Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34372e302f32342d3234203d3e2037343138.roa
File:                     3230302e32392e34372e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          6Z+qT6SDDc4Y8Cp8sjf8LMeOIG0UGKcM6o9RGOVC3V0=
Subject key identifier:   AA:55:BF:79:FE:63:7C:0E:C7:E0:F2:03:1E:10:9B:AF:58:33:E0:17
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       153B5EF2685B08246C0C617213019698852E0F25
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34372e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:29:54 +0000
ROA not before:           Tue 04 Feb 2025 18:24:54 +0000
ROA not after:            Tue 03 Feb 2026 18:29:54 +0000
asID:                     7418
IP address blocks:        200.29.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3b:5e:f2:68:5b:08:24:6c:0c:61:72:13:01:96:98:85:2e:0f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:24:54 2025 GMT
            Not After : Feb  3 18:29:54 2026 GMT
        Subject: CN=AA55BF79FE637C0EC7E0F2031E109BAF5833E017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:28:1d:f9:f1:86:ef:85:de:e6:15:3e:0e:
                    45:31:0c:60:ff:b7:3d:96:c3:e1:ab:26:57:bc:ec:
                    d8:27:f7:0d:5c:b1:91:01:a9:bc:60:0e:78:f8:37:
                    90:a8:68:9a:0c:77:57:7b:b5:b6:9a:55:fc:ac:3d:
                    fd:3b:a0:b5:ea:ea:6f:69:74:95:f6:ba:38:b5:e5:
                    c8:0f:f8:94:e2:46:a9:05:59:04:4d:ea:c1:e4:3f:
                    ba:34:90:df:ec:87:07:7b:fa:13:3d:39:96:05:20:
                    93:cc:aa:8d:40:90:67:18:c0:16:d4:bb:60:8f:3d:
                    bc:a3:63:39:5f:94:15:af:38:4a:28:bc:ec:0d:b9:
                    8d:6e:47:38:7f:c2:5b:e1:f6:cb:a3:bd:b7:51:25:
                    a2:fc:4f:4d:29:5a:70:e3:3d:34:ea:21:d0:5f:ca:
                    91:ee:c1:c7:cb:03:3e:d3:54:98:1e:dc:36:aa:12:
                    1e:43:97:d7:5c:a9:32:e2:8d:1d:0b:aa:1a:ad:0f:
                    2b:89:41:9a:53:32:27:6b:d6:a0:33:bf:a1:7e:17:
                    d6:1e:20:cb:3a:0e:b4:11:27:a8:a6:33:4e:e7:b1:
                    f6:05:55:28:bb:35:33:fb:f9:da:8a:de:7b:2d:1c:
                    00:52:60:b4:5e:0c:05:bd:c1:bc:0e:9f:0d:82:92:
                    33:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:55:BF:79:FE:63:7C:0E:C7:E0:F2:03:1E:10:9B:AF:58:33:E0:17
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34372e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:1d:52:c3:0d:83:d0:1f:f3:87:23:3d:7e:ea:ec:a8:fc:a7:
         66:e4:97:00:83:0d:00:3d:bb:f7:87:db:9e:a5:0e:6e:a9:4e:
         4c:c6:dd:69:9d:4f:fe:4e:c4:13:a4:39:67:92:70:9d:69:b4:
         60:b0:d2:d5:be:18:99:ec:80:c5:29:1e:aa:c2:60:74:f9:da:
         46:48:d5:c7:a2:90:51:6e:9b:04:4f:8a:60:71:86:0b:2f:46:
         c4:39:5f:ae:2f:0c:fa:bd:b9:39:f2:79:6d:f8:e6:6a:d5:07:
         5e:fa:dc:eb:2b:60:6b:12:86:7b:8c:4c:60:b1:04:dd:99:c3:
         e8:d0:b1:69:67:c8:9f:92:40:98:a6:9c:ba:13:53:68:66:a8:
         f5:fc:6b:35:c2:e9:44:be:e4:df:64:0f:f8:42:2c:a2:cd:25:
         da:cf:37:cf:cd:b1:86:39:4e:15:f5:ae:bb:e2:8e:d3:ae:d6:
         ce:ef:de:43:80:e5:4a:6a:de:12:f1:43:12:9a:e3:a2:51:41:
         bb:1a:a9:d5:14:98:fd:d1:bd:56:ff:78:eb:60:52:ce:59:0d:
         24:9e:b9:e2:a9:d2:e7:1c:d2:92:59:81:23:e8:ba:18:f7:17:
         1e:d5:b5:f7:c1:d9:1a:a8:06:3e:af:f2:83:78:5b:c9:1b:97:
         e6:5a:e4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:26 2025 by rpki-client