Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e37322e302f32332d3233203d3e2036353033.roa
File:                     3230302e32332e37322e302f32332d3233203d3e2036353033.roa (raw, json)
Hash identifier:          vHVRsPPVqaKdF3qbYZnqqAs7dWadYIC9actmdes77e8=
Subject key identifier:   0C:86:05:2C:FF:F4:C1:EB:65:20:E7:18:58:58:F0:51:48:DD:2B:91
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       51C158CFDE39CB8AAEF3A3146E3EEF18046E4891
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e37322e302f32332d3233203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:18:56 +0000
ROA not before:           Tue 04 Feb 2025 18:13:56 +0000
ROA not after:            Tue 03 Feb 2026 18:18:56 +0000
asID:                     6503
IP address blocks:        200.23.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c1:58:cf:de:39:cb:8a:ae:f3:a3:14:6e:3e:ef:18:04:6e:48:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:56 2025 GMT
            Not After : Feb  3 18:18:56 2026 GMT
        Subject: CN=0C86052CFFF4C1EB6520E7185858F05148DD2B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:2a:bd:2f:0d:59:da:89:41:2d:8d:96:2b:
                    a6:5f:2b:a6:7b:cf:73:64:48:a0:99:aa:7a:e8:36:
                    b3:e1:45:b1:98:83:7f:b7:ac:ba:db:1d:88:57:ed:
                    bc:cd:62:3a:2e:3b:63:8d:12:cc:cf:ba:a1:6c:04:
                    ae:ec:a4:1e:2b:f6:80:de:9a:1e:36:5b:b5:e3:db:
                    6d:f7:95:d0:c7:10:08:97:85:4e:ba:a9:b1:f9:06:
                    e5:5f:34:d0:9b:2d:69:4e:25:6a:81:ce:16:c6:45:
                    2e:71:e3:53:49:2f:43:1b:06:8b:03:0c:c3:f7:7f:
                    76:bc:9b:00:9f:4f:5e:b5:5f:fa:6f:5e:22:6c:10:
                    9a:0a:72:21:53:0f:59:9b:f8:3a:88:8f:bb:96:b5:
                    fb:2a:f3:a8:eb:63:b2:1e:5b:3c:05:6d:1f:b5:89:
                    07:3e:7b:94:88:92:d0:e3:e1:f7:14:9c:f6:bc:c9:
                    42:6c:9c:22:53:db:f1:fd:38:00:7b:32:a0:db:e2:
                    01:e2:d4:57:23:20:aa:b7:89:5f:b1:6c:29:96:f5:
                    e5:5e:e1:67:a0:38:f5:52:f0:02:31:cd:f6:b5:7a:
                    4d:b4:51:42:3c:9c:30:d3:30:13:67:3a:64:95:1f:
                    5b:bc:30:39:83:6e:77:99:55:e1:f5:c5:5e:9b:93:
                    6f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:86:05:2C:FF:F4:C1:EB:65:20:E7:18:58:58:F0:51:48:DD:2B:91
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e37322e302f32332d3233203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:08:41:86:a0:12:dc:14:b4:88:fe:67:e2:89:d5:5a:a2:2d:
         d8:09:65:11:2d:00:76:04:62:6e:e1:d3:e8:72:2b:d4:1b:f6:
         fc:3a:fc:97:f4:fe:17:0b:15:c0:59:f9:cb:68:06:23:f5:9a:
         bf:0d:20:7d:88:86:a7:2b:d8:d6:42:09:68:d0:ae:da:82:c4:
         14:66:67:fe:7f:9f:71:6d:bd:85:22:39:5c:5b:b1:ed:52:dc:
         06:2a:d8:a7:b1:e8:16:a5:81:f3:20:fb:49:eb:37:1b:ac:44:
         85:0a:10:2b:f3:e3:fd:8c:4c:c4:e0:31:13:75:1b:c7:24:74:
         86:52:d5:60:41:91:02:60:d7:e9:f0:43:29:a0:e3:ee:ae:b9:
         3e:40:71:4a:fb:71:c6:82:e1:a1:ae:e1:81:f0:7b:99:f3:dc:
         12:23:6f:e6:b6:5e:79:b0:f8:f5:17:89:0e:b9:56:75:6d:5f:
         b6:d7:31:28:24:86:34:54:31:56:56:4f:e0:9a:1d:6a:07:3e:
         38:c4:d8:e1:28:76:78:6a:33:85:0c:ef:c8:c2:10:9c:0f:e6:
         8a:2f:3e:fe:fa:1d:a0:77:15:dd:da:1e:6e:fa:72:cc:d8:8f:
         0e:6c:b3:64:eb:65:2d:86:88:0d:a3:c5:c9:8f:e6:8f:0c:76:
         32:61:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:39 2025 by rpki-client