Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35322e3131322e302f32302d3234203d3e203131313732.roa
File:                     3230302e35322e3131322e302f32302d3234203d3e203131313732.roa (raw, json)
Hash identifier:          j2LCASfOjk1I7vE/A1olmC4ECIziDsPt2a2aPJdZZOc=
Subject key identifier:   1B:A0:88:E3:B8:E8:BA:87:4D:63:9A:F9:14:C1:70:76:AC:C2:16:10
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       0B33D2531E1B7F4F7C9A5A82DF5C67FF669A27B9
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35322e3131322e302f32302d3234203d3e203131313732.roa
Signing time:             Tue 04 Feb 2025 18:52:43 +0000
ROA not before:           Tue 04 Feb 2025 18:47:43 +0000
ROA not after:            Tue 03 Feb 2026 18:52:43 +0000
asID:                     11172
IP address blocks:        200.52.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:33:d2:53:1e:1b:7f:4f:7c:9a:5a:82:df:5c:67:ff:66:9a:27:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:43 2025 GMT
            Not After : Feb  3 18:52:43 2026 GMT
        Subject: CN=1BA088E3B8E8BA874D639AF914C17076ACC21610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:4c:f4:d6:00:8b:5d:d2:ad:8a:24:a0:47:
                    a3:3b:c9:8b:ba:06:99:b2:0f:98:02:e4:99:1b:a4:
                    f5:2c:4d:c1:1b:58:0e:b7:af:a7:9b:7f:98:b9:d0:
                    ec:b7:18:43:9e:69:b2:7c:2e:03:dc:e3:5d:6d:27:
                    77:b4:96:44:12:50:ef:5d:75:f2:ed:fd:3c:11:23:
                    f1:8d:00:81:bb:00:0c:d6:88:af:d6:a0:6b:9c:07:
                    2b:91:0b:69:e0:e2:be:7a:12:69:69:35:82:b5:c9:
                    30:33:dc:76:93:e1:71:fc:98:16:a3:3c:20:b6:af:
                    70:4a:eb:e6:8c:41:e0:50:be:e3:16:a9:e2:d9:e3:
                    f6:9e:1d:e9:2f:78:3e:0e:0e:e0:7c:54:9e:00:5f:
                    1c:cd:0d:65:9b:f0:1d:4c:4f:c5:16:ca:40:1f:31:
                    13:25:e7:fb:62:0d:c7:7e:38:23:8b:78:72:d5:ef:
                    7d:a2:09:77:08:24:dc:5f:c1:e7:fc:aa:6a:99:e8:
                    7e:cc:5f:d3:6c:fa:e0:91:2b:1d:61:06:30:d6:82:
                    b3:61:a3:83:29:c6:6a:ea:65:4e:b1:6b:2b:7e:f2:
                    3d:08:31:64:34:cc:2a:66:8c:ba:81:33:99:e9:d6:
                    92:18:2f:87:6a:fb:a7:23:87:de:fc:9a:10:d2:fe:
                    31:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A0:88:E3:B8:E8:BA:87:4D:63:9A:F9:14:C1:70:76:AC:C2:16:10
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35322e3131322e302f32302d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:c1:04:e6:ad:fc:67:94:b5:80:ea:b6:02:9c:23:f6:c0:a0:
         a4:86:46:e2:60:3c:c8:73:bb:52:1b:69:08:61:55:73:12:e0:
         54:bc:88:fc:9c:90:c7:bd:47:ac:05:9d:7f:a7:f5:6f:39:54:
         00:8d:c7:c0:82:31:aa:56:c9:f4:fc:06:5f:d2:4b:63:58:5b:
         af:2b:46:98:23:fc:f8:33:c0:a0:1e:fb:71:73:5a:3c:d4:a4:
         fa:e0:e3:be:7c:36:67:ef:5e:61:11:7e:0e:4f:09:48:ea:cf:
         30:95:89:ff:b3:07:e4:2f:97:82:c4:49:4c:12:2c:d2:8d:1c:
         56:84:66:76:5b:15:7c:43:f4:57:23:e3:8c:79:87:61:fa:c9:
         a6:5e:1f:ca:49:e6:4f:3e:50:b2:48:bf:2e:02:98:fd:91:f2:
         b7:28:4c:d9:fb:9d:af:db:f9:08:d0:87:27:85:e4:c1:d6:11:
         59:60:f2:1a:e3:4a:dd:03:cf:36:65:07:fa:df:28:dd:d2:0e:
         11:b6:d3:ef:89:57:4e:87:27:61:7e:76:39:04:53:b1:4d:a0:
         71:14:ec:b3:cc:fc:4e:9c:d2:22:c2:52:6c:57:bc:4a:1e:8c:
         ee:a0:0a:08:37:c4:49:30:1e:bd:b0:21:89:43:e0:a4:7a:ce:
         52:fa:df:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:27:17 2025 by rpki-client