Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e302e302f32322d3234203d3e203131313933.roa
File:                     3230302e36312e302e302f32322d3234203d3e203131313933.roa (raw, json)
Hash identifier:          PE6bKCZqQ/Y8ag5yVWJhD22OtNA9os8FY/C4FqVOyng=
Subject key identifier:   72:B6:95:C0:23:BA:CD:79:3B:3F:14:19:E5:66:BF:87:B3:B4:29:6D
Certificate issuer:       /CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
Certificate serial:       5B5365C583FACE0B4A13857A1BFD16E631F96292
Authority key identifier: 22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e302e302f32322d3234203d3e203131313933.roa
Signing time:             Tue 04 Feb 2025 18:39:45 +0000
ROA not before:           Tue 04 Feb 2025 18:34:45 +0000
ROA not after:            Tue 03 Feb 2026 18:39:45 +0000
asID:                     11193
IP address blocks:        200.61.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:53:65:c5:83:fa:ce:0b:4a:13:85:7a:1b:fd:16:e6:31:f9:62:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
        Validity
            Not Before: Feb  4 18:34:45 2025 GMT
            Not After : Feb  3 18:39:45 2026 GMT
        Subject: CN=72B695C023BACD793B3F1419E566BF87B3B4296D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:94:0b:22:b2:6b:d1:ec:18:d4:17:ca:71:47:
                    6d:dc:3b:08:5b:c3:ed:92:94:44:aa:2e:3f:3c:65:
                    52:31:c1:fb:ce:e1:48:46:24:7d:4e:53:60:8e:cb:
                    2d:6a:e1:d2:5f:1e:99:e1:ab:65:23:d6:00:db:55:
                    ab:23:c2:e0:a5:6d:64:b7:0e:af:e9:c1:67:9d:9b:
                    fe:0f:58:44:13:66:2f:76:1f:f6:e4:a3:01:e5:c2:
                    f6:b6:18:d6:dd:84:44:33:34:b3:3d:e2:b3:9a:a5:
                    c4:80:a3:c4:24:89:7b:cb:6d:dc:f2:cb:ba:8c:5a:
                    a3:33:e9:de:46:fa:71:75:01:03:2b:7c:78:65:0e:
                    8e:ad:c1:ce:f1:08:bc:ad:f1:13:a3:38:a3:6c:ce:
                    20:b2:90:a6:0a:81:c3:cd:1d:1f:42:53:ab:4d:2b:
                    f7:d8:5e:e0:e7:1e:32:87:84:e7:c0:55:f9:d4:69:
                    5d:f6:65:e2:0b:27:c0:37:94:cd:9d:ed:60:e3:dd:
                    9b:a1:25:e1:ed:a4:cd:54:a3:d8:df:f1:95:59:73:
                    5a:3c:a1:e1:21:31:58:57:e2:a5:b7:a5:21:95:4c:
                    5c:8e:b4:df:7c:89:25:e1:5a:48:57:44:14:63:e4:
                    0a:6f:01:23:2a:18:b7:6b:fc:b8:e9:d5:c2:b7:33:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B6:95:C0:23:BA:CD:79:3B:3F:14:19:E5:66:BF:87:B3:B4:29:6D
            X509v3 Authority Key Identifier:
                keyid:22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e302e302f32322d3234203d3e203131313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:e5:27:f8:5a:5e:f1:be:b3:59:96:2d:22:2e:c1:42:e2:7a:
         c7:bb:b1:c7:19:d2:38:ff:fe:4c:e2:ec:d7:fa:99:e9:ae:9a:
         66:e2:5f:07:58:00:a1:7d:6d:a1:7e:59:e4:f8:48:8c:21:14:
         0f:92:a3:b6:e3:93:7f:d1:40:2d:91:67:d8:33:1f:7b:b2:20:
         33:2c:2d:01:94:23:05:94:93:5c:c9:ba:9b:cc:ae:44:53:82:
         f8:4a:97:e5:8e:dc:26:0b:5a:11:ef:57:fb:01:4f:64:9e:d2:
         0b:fd:c5:2c:52:3f:dd:b1:3c:49:88:1a:2e:b0:d2:fd:d0:32:
         6f:0d:f4:30:2c:96:23:a0:3e:ea:31:b6:94:0f:8d:ff:d4:82:
         f3:ae:aa:6b:20:df:82:8e:ed:fe:e9:ab:30:c1:a7:8d:21:62:
         62:4d:d6:d0:03:ce:29:33:ab:e4:c7:51:df:3b:40:62:50:81:
         c1:4e:55:8a:a9:4f:4d:d5:40:11:61:5b:a0:7d:20:e6:0a:05:
         ef:90:3c:3f:29:41:11:17:68:c9:f7:25:6f:b5:94:d6:9c:39:
         97:bf:cb:16:d9:bf:e3:e9:0b:f2:e2:cd:c4:2e:d7:b7:ff:97:
         ea:f8:91:32:c2:f0:63:85:0d:b7:7b:6c:0b:26:ca:8f:07:1b:
         32:db:95:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:09:42 2025 by rpki-client