Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD74841A6CBE077B8A71306DA7021703578C59E08E888F343FC24F7013044485/0/3230302e3130382e3138342e302f32322d3234203d3e20323635363234.roa
File:                     3230302e3130382e3138342e302f32322d3234203d3e20323635363234.roa (raw, json)
Hash identifier:          xoeUR+wPP42XcEwtPJVJpK0SSut1txhIFZfkDwc6tX4=
Subject key identifier:   EC:76:7D:93:C8:38:12:84:E2:2D:35:97:2A:B8:FD:19:04:7D:EF:DB
Certificate issuer:       /CN=E64124DC2B81A9F0A514E13F350481140958F195
Certificate serial:       33230BABE1DE25E87EC35DA0376911D9C2D85E53
Authority key identifier: E6:41:24:DC:2B:81:A9:F0:A5:14:E1:3F:35:04:81:14:09:58:F1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64124DC2B81A9F0A514E13F350481140958F195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD74841A6CBE077B8A71306DA7021703578C59E08E888F343FC24F7013044485/0/3230302e3130382e3138342e302f32322d3234203d3e20323635363234.roa
Signing time:             Tue 04 Feb 2025 18:04:57 +0000
ROA not before:           Tue 04 Feb 2025 17:59:57 +0000
ROA not after:            Tue 03 Feb 2026 18:04:57 +0000
asID:                     265624
IP address blocks:        200.108.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD74841A6CBE077B8A71306DA7021703578C59E08E888F343FC24F7013044485/0/E64124DC2B81A9F0A514E13F350481140958F195.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD74841A6CBE077B8A71306DA7021703578C59E08E888F343FC24F7013044485/0/E64124DC2B81A9F0A514E13F350481140958F195.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64124DC2B81A9F0A514E13F350481140958F195.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:23:0b:ab:e1:de:25:e8:7e:c3:5d:a0:37:69:11:d9:c2:d8:5e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E64124DC2B81A9F0A514E13F350481140958F195
        Validity
            Not Before: Feb  4 17:59:57 2025 GMT
            Not After : Feb  3 18:04:57 2026 GMT
        Subject: CN=EC767D93C8381284E22D35972AB8FD19047DEFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:6b:cb:97:94:ec:c0:fa:98:c9:a5:e9:bc:
                    b4:ab:4e:fc:89:2d:2d:64:86:7f:6c:7a:df:f4:9e:
                    e7:60:cb:90:e3:a6:70:e1:7f:a3:3b:29:48:4e:5d:
                    e4:0b:27:09:0d:a0:5e:e8:0b:98:59:09:f9:ac:05:
                    79:77:a6:8b:59:56:dc:2a:17:4e:e9:60:90:35:93:
                    65:b2:58:90:e9:98:66:32:92:ce:a6:07:7c:5d:9f:
                    d0:97:85:ed:a5:c6:4e:7f:2d:d0:b8:ed:31:a5:26:
                    1b:af:99:7a:44:49:b6:94:43:1c:ab:61:79:6d:76:
                    e2:a5:8a:ca:49:96:b8:a7:8a:87:e3:32:77:a2:5b:
                    2a:f3:24:c5:03:cf:36:80:fb:96:76:13:06:87:bb:
                    75:ce:a8:9a:37:71:63:23:1a:6a:82:19:82:23:1c:
                    83:59:1a:80:03:b8:ed:45:d5:c9:38:b0:d6:63:b7:
                    05:ff:4d:7f:d8:f4:c8:7b:33:a0:79:ed:5a:66:f3:
                    f3:ba:ee:00:85:c4:fb:f1:0c:e8:e3:35:a8:c4:11:
                    2b:6e:e5:5d:a2:a3:1b:e8:0b:f2:03:7f:38:a8:f0:
                    46:80:ff:97:b9:48:7c:28:51:8d:b8:f6:3c:fd:8d:
                    87:0b:18:1a:5e:95:3a:2f:04:db:13:15:f6:4f:17:
                    6c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:76:7D:93:C8:38:12:84:E2:2D:35:97:2A:B8:FD:19:04:7D:EF:DB
            X509v3 Authority Key Identifier:
                keyid:E6:41:24:DC:2B:81:A9:F0:A5:14:E1:3F:35:04:81:14:09:58:F1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD74841A6CBE077B8A71306DA7021703578C59E08E888F343FC24F7013044485/0/E64124DC2B81A9F0A514E13F350481140958F195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64124DC2B81A9F0A514E13F350481140958F195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD74841A6CBE077B8A71306DA7021703578C59E08E888F343FC24F7013044485/0/3230302e3130382e3138342e302f32322d3234203d3e20323635363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:fb:4a:d0:84:6c:1e:c0:ee:2f:bd:67:92:fc:6f:b6:4d:3c:
         17:24:98:3e:ea:97:00:f7:fb:f4:e2:ee:1b:6e:8c:4a:75:95:
         81:7a:27:01:1c:dc:40:8e:7b:16:e0:20:14:7e:36:6f:76:7a:
         32:01:32:35:13:b9:08:90:e1:c3:be:43:92:86:2e:78:7e:3e:
         d2:12:fd:ac:2a:2d:1e:74:76:81:be:95:d0:ad:87:ec:ca:5e:
         82:92:b9:90:0c:34:ea:70:eb:50:d2:f5:f7:df:fc:61:3c:cf:
         f9:76:77:02:b9:42:41:c7:d5:39:ab:78:d0:31:d8:d1:46:19:
         72:32:a4:70:dd:13:cc:77:46:ba:95:e1:58:cc:2e:75:a5:38:
         ef:1a:f4:d1:cf:d8:7a:6d:f8:98:f3:8a:6f:12:fe:57:8d:c3:
         df:4d:34:96:27:75:02:50:eb:27:e8:7b:c5:fe:4c:bb:4e:12:
         10:25:c9:24:55:51:f6:9c:b5:98:20:34:f6:1f:0c:92:32:b8:
         e7:75:63:10:9d:25:54:a8:23:e0:bc:f2:7c:dc:9d:31:3e:2b:
         fd:4f:a1:b6:e8:a5:83:84:a1:52:b7:e9:33:88:a7:03:72:6f:
         b7:4b:50:0c:22:57:83:7d:81:b9:fd:b9:e7:6c:5c:b2:1f:2b:
         89:87:4e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:20:09 2025 by rpki-client