Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232342e302f32302d3234203d3e203237393437.roa
File:                     3230302e39332e3232342e302f32302d3234203d3e203237393437.roa (raw, json)
Hash identifier:          ytTMsCDXZjZePGWShqcx0+ORtT+yF5cpB8ZxkI1IpS0=
Subject key identifier:   0D:A5:E3:2B:E5:0A:A3:4D:BD:82:B2:29:3C:8B:4C:85:21:6A:4B:63
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       6F9862FBA9C2D599DCE8D23CF8628AE6E03C95AA
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232342e302f32302d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:11:20 +0000
ROA not before:           Tue 04 Feb 2025 18:06:20 +0000
ROA not after:            Tue 03 Feb 2026 18:11:20 +0000
asID:                     27947
IP address blocks:        200.93.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:98:62:fb:a9:c2:d5:99:dc:e8:d2:3c:f8:62:8a:e6:e0:3c:95:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:20 2025 GMT
            Not After : Feb  3 18:11:20 2026 GMT
        Subject: CN=0DA5E32BE50AA34DBD82B2293C8B4C85216A4B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8a:f9:85:e3:4e:b8:70:57:48:06:2e:78:cb:
                    b6:b5:22:51:86:3f:0f:bf:80:6d:6d:6b:2d:49:1f:
                    89:75:af:a6:c2:29:c9:9e:60:2c:11:20:a7:84:0a:
                    ff:dc:1f:82:77:aa:95:a7:2c:fd:e9:b7:fa:b2:cc:
                    25:af:16:3e:68:4f:43:68:cb:fc:b8:62:7d:90:fa:
                    9d:c7:48:1d:e7:78:cd:fe:63:f6:d1:89:51:28:ed:
                    3b:09:67:58:3b:f1:92:2a:aa:3a:b1:02:c5:79:0f:
                    72:82:72:02:ba:2d:17:bd:02:3b:89:aa:23:61:82:
                    be:23:20:40:87:e7:ba:56:55:76:d1:fe:be:30:4c:
                    83:0c:ff:2a:a4:2c:e0:71:9b:a0:38:7c:4f:e0:7c:
                    23:19:5a:54:d4:59:42:51:4f:b3:fa:ca:6e:3c:4f:
                    55:30:d9:a4:1f:44:38:9c:8a:3e:9a:d2:df:d0:9f:
                    59:d3:f9:ff:46:71:79:e5:71:23:a1:ef:01:d8:e9:
                    b0:b9:ad:1b:24:78:e5:13:49:1d:3c:15:15:d1:27:
                    a8:55:79:ea:0c:69:87:5e:36:2e:db:f6:50:2f:fa:
                    85:70:46:e3:f6:38:66:de:b1:ab:03:e3:da:cb:07:
                    0e:5f:db:9a:c6:10:b1:83:27:70:d2:6a:ff:db:cd:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A5:E3:2B:E5:0A:A3:4D:BD:82:B2:29:3C:8B:4C:85:21:6A:4B:63
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232342e302f32302d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:95:16:a1:2d:ba:b8:a0:7c:52:4a:1f:38:c0:2a:9e:2a:6e:
         4f:dd:88:fe:93:34:10:10:4c:dd:6f:92:74:a2:19:e0:9b:bf:
         16:cf:4c:b7:0e:3c:66:f4:85:4c:eb:9d:14:9d:87:3e:06:d8:
         e5:9d:41:f3:cd:01:0e:6b:3f:e7:c0:3b:c0:a4:36:0f:4a:57:
         d9:a2:34:4f:dc:74:5d:35:30:75:59:ea:dc:6a:f2:ac:55:e3:
         6c:76:c0:1c:77:5b:a9:db:e6:a3:9f:55:72:9b:75:96:ab:84:
         83:ff:9d:d7:e2:df:68:33:52:0a:1a:3f:a2:1d:dc:da:1c:dd:
         ba:bc:f4:13:84:28:6b:44:00:63:b5:5a:aa:13:00:33:f5:38:
         2f:53:d2:a2:50:7b:fd:8b:2c:dc:c6:b0:d4:5f:25:20:b5:97:
         2f:92:d5:73:fa:9f:03:29:21:61:a1:c1:73:53:f1:9e:64:de:
         a3:0a:b1:4f:1e:c6:2e:81:9a:9d:d4:7c:ea:d9:4c:f3:50:cc:
         79:4e:c5:80:09:9a:6e:97:53:ad:07:03:9f:9f:4c:f1:16:24:
         c1:0b:5e:0b:20:1b:d2:78:66:63:58:d3:eb:89:04:3a:17:1a:
         af:f8:a0:c8:3b:1d:90:51:df:aa:92:02:47:f7:17:fd:fb:b5:
         6d:30:ea:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:57:29 2025 by rpki-client