Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/3230302e33312e36342e302f31392d3234203d3e203237393735.roa
File:                     3230302e33312e36342e302f31392d3234203d3e203237393735.roa (raw, json)
Hash identifier:          MmXCVvVKv7PqcbS2PA4yTKPB0VGY3ooBHlpwEOPoQ7c=
Subject key identifier:   7E:89:6C:86:31:DA:2E:8C:5B:56:77:FB:C0:3E:AF:14:7F:68:89:0B
Certificate issuer:       /CN=5D0024A900025CCFA9CAF531A9C96683C1BA2338
Certificate serial:       54319D662C37D7477EA6533D8F8F9199F0C5EC58
Authority key identifier: 5D:00:24:A9:00:02:5C:CF:A9:CA:F5:31:A9:C9:66:83:C1:BA:23:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/3230302e33312e36342e302f31392d3234203d3e203237393735.roa
Signing time:             Tue 04 Feb 2025 18:48:16 +0000
ROA not before:           Tue 04 Feb 2025 18:43:16 +0000
ROA not after:            Tue 03 Feb 2026 18:48:16 +0000
asID:                     27975
IP address blocks:        200.31.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:31:9d:66:2c:37:d7:47:7e:a6:53:3d:8f:8f:91:99:f0:c5:ec:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D0024A900025CCFA9CAF531A9C96683C1BA2338
        Validity
            Not Before: Feb  4 18:43:16 2025 GMT
            Not After : Feb  3 18:48:16 2026 GMT
        Subject: CN=7E896C8631DA2E8C5B5677FBC03EAF147F68890B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:cf:b3:96:c1:be:49:d8:eb:a5:71:18:01:
                    8a:10:f3:29:e6:0c:e6:6b:66:c4:1d:6c:0f:3c:17:
                    bd:98:d4:e1:a2:61:86:d7:de:1a:19:fe:b4:fe:28:
                    76:e2:80:7b:9f:f3:c3:b6:3b:48:d7:f7:7b:75:f6:
                    32:94:a3:fb:28:21:ed:a9:4a:75:fb:9d:27:2c:4b:
                    8c:40:76:d5:1b:12:52:df:64:bb:52:d2:bd:e7:df:
                    cd:ff:7f:1a:0f:4d:85:28:ac:0b:6a:f6:04:8b:57:
                    c9:7e:bf:ba:6a:16:7e:97:f7:64:8c:ca:fc:d9:c8:
                    9a:bf:15:38:8b:bd:1d:31:ed:7e:bc:63:92:01:8d:
                    4b:9a:25:a9:2e:db:e4:73:9d:4f:3a:a1:13:68:c6:
                    bb:7e:76:83:45:4b:e9:bd:61:e6:73:7a:cc:2d:b9:
                    87:35:d0:36:49:ba:24:54:48:a4:31:71:35:cc:89:
                    b5:24:44:81:e1:08:ab:1a:9b:bc:99:48:34:2a:aa:
                    9a:ef:4d:78:5a:2b:1a:f1:48:2d:2f:bb:3b:aa:56:
                    1d:88:c6:93:70:94:cb:b5:68:f5:f1:b3:00:f3:fd:
                    9a:9d:51:ed:80:0b:59:a0:ee:ad:d9:fb:64:e6:c5:
                    49:54:36:e4:97:06:a3:9c:42:e4:32:c6:1f:be:72:
                    bb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:89:6C:86:31:DA:2E:8C:5B:56:77:FB:C0:3E:AF:14:7F:68:89:0B
            X509v3 Authority Key Identifier:
                keyid:5D:00:24:A9:00:02:5C:CF:A9:CA:F5:31:A9:C9:66:83:C1:BA:23:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/3230302e33312e36342e302f31392d3234203d3e203237393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a9:d1:38:d5:c2:6a:2b:9c:ff:76:d1:db:25:85:5a:a9:69:bd:
         34:a1:44:73:f7:c4:5d:78:bf:6c:f5:9f:24:8b:91:9f:0f:69:
         ff:78:89:35:ec:23:6e:4d:d3:5d:6d:71:01:fd:0c:4a:6b:b1:
         51:50:08:5c:b2:90:58:b2:64:66:db:01:77:36:0b:da:b2:f8:
         58:89:e5:26:b1:82:da:0b:7d:9d:fc:4f:71:c2:dd:91:ca:37:
         e2:3e:e5:af:f7:3e:41:79:f2:04:1b:42:99:c1:56:3b:c0:1a:
         56:46:29:30:7c:91:ba:62:39:ba:05:e2:76:5c:2d:f4:0a:3c:
         42:7c:9f:bc:c8:c9:db:01:29:e2:3f:d6:60:7d:2d:fd:e0:57:
         d9:b3:11:76:d8:70:99:26:d3:17:b6:11:2e:36:d3:61:9a:ca:
         1b:74:fa:c5:9b:97:14:3d:9e:c4:a7:51:86:6a:c7:08:0a:e4:
         72:7e:55:f3:a8:51:a2:38:62:a2:a5:42:75:9c:a8:9d:c1:28:
         ed:a0:84:5d:0e:dc:45:fd:91:d3:9d:3e:24:81:49:0f:a9:59:
         50:fd:61:d4:13:9e:ab:b3:4a:8f:cb:51:ff:a1:fd:29:51:87:
         52:f3:66:6b:85:3d:9e:18:20:94:5a:e1:f9:6e:9a:c9:e8:fc:
         c9:bb:37:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:57:27 2025 by rpki-client