Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e38342e3139322e302f31382d3234203d3e2038303438.roa
File:                     3230302e38342e3139322e302f31382d3234203d3e2038303438.roa (raw, json)
Hash identifier:          U0ChXemb50E4YlNoKaNFNxIiVYIGLImHa2e/yQk6yPQ=
Subject key identifier:   A6:5D:05:42:FD:15:E0:47:C9:E2:F2:F5:2B:42:E3:3F:05:04:9C:75
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       54D21A18322211FD49BB995F2C3D432DEB5DDB3E
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e38342e3139322e302f31382d3234203d3e2038303438.roa
Signing time:             Tue 13 May 2025 14:15:00 +0000
ROA not before:           Tue 13 May 2025 14:10:00 +0000
ROA not after:            Tue 12 May 2026 14:15:00 +0000
asID:                     8048
IP address blocks:        200.84.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d2:1a:18:32:22:11:fd:49:bb:99:5f:2c:3d:43:2d:eb:5d:db:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: May 13 14:10:00 2025 GMT
            Not After : May 12 14:15:00 2026 GMT
        Subject: CN=A65D0542FD15E047C9E2F2F52B42E33F05049C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:0f:5a:f1:ac:cc:4b:2f:4f:60:53:3c:9d:
                    93:61:26:1b:87:71:9b:ca:ba:0b:76:43:c6:95:8b:
                    1d:ff:ca:ee:42:87:af:7b:26:8f:99:f6:ce:71:fd:
                    2d:08:0d:7d:10:93:1c:84:42:6e:39:74:29:6f:95:
                    52:2f:c1:14:da:ad:de:c8:c6:6a:fb:b0:77:29:f3:
                    b3:b5:fa:05:70:6e:40:e8:7d:4f:11:d2:f9:98:d1:
                    21:97:1b:c0:9d:7d:b8:39:21:20:94:2e:be:6d:2d:
                    e8:e0:20:e8:c4:33:b5:14:89:b3:83:ac:49:dd:92:
                    a7:0b:29:8c:88:a9:1a:e8:d7:ba:0c:a7:9e:3c:43:
                    8a:08:70:a7:46:37:ed:7d:b5:7e:66:e5:34:56:e4:
                    14:e7:29:f3:27:e3:43:2b:bf:5e:46:41:5e:f1:f6:
                    6a:04:f7:59:b8:16:de:13:85:3d:9c:e1:ce:21:2e:
                    8b:71:04:9f:79:aa:af:ad:8b:38:e5:f2:fa:cc:36:
                    02:df:cd:58:14:a5:e6:41:90:e0:93:79:95:96:3e:
                    fc:ca:fc:e9:e8:f5:8e:f7:11:a5:92:e0:4e:e9:4d:
                    c0:df:bd:ab:d3:00:d5:ee:7d:b2:a1:f0:cf:44:bc:
                    65:c0:df:e9:e5:5e:41:9f:ed:dd:6c:2f:d8:1a:cd:
                    8e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5D:05:42:FD:15:E0:47:C9:E2:F2:F5:2B:42:E3:3F:05:04:9C:75
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e38342e3139322e302f31382d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.84.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:46:19:3b:5f:42:88:7f:51:05:64:b2:a7:92:55:b5:ad:
         91:3e:ca:29:d0:c3:1d:b2:1d:d6:20:e9:fb:83:74:8c:02:c5:
         48:e3:de:e5:2e:fc:0a:82:26:4e:9d:04:b7:6e:63:4b:29:ef:
         da:93:ca:e6:b4:cd:82:77:dc:72:58:5d:52:36:3c:10:7b:f5:
         6e:be:a3:98:d9:ca:fb:80:2b:c2:10:9b:7c:92:65:b0:4c:e1:
         f4:fe:91:d8:44:ee:b0:60:7b:96:4e:39:23:a9:fb:84:b5:59:
         4b:e2:b8:31:2e:10:43:f3:d0:2d:db:5c:b4:fa:05:0a:64:47:
         d8:7f:7c:dd:d5:1f:3d:95:b0:65:02:43:10:e2:b5:92:2e:fa:
         bb:10:d8:97:d3:36:64:8d:75:51:71:aa:f7:2e:c7:fc:a8:ce:
         3d:d6:67:27:4b:89:8f:37:4d:59:86:7b:a1:3c:b6:34:ef:1a:
         06:2f:c8:de:21:74:7a:64:46:30:96:7b:95:ce:42:93:31:c3:
         24:bf:ab:a9:d2:cb:44:a3:0c:35:1a:36:6e:be:10:45:97:cb:
         97:dc:fe:0a:88:ee:55:d7:60:83:4e:45:0b:a9:d3:f6:96:ff:
         dd:e1:03:e3:af:b4:4b:ab:7f:e1:f6:a1:b5:ce:1d:3e:76:2b:
         60:4b:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 08:07:29 2025 by rpki-client