Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e302e302f31372d3234203d3e2036353033.roa
File:                     3230302e39342e302e302f31372d3234203d3e2036353033.roa (raw, json)
Hash identifier:          iaXHX+Jr8ckQ1+nZovg+Uh4H8L6TvEsRHOFOLjdhmG8=
Subject key identifier:   FD:F5:7C:E1:43:A5:B9:5A:60:87:EE:71:2F:4F:3D:14:D2:C6:C3:0F
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       2179AD173BDF1A93E1E8B0589D694F7D2C8E6DF5
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e302e302f31372d3234203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:52:45 +0000
ROA not before:           Tue 04 Feb 2025 18:47:45 +0000
ROA not after:            Tue 03 Feb 2026 18:52:45 +0000
asID:                     6503
IP address blocks:        200.94.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:79:ad:17:3b:df:1a:93:e1:e8:b0:58:9d:69:4f:7d:2c:8e:6d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:45 2025 GMT
            Not After : Feb  3 18:52:45 2026 GMT
        Subject: CN=FDF57CE143A5B95A6087EE712F4F3D14D2C6C30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b5:59:96:93:04:9f:ea:8d:b2:e5:b8:49:20:
                    64:a1:18:c1:f2:31:04:65:e9:49:05:54:98:c5:9d:
                    cf:f8:05:cc:ef:97:c4:fc:35:dc:cd:a3:1b:87:29:
                    8a:1d:64:3c:3b:a5:f6:01:7d:34:ca:4a:73:76:dc:
                    57:28:82:35:64:42:27:a2:af:76:c9:cd:c1:1b:f7:
                    be:15:05:3b:a3:89:88:a8:df:65:64:9d:c1:24:2e:
                    db:80:ef:46:b4:64:b7:81:b2:95:02:91:d1:ec:83:
                    f4:4e:35:7d:2a:57:dc:b1:99:69:b9:de:9c:fe:ee:
                    d1:10:ab:ac:a4:b0:9d:fe:48:44:9a:04:ba:80:cc:
                    17:96:ad:ae:ad:b2:9e:9e:6a:c1:df:b9:51:ae:70:
                    f7:70:62:8a:64:ce:76:26:2c:ba:a4:61:cc:82:7b:
                    36:10:3c:dd:5a:b9:41:54:3b:9c:72:33:46:24:98:
                    d1:7f:6f:21:b5:c0:8f:cd:29:4f:d8:03:32:09:21:
                    c6:5b:25:e7:51:8a:52:21:24:44:df:89:e2:4c:75:
                    be:70:f0:14:6d:02:b9:a6:0a:46:0a:53:2c:08:3e:
                    7d:25:a5:62:46:95:c0:0b:6a:d0:8f:0b:1b:1a:ba:
                    9a:65:df:08:f3:c7:84:42:f3:76:ed:99:a2:9f:7e:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F5:7C:E1:43:A5:B9:5A:60:87:EE:71:2F:4F:3D:14:D2:C6:C3:0F
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e302e302f31372d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         27:8f:e2:95:03:ec:ea:11:3d:21:29:d7:29:60:70:4e:12:b0:
         d0:63:19:8b:ea:7b:8f:60:3d:8c:f1:8a:ea:de:f3:df:42:80:
         57:95:d4:60:3d:34:b4:3f:7a:28:f9:29:ec:c6:a1:a7:83:35:
         0f:15:29:e8:5c:c1:4f:89:cd:6b:94:50:a7:77:5d:88:2e:86:
         47:04:c4:ec:44:a9:42:d6:de:8e:10:c8:63:be:29:fc:32:eb:
         f1:79:3a:e8:45:4f:9e:7c:33:2a:1f:6e:8a:7e:45:a5:f7:89:
         e8:dc:a5:fb:cc:a1:3e:79:68:45:c2:82:97:a2:69:a9:06:5f:
         6a:ff:24:12:e0:e9:af:22:14:4a:09:9f:19:1e:15:c4:a9:b3:
         a1:6f:c3:39:8f:35:6e:9e:09:80:3c:fa:88:1f:46:f2:e5:e8:
         ed:6a:a6:3f:4a:17:4e:96:6b:ba:3a:29:6a:56:9e:0a:2e:b4:
         50:ec:0e:3d:84:90:c0:4e:b2:a2:59:f0:0e:4c:95:f2:d0:ad:
         41:db:11:e5:a6:fb:84:92:3d:99:5f:9d:8c:12:be:7b:37:8e:
         e3:81:02:92:48:4b:01:ff:6a:be:33:62:fb:1e:8e:6a:d1:af:
         24:9b:18:b8:04:e6:55:60:36:c5:6c:4e:ce:a1:c6:24:dd:4d:
         d4:d5:fd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:13 2025 by rpki-client