Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3133362e302f32322d3234203d3e203237363639.roa
File:                     3230302e3130382e3133362e302f32322d3234203d3e203237363639.roa (raw, json)
Hash identifier:          +jZjF9XTsfUfNjkHip6jF2Azb3svyhuuuR1wNgZgvTs=
Subject key identifier:   52:E2:7E:F5:06:73:24:CC:5E:54:31:0A:04:2E:EC:32:4E:95:5A:E4
Certificate issuer:       /CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
Certificate serial:       3A5DEE802BEDBA057C7B8E914292BCB2087D4751
Authority key identifier: CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3133362e302f32322d3234203d3e203237363639.roa
Signing time:             Tue 04 Feb 2025 18:55:02 +0000
ROA not before:           Tue 04 Feb 2025 18:50:02 +0000
ROA not after:            Tue 03 Feb 2026 18:55:02 +0000
asID:                     27669
IP address blocks:        200.108.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5d:ee:80:2b:ed:ba:05:7c:7b:8e:91:42:92:bc:b2:08:7d:47:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD10DB25820E91BA3528D109BC497D348AF1CC8E
        Validity
            Not Before: Feb  4 18:50:02 2025 GMT
            Not After : Feb  3 18:55:02 2026 GMT
        Subject: CN=52E27EF5067324CC5E54310A042EEC324E955AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:37:02:55:3d:ca:c1:d7:d0:68:a4:e0:29:
                    1b:8a:0b:2c:ff:d5:4a:c1:6a:3c:82:7f:10:a3:01:
                    c1:99:c9:14:de:41:56:69:15:9a:c3:c2:cb:99:71:
                    c8:37:ee:6c:71:b4:28:d4:48:73:67:9a:e2:77:9d:
                    3f:45:52:81:d1:f6:d8:0c:53:37:ff:75:07:2d:d9:
                    56:df:53:7b:0a:75:a5:e8:70:0c:27:05:1a:13:b9:
                    65:44:7f:2f:73:44:71:76:77:05:42:a3:f5:d5:c3:
                    19:4b:ab:59:1c:41:f9:99:e7:d3:8c:c0:50:3f:7b:
                    a1:71:c7:81:ad:e0:d5:4d:a6:60:00:6d:b5:43:07:
                    23:60:0c:1a:17:18:3f:4b:a0:44:03:39:2d:4f:6a:
                    6d:97:45:b0:52:38:08:32:af:df:3d:cc:63:77:ff:
                    4d:c5:06:4e:0d:ba:f1:35:73:de:6d:01:f7:65:24:
                    60:ce:9f:36:6c:18:dc:77:39:16:39:96:0b:c3:1f:
                    db:bd:31:cc:88:ae:c8:ca:cf:e6:bc:79:91:12:de:
                    6d:7e:d4:04:9d:96:47:2f:be:af:19:6f:ab:c8:04:
                    9a:16:bd:eb:59:df:fa:98:d8:99:b4:28:dd:7a:7e:
                    dc:61:2e:99:9f:f2:fd:d6:ae:f3:67:94:5a:77:f8:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E2:7E:F5:06:73:24:CC:5E:54:31:0A:04:2E:EC:32:4E:95:5A:E4
            X509v3 Authority Key Identifier:
                keyid:CD:10:DB:25:82:0E:91:BA:35:28:D1:09:BC:49:7D:34:8A:F1:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD10DB25820E91BA3528D109BC497D348AF1CC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED8F3600C081164EE87DB08ED3E8B48D23E1866DB2ADD21A8FB89919B3B74C05/0/3230302e3130382e3133362e302f32322d3234203d3e203237363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dd:58:6a:7a:a0:ed:cd:b6:12:74:aa:d5:2d:7f:a2:8d:0b:d7:
         d7:94:01:7a:8e:92:86:29:e9:56:9e:21:09:0c:2f:bb:b8:a4:
         7d:e8:ab:12:c2:05:df:88:59:ba:01:e3:a1:5e:eb:6e:df:55:
         78:4c:83:5a:5d:3b:f1:0b:5c:c4:8e:7f:85:26:07:b3:ac:f3:
         11:04:ef:1e:56:8d:dc:52:2f:59:7f:d1:4d:46:6d:fa:e7:90:
         73:8b:18:ce:9f:f5:23:2e:9a:5d:38:17:a4:cb:f0:ee:ab:ba:
         bc:76:c6:f5:69:7a:a1:f2:97:7e:48:38:8a:d4:b1:b1:47:ff:
         23:31:ca:c2:e2:b7:d7:f4:13:dd:14:f3:60:33:22:79:e9:c3:
         7a:a5:78:d6:3c:40:a8:7c:0c:b8:2c:d1:13:23:fe:6e:7c:4e:
         5d:7a:db:82:24:06:f1:fb:de:0d:db:33:35:b2:be:f9:3f:40:
         6d:99:f7:3e:e5:2b:48:85:10:af:02:5f:7b:1b:ec:a4:a2:31:
         77:b2:a5:82:6d:7c:ca:31:92:fb:c1:8f:e2:15:fa:35:71:13:
         ab:a1:25:a8:c6:6d:83:3a:ca:08:27:80:76:05:d6:e5:cc:21:
         ec:59:6b:70:5f:6e:28:f8:98:f9:3b:a6:fd:3a:35:4c:30:0c:
         a0:cd:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:47:25 2025 by rpki-client