Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e31332e3134342e302f32312d3231203d3e20323634373133.roa
File:                     3230302e31332e3134342e302f32312d3231203d3e20323634373133.roa (raw, json)
Hash identifier:          hM4SNczdZNH2jq75arQnHEzPpgUf4fmGFM4LSOpaqAE=
Subject key identifier:   04:1A:41:14:6D:80:6F:9A:47:29:8E:F2:14:27:83:6A:02:90:EC:49
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       7742F9FD6CB4E47D3D5C4F8BC6F42435226A1147
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e31332e3134342e302f32312d3231203d3e20323634373133.roa
Signing time:             Tue 04 Feb 2025 18:45:58 +0000
ROA not before:           Tue 04 Feb 2025 18:40:58 +0000
ROA not after:            Tue 03 Feb 2026 18:45:58 +0000
asID:                     264713
IP address blocks:        200.13.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:42:f9:fd:6c:b4:e4:7d:3d:5c:4f:8b:c6:f4:24:35:22:6a:11:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Feb  4 18:40:58 2025 GMT
            Not After : Feb  3 18:45:58 2026 GMT
        Subject: CN=041A41146D806F9A47298EF21427836A0290EC49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:13:5a:e9:0a:77:20:ad:d5:e7:22:70:00:
                    d7:30:75:33:1d:58:2e:03:2b:ea:ea:6f:94:f5:1a:
                    e3:a9:88:a5:2a:d4:a0:e4:d6:de:f6:6d:32:51:28:
                    53:ba:0f:5d:67:f8:bd:69:50:f2:9a:6f:8e:6c:07:
                    01:e3:ea:5b:0c:ca:67:6b:a1:4f:28:e8:8d:22:2d:
                    6b:96:dc:6c:c0:22:d4:02:e4:4d:32:bc:45:b2:a5:
                    ef:44:1b:98:03:68:7c:18:1c:e0:fe:ad:1c:13:9a:
                    6e:b9:60:ba:96:fc:7c:55:3a:72:75:5c:92:f8:24:
                    e8:95:77:34:ed:e8:4d:93:46:7f:2e:17:92:d0:97:
                    b2:bd:cc:9e:62:fc:29:af:f4:19:a4:00:1f:28:34:
                    9e:8c:8a:e3:9a:23:8a:b2:fb:0f:15:9d:4e:26:19:
                    09:05:ad:95:91:ed:4e:9f:c0:8d:af:f6:6a:d8:01:
                    62:60:13:9a:ab:26:0c:75:a6:d8:08:da:d8:e0:97:
                    b4:aa:b1:ae:35:0c:9b:10:cc:aa:56:e3:a7:5b:aa:
                    35:8d:98:de:5b:94:67:38:10:db:1e:82:f3:f8:15:
                    95:a2:93:64:03:20:67:28:3e:06:c2:ff:8e:5d:17:
                    5c:89:6b:be:ba:b8:43:ec:7b:85:62:58:bb:d2:8e:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1A:41:14:6D:80:6F:9A:47:29:8E:F2:14:27:83:6A:02:90:EC:49
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e31332e3134342e302f32312d3231203d3e20323634373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:40:eb:f3:e7:39:20:cb:23:66:74:1c:0a:31:12:9f:74:5d:
         ad:40:33:43:a9:b5:ef:58:db:08:5a:82:de:ec:1d:f1:83:ee:
         d5:20:7d:20:73:04:97:89:00:74:27:23:af:45:00:b8:0b:fc:
         e7:8d:97:f1:56:68:36:fe:57:b9:63:67:0c:4a:29:66:3c:42:
         b3:3f:50:2d:b8:ea:fe:1d:4b:d2:fa:8d:bb:dc:43:6e:64:bf:
         d4:f8:1a:13:ab:0c:85:41:24:38:4c:1f:40:de:33:6a:f1:80:
         ca:35:c1:85:a2:dd:7d:73:1e:45:8b:5d:76:64:83:fc:29:c7:
         10:ae:78:8c:2c:45:80:e0:8c:c3:58:57:85:b9:1d:2a:bf:85:
         a6:0d:1d:91:25:6f:b3:d9:10:18:d3:43:88:cf:ad:5f:49:38:
         74:90:b2:c5:aa:46:7a:f9:fb:b9:31:15:4d:11:35:64:52:7d:
         75:33:4d:e6:5b:81:bb:73:7c:db:52:75:3c:80:2c:52:3d:30:
         02:98:02:5d:3a:8a:d2:8a:54:d3:e5:4b:ac:82:2b:9b:d0:d0:
         f1:07:30:42:f2:d0:09:99:f5:aa:f2:32:f5:80:57:66:80:22:
         9f:50:ef:b2:42:81:79:af:a4:b6:ff:0a:68:06:91:a9:c8:89:
         38:92:4c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:20 2025 by rpki-client