Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e33322e302f31392d3234203d3e203136363239.roa
File:                     3230302e35302e33322e302f31392d3234203d3e203136363239.roa (raw, json)
Hash identifier:          IK6jBqjk3Jx4lPNE2ULk1Th8VkS02K0QmzpwcglIv5o=
Subject key identifier:   3F:88:B6:D1:BC:46:66:4B:8E:49:D1:0E:C7:34:98:B6:7F:E2:40:AD
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       789E76C6CA36609995C34D98890E539B1E4F91BF
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e33322e302f31392d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:29:53 +0000
ROA not before:           Tue 04 Feb 2025 18:24:53 +0000
ROA not after:            Tue 03 Feb 2026 18:29:53 +0000
asID:                     16629
IP address blocks:        200.50.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9e:76:c6:ca:36:60:99:95:c3:4d:98:89:0e:53:9b:1e:4f:91:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:24:53 2025 GMT
            Not After : Feb  3 18:29:53 2026 GMT
        Subject: CN=3F88B6D1BC46664B8E49D10EC73498B67FE240AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:1f:5f:b9:04:b2:dc:00:47:76:bc:92:22:
                    52:74:f4:f2:71:ea:cb:96:99:a9:31:51:dc:df:21:
                    4c:0b:cd:b7:43:9f:90:16:b0:3b:b9:ce:09:ad:a6:
                    f9:f3:ea:b7:05:8c:08:e7:4e:ae:77:f2:f9:15:3b:
                    ff:68:38:25:70:b1:09:ab:8e:d2:d0:0a:7c:e5:ae:
                    40:d7:4e:be:2b:6f:d3:ba:41:14:5b:15:86:7f:1b:
                    d7:02:e0:36:16:5f:51:6f:d3:7d:6a:7f:e0:16:7a:
                    06:2c:1c:64:31:eb:76:ca:cd:e2:ce:06:2a:3a:e2:
                    5a:84:ea:6c:f4:a0:ba:19:9e:4e:04:a8:91:14:95:
                    b2:1f:51:05:41:cc:f6:ab:ee:b9:a3:d8:dd:d0:cc:
                    49:83:c3:99:a7:b6:01:f0:37:4b:c5:55:dc:34:98:
                    62:01:07:a6:a3:0e:b9:52:c7:fa:6c:28:c1:e7:84:
                    12:9a:77:fd:9c:ae:26:75:40:55:f1:55:2e:74:fd:
                    da:ec:40:6a:f3:9b:08:a2:5d:3c:4c:45:e7:eb:ad:
                    44:71:a6:4d:e1:d6:9d:c6:38:9c:00:44:31:bc:13:
                    e3:72:5e:70:ab:50:56:9f:61:34:2d:c0:95:1f:1b:
                    d9:df:01:15:5f:22:83:36:98:5d:89:fe:3a:f9:0f:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:88:B6:D1:BC:46:66:4B:8E:49:D1:0E:C7:34:98:B6:7F:E2:40:AD
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e33322e302f31392d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:97:7b:8e:8d:a3:87:a1:95:4b:62:d4:15:a9:29:69:67:bc:
         b1:0a:9d:29:c2:0f:d8:b7:b3:b2:40:8f:a1:25:cd:6d:47:86:
         97:97:d8:ac:e7:a4:78:c6:0b:c3:44:94:ea:ec:80:55:bf:e6:
         c9:6a:39:3a:2d:60:15:6c:b4:b0:5c:7b:a6:18:94:40:f0:5a:
         52:09:d5:a0:e4:be:72:d8:32:55:75:b0:79:34:d5:df:7b:dd:
         49:30:1b:7d:b3:01:f8:19:b0:83:4a:6b:ba:31:b4:27:47:e3:
         c6:13:e2:84:60:fa:24:52:ed:20:94:f7:0e:b9:77:b1:4f:19:
         9b:6d:cb:20:5a:73:ac:64:67:44:50:d2:c2:a0:95:dc:8a:77:
         ff:44:f7:cf:26:1c:00:7d:c2:39:39:3b:92:44:02:45:4c:42:
         ba:b9:4a:61:5b:56:50:51:9c:b0:45:78:d7:c0:f0:aa:c6:72:
         0c:90:53:0b:3f:16:e7:f7:c9:8e:c9:1f:2b:3d:87:a0:64:c7:
         4f:75:07:18:88:85:bf:d3:2a:20:82:9d:e6:5a:4f:0a:cf:c9:
         b2:c2:b5:90:63:58:ae:24:7b:58:78:2a:cb:7f:06:0f:ea:2a:
         36:ac:c3:25:e5:42:a0:5a:73:58:15:0b:12:50:b9:71:df:9f:
         3d:94:0e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:55:44 2025 by rpki-client