Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32392e302f32342d3234203d3e20323730303735.roa
File:                     3230302e31302e32392e302f32342d3234203d3e20323730303735.roa (raw, json)
Hash identifier:          j6rQFsOhC+rVwjHZcv9nxoFggZeXP5GJi/m1YO86TpQ=
Subject key identifier:   9D:54:5E:FA:51:D2:69:6D:2E:23:1A:2A:59:63:99:51:8B:D9:42:EC
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       3B52ED1F299C1BEACE95AFDFBBA07CF2EACC048D
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32392e302f32342d3234203d3e20323730303735.roa
Signing time:             Thu 26 Jun 2025 21:55:01 +0000
ROA not before:           Thu 26 Jun 2025 21:50:01 +0000
ROA not after:            Thu 25 Jun 2026 21:55:01 +0000
asID:                     270075
IP address blocks:        200.10.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 09:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:52:ed:1f:29:9c:1b:ea:ce:95:af:df:bb:a0:7c:f2:ea:cc:04:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Jun 26 21:50:01 2025 GMT
            Not After : Jun 25 21:55:01 2026 GMT
        Subject: CN=9D545EFA51D2696D2E231A2A596399518BD942EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:9c:62:97:6f:81:f3:89:7f:c9:67:70:ac:
                    42:ce:aa:ef:1c:84:74:ea:12:7f:ef:c1:9e:c2:21:
                    a9:d5:0d:02:14:79:b1:4a:c7:39:07:e5:b3:26:42:
                    1c:8b:73:8c:5c:a8:33:c6:3e:09:09:12:80:e5:47:
                    4e:76:ee:18:8a:21:94:e8:79:32:66:c4:0d:38:d8:
                    e0:c3:3b:f2:c5:3a:26:2b:e4:80:df:a9:76:1b:02:
                    15:9a:ff:2e:20:3e:f4:02:b3:0c:24:ff:51:d5:f5:
                    47:61:f1:5b:21:5c:73:9a:76:65:d8:f7:6c:29:d3:
                    c3:d0:29:9f:d9:c0:5e:72:bf:c4:20:1a:a9:b4:65:
                    e8:16:12:4e:5b:59:44:16:a4:c4:d6:56:a7:0d:5d:
                    92:57:d1:25:4d:ad:df:70:3f:43:61:ba:5b:b2:1f:
                    dd:79:4c:6c:27:14:db:2c:5d:54:63:a0:66:9f:23:
                    5e:64:ad:8c:0c:40:ee:c6:51:bf:e7:99:02:d2:1a:
                    83:e4:41:30:ab:5f:f1:24:a5:50:d0:19:4f:f6:41:
                    58:54:47:9d:a5:37:19:7a:4b:5a:6d:2f:f8:62:4e:
                    60:d7:8b:1c:6b:93:6f:55:9f:f6:79:33:09:43:8f:
                    5e:56:27:e9:b3:5d:f5:66:c3:b5:d4:f5:ba:b7:c2:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:54:5E:FA:51:D2:69:6D:2E:23:1A:2A:59:63:99:51:8B:D9:42:EC
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32392e302f32342d3234203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b9:0b:20:f4:47:1d:f4:be:d9:85:34:71:90:ec:6d:7c:5c:
         b9:57:4f:42:30:f7:5e:f6:56:34:a7:3e:fe:ec:8e:f0:8b:ee:
         8b:68:38:86:98:32:0a:8b:30:a9:69:80:9d:5c:5d:58:f7:a5:
         5f:27:90:d9:19:e9:c3:d3:85:cf:b5:91:f2:ab:b4:25:ef:01:
         c1:26:7b:cd:4b:9f:ad:52:cb:71:7e:a3:1a:fc:c0:40:dc:d1:
         09:1c:bc:32:29:b3:49:44:d0:24:63:d6:8a:1f:f0:83:29:80:
         4d:90:97:63:42:9e:29:b1:c0:db:05:a9:8c:e0:e7:4e:39:0a:
         98:5b:03:a2:ef:fa:f9:0d:58:09:72:93:17:f6:0d:93:4b:21:
         89:f3:4b:f5:2b:7e:a2:0e:1c:61:a5:53:18:1e:a2:be:51:ba:
         ec:c4:e8:24:87:d0:2b:8e:bb:cd:7a:15:dd:88:2e:a0:4c:8a:
         33:01:42:be:b9:5d:7e:ab:0a:0c:a3:4e:e7:6f:b4:25:6d:21:
         c1:df:68:13:20:fa:16:f3:28:d7:d8:97:e7:59:6d:2f:d9:23:
         78:4d:07:4a:d2:31:e2:96:f3:cc:98:b3:f9:f7:be:c0:83:68:
         7a:18:de:12:ef:b4:d5:e9:6a:0b:ab:06:37:1d:c6:3d:60:ef:
         19:bf:4a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:46:50 2025 by rpki-client