Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34332e302f32342d3234203d3e2037343138.roa
File:                     3230302e32392e34332e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          r3In+POKZLeWiqCwfrBkQ6WSs1AAo/A0R/SAZr/nQuU=
Subject key identifier:   F4:8E:C1:4D:C9:55:70:E8:22:33:41:67:6C:A0:CC:04:BB:40:83:32
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       1B78D751A35328FC3DFB22EFACB48AE956F77DF7
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34332e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:26 +0000
ROA not before:           Tue 05 Mar 2024 17:47:26 +0000
ROA not after:            Tue 04 Mar 2025 17:52:26 +0000
asID:                     7418
IP address blocks:        200.29.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:78:d7:51:a3:53:28:fc:3d:fb:22:ef:ac:b4:8a:e9:56:f7:7d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:26 2024 GMT
            Not After : Mar  4 17:52:26 2025 GMT
        Subject: CN=F48EC14DC95570E8223341676CA0CC04BB408332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:96:ef:b7:7e:ef:15:86:bf:7e:e4:b0:af:
                    7e:cd:33:3f:94:da:9c:03:99:cb:59:5c:8e:86:82:
                    f2:83:13:58:2f:b7:44:e1:7b:bf:60:aa:c6:64:1d:
                    b3:80:3d:e6:6c:6c:34:00:30:43:37:db:ae:e7:eb:
                    af:bd:f6:81:dc:a2:b8:c9:5f:34:81:e1:a7:63:a9:
                    81:d5:1b:ae:2f:7e:9a:d1:a8:fb:de:98:4d:76:03:
                    70:20:55:39:7e:ec:59:7d:fa:26:5d:31:f6:19:fc:
                    82:45:dc:9d:1f:30:1d:7c:7b:72:02:10:ed:46:92:
                    d3:83:ad:8e:20:b8:1a:6d:bd:7e:23:59:3a:80:f4:
                    15:52:aa:57:7e:90:ab:15:fd:1c:57:92:9e:25:10:
                    84:ce:bb:db:51:38:6f:f0:bd:96:d4:a5:55:ce:4b:
                    35:cb:de:83:51:75:cc:44:52:99:6b:fc:0c:62:6c:
                    c7:37:66:4a:48:63:2f:99:fb:59:9b:ae:f3:3a:2a:
                    90:4a:50:b4:58:fd:f8:0a:5b:8e:0f:ac:2f:87:bd:
                    4a:ee:40:f8:35:e6:45:e4:9c:49:f3:b6:ef:c6:54:
                    ba:ce:56:5e:98:0e:ab:3a:d9:e3:4d:13:83:cf:a3:
                    8a:48:09:30:3f:91:b2:33:00:9b:e8:e0:56:6b:b5:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8E:C1:4D:C9:55:70:E8:22:33:41:67:6C:A0:CC:04:BB:40:83:32
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34332e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:a4:e4:48:d7:bf:0b:8d:36:87:3b:d9:7d:1a:34:39:cc:
         b1:d0:38:66:cb:b2:73:69:b2:bd:68:a5:f1:0f:2e:03:6c:8f:
         53:00:c4:77:54:e6:d0:c6:82:d9:16:03:33:42:7d:74:15:a1:
         1f:57:2d:f9:4e:fc:54:1e:4e:3a:05:a4:4a:de:45:14:b0:84:
         a7:f7:1e:cc:22:33:2c:44:da:b4:57:a6:f5:aa:80:86:33:cd:
         f1:55:b5:74:26:6c:f0:df:16:26:ba:1e:9a:74:c7:f1:bc:9d:
         40:39:fa:8c:06:0c:91:68:e6:65:d5:d0:a0:ed:90:98:e1:a6:
         26:24:d8:d4:d8:29:81:a3:94:b0:92:0d:b1:91:17:b8:b1:b5:
         39:14:e2:8f:3e:f4:cb:62:0f:77:fd:54:9b:f4:9b:37:5d:09:
         f6:80:cd:f5:d7:6c:63:12:b1:d7:ef:4c:80:c4:81:bf:33:ac:
         a4:d2:36:0f:e2:2e:3d:3e:97:27:04:00:05:a9:15:0d:a4:eb:
         17:8e:aa:cb:25:72:4e:ae:74:07:21:7d:7d:29:d2:ac:dd:2a:
         49:dc:d9:03:db:49:56:ad:07:8e:93:61:79:cd:49:90:45:62:
         ee:5a:78:07:66:6a:9b:26:a8:7e:db:db:22:22:df:e6:00:31:
         74:be:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:11:11 2024 by rpki-client on console-fra.rpki-client.org