:c4:9c:
         70:dc:b7:41:c0:5e:9a:49:fb:6c:80:2b:46:7f:ed:e2:b6:cf:
         31:6b:4d:bc:ad:cf:d4:c7:ca:98:13:ba:96:49:3d:d0:8b:27:
         c4:33:60:f5:80:b5:0b:48:56:27:5d:a2:fe:f2:c9:ba:d5:e5:
         dd:6a:ad:67:90:5f:52:ff:ea:24:07:21:25:c0:df:d6:d8:f9:
         47:65:78:15:24:d7:f5:65:0d:e5:38:af:4c:f9:d8:ab:4d:31:
         80:a6:60:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:13:58 2024 by rpki-client on console-ams.rpki-client.org