Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203532323734.roa
File:                     3230302e31322e3139372e302f32342d3234203d3e203532323734.roa (raw, json)
Hash identifier:          wE5KMimIfSYBnx5aCctu49DoANtYWqwnyNUE4h+1T1o=
Subject key identifier:   DA:98:AE:DD:B9:D2:A7:09:B8:60:3F:E6:3D:44:E7:F7:F5:59:2A:B9
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       4C891ADC844B77DCB3D4D406C3DC1189E121D2D8
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203532323734.roa
Signing time:             Tue 04 Feb 2025 18:05:37 +0000
ROA not before:           Tue 04 Feb 2025 18:00:37 +0000
ROA not after:            Tue 03 Feb 2026 18:05:37 +0000
asID:                     52274
IP address blocks:        200.12.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 00:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:89:1a:dc:84:4b:77:dc:b3:d4:d4:06:c3:dc:11:89:e1:21:d2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Feb  4 18:00:37 2025 GMT
            Not After : Feb  3 18:05:37 2026 GMT
        Subject: CN=DA98AEDDB9D2A709B8603FE63D44E7F7F5592AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:14:7e:5b:ed:8f:80:70:75:f4:41:46:08:
                    83:1a:e9:d1:4d:da:75:5c:0b:88:e2:51:d0:51:8e:
                    a0:eb:e5:17:79:94:e1:0b:93:5d:3a:9b:92:00:86:
                    72:61:e9:a9:fa:20:a8:02:81:50:6f:37:a3:0a:14:
                    b0:b1:56:85:c5:32:f5:f1:7d:d2:1f:17:16:ba:fa:
                    31:22:70:01:e0:38:c4:39:15:55:ca:80:22:50:4e:
                    56:21:fc:d7:43:42:d3:5f:97:6b:11:61:06:a1:4d:
                    a6:0a:bc:a8:d9:60:07:0e:fc:9e:cc:80:d7:41:60:
                    3f:98:b1:4d:d6:a7:a6:61:f6:78:38:67:a8:88:b3:
                    53:fe:b0:21:54:7a:86:38:e2:35:e9:13:c6:84:9f:
                    95:c1:65:1d:b7:b6:25:f3:e1:66:c3:14:1b:cb:99:
                    36:dc:f5:9d:85:b8:7b:1e:81:8d:da:1c:6c:ae:ca:
                    ee:02:7e:83:7b:f7:03:d9:08:96:fa:9c:8b:91:9e:
                    89:93:68:60:f7:64:b3:5a:56:0e:38:25:e3:71:54:
                    b1:fb:03:49:d9:b1:87:80:db:a7:ab:2a:8d:7b:a8:
                    84:c7:46:94:6d:90:de:6a:23:bd:bf:8c:83:c3:8d:
                    0a:b3:57:af:a0:2f:ff:53:92:b3:ae:b6:ec:29:91:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:AE:DD:B9:D2:A7:09:B8:60:3F:E6:3D:44:E7:F7:F5:59:2A:B9
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203532323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:cd:51:b8:94:6c:d4:80:f8:83:be:88:15:eb:f6:8e:c2:02:
         39:87:8b:c5:0b:f1:51:8b:61:f4:e4:7e:1c:91:34:94:83:72:
         63:c9:53:5c:05:4d:ed:2d:6c:a6:19:69:ed:4d:2e:46:57:66:
         c7:91:f5:be:d1:b6:85:82:36:46:a1:8c:a1:65:13:97:ce:ce:
         b1:47:c4:1b:19:80:bf:ba:2c:07:52:1a:4f:ae:bc:d3:94:69:
         62:81:10:f0:23:1c:80:4e:d8:4a:3b:51:a9:8e:d0:39:c1:29:
         de:ec:3b:97:3c:e1:51:ff:7c:61:f1:78:5d:80:ad:4b:2a:fe:
         4f:3c:a6:51:3c:87:2c:df:13:a9:08:35:24:2f:40:b5:95:4a:
         f3:f8:cd:22:e8:12:f5:b5:95:d4:bd:5c:e3:22:50:a5:81:bf:
         25:49:e5:d6:ab:bb:32:fb:62:c1:6c:a5:41:f1:bb:cc:38:4f:
         3e:b1:5d:66:04:f4:ec:20:d9:68:41:98:95:f8:13:1d:ea:08:
         c3:12:da:ef:b2:86:29:b3:4f:3c:e2:a4:1e:2f:f9:7e:76:f7:
         24:99:1a:31:74:e2:14:a1:cc:c3:05:6b:cc:09:8e:3a:22:ca:
         f3:b8:57:bf:d6:40:10:e5:20:7d:99:6f:15:34:65:d1:20:a0:
         10:77:45:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:25 2025 by rpki-client