Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/3230302e32332e3230362e302f32342d3234203d3e203631353232.roa
File:                     3230302e32332e3230362e302f32342d3234203d3e203631353232.roa (raw, json)
Hash identifier:          WNxHNULT0+nUjBR+KjMNsQz7QsvEEwZnt8b4q+Jx/A0=
Subject key identifier:   88:07:D4:FA:C0:97:CE:BF:63:37:E4:CE:79:99:6C:D8:CE:75:8F:21
Certificate issuer:       /CN=B156B92173159B61E3CBF80FA51A1B58E6218261
Certificate serial:       0CACECFC8B9DF8635676E910ACD4117FA97DA496
Authority key identifier: B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/3230302e32332e3230362e302f32342d3234203d3e203631353232.roa
Signing time:             Tue 04 Feb 2025 20:07:12 +0000
ROA not before:           Tue 04 Feb 2025 20:02:12 +0000
ROA not after:            Tue 03 Feb 2026 20:07:12 +0000
asID:                     61522
IP address blocks:        200.23.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ac:ec:fc:8b:9d:f8:63:56:76:e9:10:ac:d4:11:7f:a9:7d:a4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B156B92173159B61E3CBF80FA51A1B58E6218261
        Validity
            Not Before: Feb  4 20:02:12 2025 GMT
            Not After : Feb  3 20:07:12 2026 GMT
        Subject: CN=8807D4FAC097CEBF6337E4CE79996CD8CE758F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bf:7a:60:cc:53:3c:fa:3f:94:d4:cd:ec:d5:
                    52:48:28:44:30:b0:d2:98:db:73:f0:b0:11:b2:54:
                    a8:57:3f:9a:8b:bf:8d:5a:f8:57:18:bf:ae:24:6a:
                    27:93:7c:59:37:7f:7f:0d:79:67:77:96:17:ba:94:
                    70:6e:4f:de:27:37:ca:9b:cd:20:cb:5a:f7:35:3a:
                    f6:16:27:4d:20:e5:b3:b0:25:4a:4e:fa:cd:79:0f:
                    8c:a4:2e:97:a2:01:9e:d8:43:a0:f9:30:59:91:31:
                    f5:66:47:5d:e6:0e:03:85:ae:28:82:7d:cb:76:06:
                    1b:df:79:86:42:f8:8d:93:e2:f8:00:19:84:d1:fc:
                    26:6c:99:30:1a:81:d9:70:67:43:6f:56:48:15:e6:
                    f3:03:42:a4:6c:8e:42:7e:46:55:4c:9b:d9:97:c3:
                    0f:7e:2d:a7:40:52:30:b2:f1:26:99:73:91:ca:9a:
                    91:4e:19:24:ae:59:61:1a:dc:19:e1:67:69:ef:be:
                    2d:f6:d7:c2:3a:ac:36:8c:ed:dc:f0:84:0c:97:c1:
                    b9:af:46:61:c4:3b:a9:45:bf:d8:08:6b:bd:0a:07:
                    4a:5d:1d:56:01:d1:a5:81:6a:37:e4:2e:e4:1b:61:
                    bc:a3:3c:7a:d8:a2:ac:fc:10:4c:eb:48:cb:60:6c:
                    7a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:07:D4:FA:C0:97:CE:BF:63:37:E4:CE:79:99:6C:D8:CE:75:8F:21
            X509v3 Authority Key Identifier:
                keyid:B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/3230302e32332e3230362e302f32342d3234203d3e203631353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:d3:aa:6e:a3:41:b5:e0:3d:aa:0d:71:0a:5a:8c:18:71:86:
         d7:12:f8:15:8c:b0:34:59:bf:01:6b:35:be:0c:43:58:8a:b4:
         14:ae:46:83:75:28:5e:ed:a2:41:08:a4:de:e7:74:22:fd:cc:
         0e:5d:44:c5:15:11:61:ab:8c:78:0e:9c:31:86:6c:82:5b:e5:
         98:b3:62:77:88:76:a0:2a:df:3e:1b:4b:c5:e6:84:b3:dc:4e:
         0d:65:9f:97:b4:67:6b:21:94:a7:e7:f7:c2:70:f8:c3:fe:b6:
         93:34:ec:5f:05:c1:2a:04:8c:f4:08:57:5d:cb:98:cd:17:25:
         3c:01:9a:6b:9b:69:53:5e:a4:2e:36:df:4d:6c:44:ee:83:9a:
         a5:9d:70:e9:0a:39:74:3d:94:4b:73:ab:0e:7c:27:0e:2c:a4:
         bd:34:aa:65:87:03:70:31:ec:e5:74:b8:3e:6b:55:7c:f3:84:
         df:39:38:99:50:62:5f:71:84:cc:4e:b5:8f:c9:fb:24:42:d1:
         cf:c9:98:df:91:42:f0:ee:c7:8b:fb:ea:bd:28:03:e9:42:0f:
         0b:7d:29:5c:ca:13:01:07:8d:1a:45:9f:82:8c:df:cb:1e:c5:
         c3:0b:03:98:be:a0:14:76:81:77:c6:45:ee:45:0b:9a:3e:fa:
         19:49:5f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:54:14 2025 by rpki-client