Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/3230302e3132342e3138342e302f32322d3234203d3e203532343031.roa
File:                     3230302e3132342e3138342e302f32322d3234203d3e203532343031.roa (raw, json)
Hash identifier:          lC43iUf4yCHKg/qOaWpI6Xhhlda+xbbkRY6HDYYOXm0=
Subject key identifier:   8B:3A:02:00:30:90:19:FC:8F:32:22:9C:58:71:F0:5D:10:AA:9B:DB
Certificate issuer:       /CN=A792140672C8F8E1F00F7A465B0394E9D2AAEC27
Certificate serial:       3AF23F5519E46C52D9D25E5F285C3F564C099DA6
Authority key identifier: A7:92:14:06:72:C8:F8:E1:F0:0F:7A:46:5B:03:94:E9:D2:AA:EC:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/3230302e3132342e3138342e302f32322d3234203d3e203532343031.roa
Signing time:             Tue 04 Feb 2025 18:49:50 +0000
ROA not before:           Tue 04 Feb 2025 18:44:50 +0000
ROA not after:            Tue 03 Feb 2026 18:49:50 +0000
asID:                     52401
IP address blocks:        200.124.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 05:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f2:3f:55:19:e4:6c:52:d9:d2:5e:5f:28:5c:3f:56:4c:09:9d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A792140672C8F8E1F00F7A465B0394E9D2AAEC27
        Validity
            Not Before: Feb  4 18:44:50 2025 GMT
            Not After : Feb  3 18:49:50 2026 GMT
        Subject: CN=8B3A0200309019FC8F32229C5871F05D10AA9BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:ca:b0:8b:00:9c:e1:f5:f6:16:90:e6:71:
                    88:b9:b7:c6:b1:10:63:70:d2:9f:ed:ab:76:d3:a0:
                    8a:20:73:56:a8:40:8c:3b:36:52:20:25:71:67:33:
                    d9:16:1f:4c:50:9a:ae:1c:78:01:bc:b8:46:f2:e3:
                    44:fa:3e:fa:72:b4:31:60:c3:1e:c0:7d:22:36:56:
                    ad:ad:31:ef:77:64:fe:0b:85:46:f6:dd:73:df:45:
                    d1:73:48:70:c6:1a:d5:d1:1f:da:b9:c6:26:91:9d:
                    85:71:0d:20:62:3d:1b:f1:01:cb:b5:d9:b4:ca:26:
                    d1:9e:e1:ce:7f:9e:9c:60:9e:fd:8e:55:a7:2e:41:
                    48:32:79:48:37:c2:5e:ee:ce:aa:fb:0b:52:d5:33:
                    a2:51:1d:08:c5:54:b1:8a:83:72:2a:07:44:4a:97:
                    a6:19:0d:b6:73:10:2a:40:6d:2d:04:4c:f3:17:e5:
                    31:3e:bc:b9:03:8f:27:2e:b7:8d:03:75:11:81:5e:
                    6b:25:fa:ef:1d:c5:47:ec:87:f6:ae:71:c3:1d:b8:
                    0c:30:ce:a9:62:ce:da:53:82:95:fe:cb:86:eb:f0:
                    92:6f:d5:7e:7a:16:4f:ca:f9:b2:98:77:1c:8a:48:
                    0a:92:11:0e:94:b3:3e:ea:54:6d:80:d6:05:24:a5:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3A:02:00:30:90:19:FC:8F:32:22:9C:58:71:F0:5D:10:AA:9B:DB
            X509v3 Authority Key Identifier:
                keyid:A7:92:14:06:72:C8:F8:E1:F0:0F:7A:46:5B:03:94:E9:D2:AA:EC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/3230302e3132342e3138342e302f32322d3234203d3e203532343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:50:90:cf:61:ba:e3:06:0b:78:de:50:30:ee:4c:d4:b4:90:
         78:69:14:64:9e:f5:44:d4:42:fb:83:ba:b9:24:7a:3e:7f:0c:
         d8:e3:fb:a7:86:ff:5d:30:4d:00:47:1e:6c:72:cd:19:72:17:
         61:83:f6:ab:c0:c6:0b:6b:df:8e:18:19:c9:e6:90:94:32:22:
         90:86:52:6f:65:90:c6:0e:02:fd:b1:64:57:ba:31:96:16:54:
         2c:0b:46:b2:1d:fe:3b:15:81:3d:7a:ee:aa:41:8c:c3:89:c0:
         f7:f3:66:03:f3:47:15:ed:c3:88:ce:2b:3b:5d:77:cc:06:4b:
         82:2e:ad:82:85:33:35:25:e9:f1:cb:c8:70:fd:78:93:b0:25:
         82:80:94:df:7f:a5:05:74:97:5c:0e:f0:65:b7:2c:b4:de:06:
         fc:84:86:7b:07:9f:fb:e8:e0:63:6a:78:75:16:19:30:d5:6b:
         07:66:e7:da:47:3e:ce:ff:5d:41:70:37:d7:d0:64:91:31:17:
         a9:88:ac:b5:23:9e:02:b7:ac:95:d5:d2:60:06:70:fe:a0:11:
         7b:64:08:60:e0:85:d0:45:3a:52:7f:bc:14:66:7b:62:9f:aa:
         5e:48:d8:c5:0b:dc:1c:33:c9:f3:a5:83:88:81:a7:81:c0:13:
         74:4e:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:57 2025 by rpki-client