Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32342d3234203d3e203332303938.roa
File:                     3230302e32332e3136382e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier:          8RVbccqngxmBYoGPGttByNkujT9NYm+E+zT4EIrtSMw=
Subject key identifier:   4A:F9:12:26:03:0A:35:B1:F9:E8:72:1C:9D:BD:F5:36:BA:7B:DF:92
Certificate issuer:       /CN=DA9CE332EEAB17EF6270B269990D948099DD5049
Certificate serial:       0124375323EF02091B2CBF8C51EFF28874CA78B5
Authority key identifier: DA:9C:E3:32:EE:AB:17:EF:62:70:B2:69:99:0D:94:80:99:DD:50:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32342d3234203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:10:15 +0000
ROA not before:           Tue 04 Feb 2025 18:05:15 +0000
ROA not after:            Tue 03 Feb 2026 18:10:15 +0000
asID:                     32098
IP address blocks:        200.23.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:24:37:53:23:ef:02:09:1b:2c:bf:8c:51:ef:f2:88:74:ca:78:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9CE332EEAB17EF6270B269990D948099DD5049
        Validity
            Not Before: Feb  4 18:05:15 2025 GMT
            Not After : Feb  3 18:10:15 2026 GMT
        Subject: CN=4AF91226030A35B1F9E8721C9DBDF536BA7BDF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:ef:af:99:b7:cb:50:db:57:97:74:02:97:
                    de:8c:5f:34:89:4c:f6:76:f9:5f:5e:cc:f6:6a:f0:
                    53:19:fb:2a:c1:99:9a:dd:95:a8:ad:9c:b2:30:bc:
                    79:de:77:03:26:84:c8:6f:6b:8f:d5:58:fa:0d:1b:
                    3a:82:79:77:ef:45:8f:c6:dc:87:47:23:71:d1:d8:
                    5e:dd:db:07:f9:8e:94:3a:df:21:63:70:3f:88:9f:
                    b2:12:92:4a:83:c1:07:22:e5:cb:3d:1e:33:97:da:
                    98:17:6d:c8:b4:cf:63:c1:df:38:e6:06:c2:f6:1e:
                    f6:6a:b5:50:6e:6a:30:4a:53:e6:3d:aa:4f:8b:ed:
                    05:ef:f4:a0:6b:0b:9f:f7:c1:1c:2e:21:a0:b0:f7:
                    a5:d0:73:31:60:a0:8f:de:b8:58:6b:85:c4:f1:78:
                    1e:5d:8f:a2:cc:4a:c9:fe:96:f8:dd:db:cb:bd:d5:
                    ee:99:74:f0:08:d5:a6:ae:1c:4c:4b:61:71:52:7f:
                    d9:dd:b0:37:6f:80:7f:1d:8d:18:f8:2d:56:15:c2:
                    b9:a2:02:aa:56:aa:83:bf:9e:6c:b4:c5:54:18:42:
                    a8:a9:13:00:b1:70:90:1e:6d:01:89:01:cb:37:2f:
                    d1:d4:7b:12:71:24:36:47:18:1b:37:1a:df:3a:3e:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F9:12:26:03:0A:35:B1:F9:E8:72:1C:9D:BD:F5:36:BA:7B:DF:92
            X509v3 Authority Key Identifier:
                keyid:DA:9C:E3:32:EE:AB:17:EF:62:70:B2:69:99:0D:94:80:99:DD:50:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32342d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:b6:43:95:f8:7a:7a:8b:3c:97:e8:cd:f6:6f:d7:90:a7:4b:
         e6:4e:e2:44:49:5f:ff:09:61:10:eb:ad:ae:4d:b3:b0:5f:6f:
         31:db:68:0b:02:21:0e:56:d2:a2:95:6e:53:6a:84:d1:e3:97:
         04:95:31:fd:c5:f6:af:45:36:91:63:8c:15:24:30:14:00:22:
         bb:c3:12:6a:d9:a5:16:7d:e9:b7:53:01:d1:28:eb:57:86:e5:
         7d:ef:b9:cf:45:c0:25:ae:93:95:26:ad:5f:cc:5c:67:99:1e:
         d6:29:1b:7c:e8:ce:e4:fa:5f:61:c3:65:14:4b:3d:6a:39:d1:
         e7:42:0c:62:eb:63:2b:51:92:e2:ff:81:a3:05:82:69:e5:9f:
         eb:21:c6:52:9e:ca:d5:54:bd:26:e3:53:fe:29:04:62:d9:2f:
         3b:cc:af:17:6a:38:57:49:c9:ee:30:a9:3c:89:72:af:96:47:
         37:ad:a7:c1:61:cb:6b:d6:3a:af:10:8d:e2:6b:d5:11:84:d3:
         e7:c5:51:5c:36:e1:1c:7c:04:87:36:4a:9e:81:d4:0d:77:75:
         57:61:3c:83:4a:bf:b5:bd:17:2b:01:60:09:07:b0:e1:b6:39:
         ba:f7:c8:f9:18:53:6e:12:4f:ad:76:a7:aa:1d:c5:2c:df:85:
         a8:ee:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:38 2025 by rpki-client