Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135322e302f32342d3234203d3e20323733313131.roa
File:                     3230302e35302e3135322e302f32342d3234203d3e20323733313131.roa (raw, json)
Hash identifier:          rBTNJDqFoMvEVEa0ahgYfPCyqFzUoOixctL0OUVbHVE=
Subject key identifier:   A4:72:27:CD:DE:59:D2:46:46:0B:1C:57:84:F8:41:0B:9B:8A:D2:B5
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       4CA97B6634F5C15DC208F338619130BA1D699128
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135322e302f32342d3234203d3e20323733313131.roa
Signing time:             Tue 04 Feb 2025 20:06:12 +0000
ROA not before:           Tue 04 Feb 2025 20:01:12 +0000
ROA not after:            Tue 03 Feb 2026 20:06:12 +0000
asID:                     273111
IP address blocks:        200.50.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a9:7b:66:34:f5:c1:5d:c2:08:f3:38:61:91:30:ba:1d:69:91:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: Feb  4 20:01:12 2025 GMT
            Not After : Feb  3 20:06:12 2026 GMT
        Subject: CN=A47227CDDE59D246460B1C5784F8410B9B8AD2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:32:20:ce:19:54:aa:38:ea:d3:55:91:c2:80:
                    32:d7:e0:ed:34:5f:68:59:88:3e:82:8a:42:02:51:
                    a0:e8:d6:1b:bf:cb:92:83:1e:94:47:f1:a7:d6:83:
                    2c:49:0e:22:20:03:24:ff:e5:b8:8a:f1:a4:6c:07:
                    43:b0:77:17:10:1a:11:eb:0b:96:17:54:83:d3:ed:
                    cc:dc:f4:eb:e9:b6:94:b6:84:c9:20:e3:07:9c:75:
                    56:b7:5c:b3:6c:1d:b7:a8:90:0d:5b:29:f0:50:2d:
                    02:93:a9:01:18:de:0e:f9:c3:45:09:ff:e0:14:b5:
                    d5:a2:99:38:5f:f3:73:3e:b6:65:6e:9a:e9:48:1e:
                    d3:f3:c5:b5:47:6a:76:19:a2:2e:0d:95:89:a1:b7:
                    34:93:08:df:c2:2f:fc:54:b1:a0:b5:34:17:6d:29:
                    a0:e7:2c:53:c6:84:d3:7e:62:73:46:7e:9b:95:01:
                    74:d2:49:5e:7a:8b:ed:f6:79:dd:b0:60:c1:6d:33:
                    0d:40:14:a1:c2:9d:b8:14:6c:4b:b4:c5:15:b2:73:
                    da:a9:e9:2b:86:3a:b5:72:cf:60:01:da:7a:23:48:
                    34:f6:69:43:02:f9:18:65:8b:d5:58:30:5d:62:ca:
                    e3:58:ec:1d:c3:c4:43:ca:db:78:02:2e:93:88:87:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:72:27:CD:DE:59:D2:46:46:0B:1C:57:84:F8:41:0B:9B:8A:D2:B5
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135322e302f32342d3234203d3e20323733313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:35:c1:14:2f:34:3b:79:66:f0:cd:58:cd:3b:6e:6c:54:1c:
         69:ca:42:5d:5f:c0:d2:4d:86:26:a1:e7:2b:c6:3c:22:b2:ba:
         00:b7:3a:ea:00:7f:eb:ba:45:50:ac:07:b3:f3:d1:a2:2e:65:
         50:b0:44:5e:b7:66:c8:37:99:27:f8:e8:bc:4c:47:85:50:ed:
         c7:91:2c:69:b9:db:8a:fd:17:5e:2b:f7:35:7b:88:18:25:26:
         fd:57:76:21:a1:14:3f:67:0f:fc:cd:ea:84:c4:8a:81:1f:9d:
         b6:52:1e:15:54:0e:02:94:ce:9c:fb:d5:96:ac:28:a0:5d:08:
         9c:d4:45:fb:db:af:34:03:16:a0:3d:31:ca:57:21:fc:22:de:
         f8:01:61:ff:4a:61:c1:89:dd:05:85:34:93:e8:a1:27:47:7a:
         31:83:dd:18:68:af:5c:f7:42:64:13:e9:07:46:98:42:9d:40:
         2a:dd:42:d2:d3:05:da:28:09:49:ab:df:2a:41:d7:cf:2a:5a:
         ed:71:8b:60:03:40:5f:a4:9c:67:c4:c7:69:d5:d2:f4:31:21:
         be:f2:fb:16:11:0b:93:2f:c8:d6:95:e8:1f:74:d3:9d:8f:7b:
         f4:ee:10:ff:94:f1:74:98:53:eb:24:e5:e1:1d:21:e0:1f:ea:
         4d:82:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:15 2025 by rpki-client