Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3132382e302f32312d3234203d3e203237363639.roa
File:                     3230302e3130382e3132382e302f32312d3234203d3e203237363639.roa (raw, json)
Hash identifier:          Q8HXo5yPO0pWuCpqAFSX3pTrzShM92w0ftpABUKsr5I=
Subject key identifier:   AC:F6:11:48:1B:6F:92:46:52:BF:49:AD:E6:10:D7:F0:5F:B2:A9:E9
Certificate issuer:       /CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
Certificate serial:       2E5CDD6994AB6E57141BB8AA47106CB13E406DEB
Authority key identifier: CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3132382e302f32312d3234203d3e203237363639.roa
Signing time:             Tue 04 Feb 2025 18:55:02 +0000
ROA not before:           Tue 04 Feb 2025 18:50:02 +0000
ROA not after:            Tue 03 Feb 2026 18:55:02 +0000
asID:                     27669
IP address blocks:        200.108.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5c:dd:69:94:ab:6e:57:14:1b:b8:aa:47:10:6c:b1:3e:40:6d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
        Validity
            Not Before: Feb  4 18:50:02 2025 GMT
            Not After : Feb  3 18:55:02 2026 GMT
        Subject: CN=ACF611481B6F924652BF49ADE610D7F05FB2A9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:8f:4e:b1:90:d0:98:98:24:f3:75:ba:c0:
                    cf:5b:23:5a:9b:ef:f1:3c:56:a9:60:67:54:a1:43:
                    0f:4d:a3:a2:c7:9d:b5:a8:0c:30:81:87:5f:d3:40:
                    1b:9f:aa:87:f4:55:9d:2d:0f:16:c3:00:7b:c0:90:
                    ce:12:1b:0a:2c:b4:38:cc:f9:eb:76:8b:24:04:a5:
                    65:ae:73:fc:03:b2:da:64:59:5d:3e:af:fc:4d:9d:
                    d4:ce:f9:86:05:6d:77:53:ee:ce:7b:1d:13:89:32:
                    cc:b6:38:11:88:ef:6d:13:56:94:9a:73:a0:bc:42:
                    5b:9e:4f:95:58:ee:09:e5:5b:97:dc:94:8a:9c:37:
                    d8:e0:37:0a:53:a4:e5:ca:ff:d6:3f:68:ed:8c:58:
                    f1:71:9f:9b:ef:04:18:80:90:bf:ec:2a:eb:31:6b:
                    86:3d:87:5a:da:bc:a6:60:cb:38:dd:b4:fe:91:8e:
                    87:04:83:a5:78:e4:40:b2:3b:52:60:37:c9:bb:cc:
                    e8:e6:26:e2:d1:a2:67:9a:3c:c8:e2:51:e6:28:4a:
                    b9:cf:30:34:9f:cf:18:47:d5:7b:ac:0b:9f:ca:44:
                    5f:23:c6:72:14:44:77:76:a2:ad:4e:2a:52:0f:57:
                    af:58:58:69:a2:ed:65:0e:66:77:f5:49:32:12:49:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F6:11:48:1B:6F:92:46:52:BF:49:AD:E6:10:D7:F0:5F:B2:A9:E9
            X509v3 Authority Key Identifier:
                keyid:CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3132382e302f32312d3234203d3e203237363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:8c:25:62:24:f1:e5:fc:dc:6c:eb:51:2a:5b:84:f6:51:2c:
         22:7e:ef:f9:6b:13:2f:6c:3b:cc:c7:8a:aa:c6:a4:97:8d:46:
         17:ed:0c:c6:84:1b:5a:2d:1c:ad:23:02:70:61:5c:86:db:01:
         eb:2c:aa:23:53:71:4a:3e:6c:d6:4a:35:42:dc:68:d4:a1:8c:
         02:f9:a9:05:a9:81:48:98:8c:0a:7d:ee:28:28:eb:59:38:8b:
         e6:9f:db:9a:f7:46:55:79:ed:09:54:a9:ce:8d:69:a1:ea:c6:
         56:0b:20:a7:97:de:d6:08:0f:eb:dd:4b:00:62:fb:12:2d:83:
         9e:a5:dc:b1:90:96:2f:cd:63:fc:9f:90:20:df:24:ef:1e:a6:
         14:a9:d2:34:d3:c7:db:c4:c9:56:b4:72:eb:0a:55:3f:04:32:
         ba:57:8d:cc:66:36:d3:b3:29:4c:14:e2:2d:44:00:5e:b5:2e:
         3c:0b:19:33:1a:b4:32:f1:1c:d3:3b:c4:37:1e:d8:55:c7:c4:
         ed:55:3e:34:8a:4a:64:d2:f9:95:ee:51:12:21:48:c2:19:b9:
         39:e2:08:4d:dc:c3:32:f8:03:65:95:67:26:ec:2c:9c:21:63:
         02:87:54:1c:b2:3c:f9:cb:85:c2:0b:84:5a:a4:2d:dc:4b:e2:
         e4:47:4b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:44:59 2025 by rpki-client