Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa
File:                     3230302e35392e32342e302f32312d3234203d3e203238303838.roa (raw, json)
Hash identifier:          rCY3/y+8UQL/7qYblcmKvrHH0ENrLybSfJDpGOX4y6E=
Subject key identifier:   AB:F2:31:89:98:79:2D:55:F0:95:67:43:1F:4A:67:AE:F4:1A:01:60
Certificate issuer:       /CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
Certificate serial:       6F1F16CBA84757F73B1B942F9E1487D9F4563FD2
Authority key identifier: 2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa
Signing time:             Tue 04 Feb 2025 18:30:16 +0000
ROA not before:           Tue 04 Feb 2025 18:25:16 +0000
ROA not after:            Tue 03 Feb 2026 18:30:16 +0000
asID:                     28088
IP address blocks:        200.59.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 14:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1f:16:cb:a8:47:57:f7:3b:1b:94:2f:9e:14:87:d9:f4:56:3f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
        Validity
            Not Before: Feb  4 18:25:16 2025 GMT
            Not After : Feb  3 18:30:16 2026 GMT
        Subject: CN=ABF2318998792D55F09567431F4A67AEF41A0160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:c2:78:24:bf:55:a8:24:57:b9:a6:67:8c:
                    eb:6b:53:4e:11:35:6f:72:88:12:d0:41:ce:78:1b:
                    31:4b:ef:fd:4a:28:2b:3b:e0:d3:55:f6:88:d7:0e:
                    62:52:6a:e5:b8:5e:39:4e:5f:a9:48:8d:42:1b:a8:
                    2b:56:bc:03:79:db:a0:e2:2a:5e:dc:a4:a2:61:f7:
                    46:79:ee:f9:3d:7b:46:1d:a6:40:eb:cb:00:d0:aa:
                    41:b4:8a:02:a7:d0:9a:e2:72:13:a4:79:e8:dd:c2:
                    f1:1a:98:e7:81:40:e5:45:b5:fb:e2:a8:d8:dc:f2:
                    d7:8e:33:cd:13:84:39:88:bb:51:43:7d:e9:3a:d1:
                    4c:bd:0f:9e:6a:c4:1a:43:3e:14:7d:c5:16:a4:d0:
                    d2:2f:7f:eb:6a:09:cb:2e:48:04:ed:6d:f4:2c:02:
                    a5:4b:db:f5:3a:06:17:ad:00:ba:ff:da:2a:70:f3:
                    00:52:3f:98:5c:7c:c2:0f:09:67:9b:ea:ea:cb:13:
                    25:14:6b:ad:cf:1c:ef:3b:49:dc:78:8c:fc:d7:22:
                    74:05:4e:f0:ec:27:4e:bb:f9:db:6b:80:e6:04:c1:
                    93:62:54:f0:58:6b:50:83:9c:1e:48:0c:93:cb:57:
                    e6:e4:88:c8:8a:0f:e1:9d:d9:7c:cf:7e:16:74:9b:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F2:31:89:98:79:2D:55:F0:95:67:43:1F:4A:67:AE:F4:1A:01:60
            X509v3 Authority Key Identifier:
                keyid:2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3230302e35392e32342e302f32312d3234203d3e203238303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:b9:db:1b:c9:20:c4:07:86:28:d1:ff:ea:91:09:49:76:9e:
         5c:23:cc:4f:b9:ca:33:6e:6f:18:71:94:79:ec:76:54:63:5d:
         f0:1a:10:fd:59:4c:d8:94:5c:ff:7f:0b:35:83:a1:c4:e1:15:
         7f:3b:87:01:d4:d3:46:23:cd:33:1b:09:71:83:f1:7d:34:36:
         31:60:b1:53:2f:87:61:56:cc:45:0b:f4:7d:c2:a1:3b:fc:be:
         dd:96:9f:70:f0:bd:eb:2d:0d:46:ac:3b:09:21:bd:d7:ac:58:
         fa:e2:12:7f:a0:11:1f:d7:eb:be:0b:aa:f2:8e:12:a9:04:62:
         3e:17:2c:9a:7b:d6:82:1a:72:a9:75:c8:2b:46:f5:51:96:c9:
         c9:7d:3c:09:7f:3a:36:20:aa:b6:61:4b:86:16:bd:20:5a:4d:
         b1:94:bc:01:97:8e:01:a4:21:6e:6f:c8:42:fc:26:1f:a6:dd:
         bf:84:6f:99:65:5f:ed:a2:55:7d:9e:25:21:53:00:f4:b1:22:
         3e:7c:95:7e:5a:36:33:ee:f0:f6:10:73:f1:e7:3e:76:e4:34:
         67:f4:b5:1f:4b:15:1c:3e:aa:e0:6e:fe:bb:07:41:48:dd:9c:
         aa:ff:6d:24:c1:9b:ee:7e:08:7a:43:84:3f:18:9c:12:5d:3a:
         3c:12:08:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:45:26 2025 by rpki-client