Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3230302e36332e3131322e302f32312d3234203d3e203237393731.roa
File:                     3230302e36332e3131322e302f32312d3234203d3e203237393731.roa (raw, json)
Hash identifier:          fez1PwHe0OTVKMQ0yE+k1JX5JpBuhVGV+H/owzR8bmw=
Subject key identifier:   31:45:AA:52:39:EF:DD:B6:78:B6:69:8E:B6:68:52:57:79:A9:90:F2
Certificate issuer:       /CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
Certificate serial:       68F792AB517ACE71785A8A459CDF8F9F27A73A9F
Authority key identifier: 18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3230302e36332e3131322e302f32312d3234203d3e203237393731.roa
Signing time:             Tue 04 Feb 2025 18:06:22 +0000
ROA not before:           Tue 04 Feb 2025 18:01:22 +0000
ROA not after:            Tue 03 Feb 2026 18:06:22 +0000
asID:                     27971
IP address blocks:        200.63.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f7:92:ab:51:7a:ce:71:78:5a:8a:45:9c:df:8f:9f:27:a7:3a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
        Validity
            Not Before: Feb  4 18:01:22 2025 GMT
            Not After : Feb  3 18:06:22 2026 GMT
        Subject: CN=3145AA5239EFDDB678B6698EB668525779A990F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:61:1c:99:05:09:2f:e4:8c:74:83:c4:59:
                    cb:0c:cc:2a:e1:52:1a:e7:4d:46:49:cf:11:e9:eb:
                    97:37:a2:be:43:c9:9f:3e:5b:89:4a:16:52:7a:74:
                    64:5d:59:5b:25:7f:78:66:5c:00:7c:0c:fc:5a:7c:
                    98:4e:f8:8f:90:a7:4f:76:ef:8b:5d:30:c1:d9:51:
                    67:61:4a:aa:f4:24:2e:d1:c4:45:d3:39:20:67:1e:
                    7d:3f:82:13:4a:e0:61:e6:d9:c6:79:34:ca:73:70:
                    00:21:5d:c8:4c:73:1b:f9:fa:76:8e:d7:ab:67:ef:
                    6d:6e:71:f7:4b:01:4a:43:fc:27:e4:92:d1:a2:2c:
                    8a:3e:ac:87:3f:dd:d8:11:dd:dc:87:81:04:29:65:
                    10:32:5d:57:5d:8f:06:a3:fe:f9:7a:cb:bc:de:97:
                    e7:a3:4f:f5:5b:d1:e3:2a:d9:4d:78:fb:4c:f9:07:
                    a0:5a:6f:47:bd:2f:60:02:32:3e:f5:32:c3:e2:55:
                    0f:7e:9a:7c:0b:7e:d9:59:89:cf:64:d2:c9:cb:1c:
                    54:bf:ee:02:90:9e:98:64:ae:31:68:e7:c9:0b:04:
                    c6:bc:fa:c9:ad:29:fe:6f:39:9f:30:a1:f9:5f:bb:
                    68:3c:35:05:d2:27:cf:bf:97:f5:bc:f0:3b:70:4b:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:45:AA:52:39:EF:DD:B6:78:B6:69:8E:B6:68:52:57:79:A9:90:F2
            X509v3 Authority Key Identifier:
                keyid:18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3230302e36332e3131322e302f32312d3234203d3e203237393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:81:92:d4:cd:78:59:d0:69:63:76:d0:e5:d7:35:bf:86:2d:
         2c:e9:1b:fd:65:ec:9a:07:c7:31:30:78:71:04:ca:32:c9:46:
         34:f3:ea:09:9b:23:86:7d:51:24:29:79:d2:ad:9c:3f:3c:53:
         6b:12:8c:49:0b:71:88:97:0d:83:ff:71:3a:fc:16:16:50:0d:
         1d:11:34:cb:41:6d:c2:df:cd:f3:73:c6:89:1f:92:a1:33:54:
         a2:40:08:d9:77:53:cc:67:6f:0e:ac:90:2c:52:b0:7f:97:45:
         ca:94:a8:89:71:a2:4b:67:df:8f:8d:3c:d3:76:ee:89:43:23:
         6d:53:96:b7:f6:37:44:cb:22:2d:11:f8:c2:49:21:03:71:30:
         52:f0:50:49:18:72:bb:46:67:63:5e:69:fb:10:33:3f:63:60:
         9f:f8:e9:25:7e:7e:69:6e:13:f2:b1:09:7a:68:95:0a:df:0b:
         dc:eb:5c:b7:3c:ec:1b:31:ec:a1:a1:59:ba:f7:09:02:00:47:
         5d:e6:da:3f:f1:1b:30:a4:bd:2a:7a:65:71:57:31:85:03:d0:
         63:76:20:93:7f:ef:73:a7:e3:b6:78:26:b1:2f:94:10:24:8d:
         c3:40:49:63:17:be:33:12:7b:50:2b:02:5b:93:99:94:20:92:
         93:41:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:49:29 2025 by rpki-client