Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3230302e3131392e3135322e302f32332d3332203d3e203134373534.roa
File:                     3230302e3131392e3135322e302f32332d3332203d3e203134373534.roa (raw, json)
Hash identifier:          ujM7bwmBz7gcRLRP8yo1tEeA1fFWOlbTIZxQC/3iSYs=
Subject key identifier:   8E:A5:1D:68:C1:E3:55:D0:85:A7:CC:60:B3:E8:EA:A1:42:24:34:7E
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       645AE370E7BAA2DF3C021DC4B99E1C1A9A387933
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3230302e3131392e3135322e302f32332d3332203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:25:55 +0000
ROA not before:           Tue 04 Feb 2025 18:20:55 +0000
ROA not after:            Tue 03 Feb 2026 18:25:55 +0000
asID:                     14754
IP address blocks:        200.119.152.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5a:e3:70:e7:ba:a2:df:3c:02:1d:c4:b9:9e:1c:1a:9a:38:79:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Feb  4 18:20:55 2025 GMT
            Not After : Feb  3 18:25:55 2026 GMT
        Subject: CN=8EA51D68C1E355D085A7CC60B3E8EAA14224347E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:6b:f7:26:21:4d:44:4b:28:b7:7c:31:96:
                    53:32:29:8f:65:a8:72:b0:a4:a4:36:ce:b9:19:f8:
                    1c:3b:b7:c5:7c:a8:64:ff:fe:58:64:4a:4e:2f:6d:
                    cd:1f:0f:43:10:7f:59:4f:e2:4e:a7:28:bb:d7:99:
                    33:bf:cd:8d:a4:5f:8c:c8:2e:b3:41:66:32:e3:e1:
                    8b:3a:e1:06:4a:21:59:a7:e0:f6:ba:38:b1:31:0a:
                    a8:5e:17:e0:63:b1:60:22:ab:6c:c2:ab:ec:16:16:
                    b3:1e:5b:67:1f:69:5d:a0:c8:f7:cf:2c:80:a7:08:
                    cf:3d:01:a6:93:ae:98:da:46:02:5a:04:ff:a6:17:
                    07:2a:9a:3e:74:74:70:91:d3:2d:80:ca:34:24:04:
                    3d:f2:1f:41:f8:96:54:40:0e:3f:c7:4a:2e:e8:8b:
                    c8:10:f6:2f:8c:af:55:3c:91:5c:e9:ad:b9:77:fb:
                    e2:a1:31:dc:25:58:98:15:c1:e7:fe:26:2b:c9:1a:
                    97:99:40:bc:27:bd:a2:f2:e0:3b:71:ea:1c:bf:02:
                    15:45:9b:2a:8f:ad:41:df:6b:a4:9d:53:00:4c:86:
                    35:c5:6d:61:9f:fe:2f:f8:f0:9e:b4:00:9b:0e:ce:
                    ce:ab:6a:ee:82:70:1a:0c:43:21:76:f9:91:8b:14:
                    fe:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A5:1D:68:C1:E3:55:D0:85:A7:CC:60:B3:E8:EA:A1:42:24:34:7E
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3230302e3131392e3135322e302f32332d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:36:3e:6f:b9:f8:90:ee:f9:7e:f0:2b:c5:99:cd:7d:98:4c:
         1a:35:3c:91:5b:dc:39:6b:78:27:3c:dc:72:ee:75:f6:8a:7d:
         94:0e:24:ec:ce:0d:2d:5d:ce:18:b5:82:b7:53:62:0f:0b:24:
         df:69:1e:8f:be:4f:6b:95:62:a5:4d:6b:0b:da:37:bd:73:46:
         e9:08:65:74:47:26:34:5f:de:bd:57:81:0e:fb:7f:c8:b7:96:
         61:3e:11:10:2a:65:8a:2c:3b:9c:15:9a:eb:04:cb:5a:00:e0:
         10:7d:1f:51:c4:8d:fe:b8:5e:f9:cb:24:a9:ea:09:6c:1a:41:
         98:30:bb:b8:2f:37:6e:bd:bf:f8:d9:92:24:82:77:b3:89:c9:
         0e:4f:40:cb:d3:e2:d0:75:56:4d:25:76:18:a8:9c:16:aa:30:
         47:2f:38:0f:15:83:d7:1f:e8:63:f6:00:62:e8:88:a7:bd:0c:
         27:25:c0:2d:38:b7:be:30:dc:a8:a1:dc:04:d2:56:6b:7c:5a:
         13:0b:1c:6f:bb:6e:ad:c0:33:78:c2:3d:b1:16:67:d0:db:de:
         07:09:17:b2:70:bb:a3:b0:73:bc:ce:e1:3f:68:2f:a9:ca:5d:
         a1:11:00:8f:f8:e2:4f:20:b0:37:bc:ca:a4:7e:47:bc:7d:b0:
         1f:d9:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:21:35 2025 by rpki-client