Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e39312e3139322e302f31382d3234203d3e203138373437.roa
File:                     3230302e39312e3139322e302f31382d3234203d3e203138373437.roa (raw, json)
Hash identifier:          ebrZ2ZYXKqxGR+24cYSibyLCnzpvgK2vFY0exeKQ+hQ=
Subject key identifier:   82:42:E0:AF:21:17:FE:05:9B:1A:81:2F:FD:3E:BC:B7:1C:83:2E:DC
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       35919A4623EC8DA5F0A6DD250B5AEEDF7598601D
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e39312e3139322e302f31382d3234203d3e203138373437.roa
Signing time:             Wed 07 May 2025 17:17:56 +0000
ROA not before:           Wed 07 May 2025 17:12:56 +0000
ROA not after:            Wed 06 May 2026 17:17:56 +0000
asID:                     18747
IP address blocks:        200.91.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:91:9a:46:23:ec:8d:a5:f0:a6:dd:25:0b:5a:ee:df:75:98:60:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: May  7 17:12:56 2025 GMT
            Not After : May  6 17:17:56 2026 GMT
        Subject: CN=8242E0AF2117FE059B1A812FFD3EBCB71C832EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:1c:cb:3f:65:a7:bf:09:60:2a:b3:0a:c7:
                    7b:c4:7e:c3:05:e3:31:ac:9c:3c:6c:01:58:a6:6a:
                    2b:c3:36:05:ea:89:d6:32:aa:d9:19:a5:47:16:7b:
                    41:9d:75:2b:67:ce:b7:97:1e:8b:4e:ab:75:92:69:
                    18:f6:56:a3:9c:02:1a:b6:43:db:9f:f3:a1:51:45:
                    97:03:61:b2:74:88:0e:a1:34:08:31:38:9d:96:be:
                    f6:9d:7a:17:2e:f6:68:3a:67:16:b9:03:cc:2e:d1:
                    1a:95:8f:97:2d:b7:d5:36:f2:4f:9f:d4:52:66:4f:
                    cb:8d:94:43:86:f1:bd:60:5c:6e:10:6d:ca:e1:0e:
                    29:a2:12:83:fb:cb:d5:9b:39:59:0e:25:5c:3e:e2:
                    35:a6:0a:1c:b2:54:ea:20:95:0e:26:13:5b:e7:8e:
                    63:27:f3:17:dc:c9:56:b2:a1:4a:96:d5:5c:cf:45:
                    59:16:88:80:5e:f3:a5:26:ae:b3:d1:9c:a1:18:15:
                    d2:a7:f1:56:ab:b6:24:c5:da:7c:be:80:1d:74:ad:
                    13:69:1f:d2:a2:f1:65:73:a6:ec:fc:87:8a:e8:dd:
                    91:33:08:e2:ac:1a:4a:fe:08:7e:99:8d:8d:c5:23:
                    57:75:9b:c1:14:aa:f4:05:e4:16:29:04:71:2d:49:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:42:E0:AF:21:17:FE:05:9B:1A:81:2F:FD:3E:BC:B7:1C:83:2E:DC
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e39312e3139322e302f31382d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         73:47:eb:88:8d:6b:ce:1e:fb:41:85:a6:af:09:b3:b0:e0:bd:
         d4:ca:f6:bb:59:7f:a9:21:d5:5d:02:3c:9d:d3:63:de:18:1d:
         49:8e:0e:aa:ed:b3:5b:49:c5:fc:30:63:5e:fa:bd:f0:47:b8:
         d1:1d:17:03:e2:14:b9:9b:98:c0:0c:1e:be:3a:9c:43:c2:c5:
         3e:23:62:cf:01:34:01:ce:66:7f:1e:44:38:75:16:60:50:da:
         c5:82:91:fb:43:82:dc:a0:67:07:45:7b:11:a5:e4:0b:98:f7:
         9a:2b:db:2a:51:a1:97:b7:ed:da:53:59:76:50:e4:23:46:09:
         bd:0d:ff:2a:2d:72:0f:27:d0:f4:f0:8c:27:47:23:fb:27:d5:
         51:91:9c:8e:7d:a4:da:8f:25:64:c5:9c:25:d1:da:46:79:71:
         a7:e7:55:5a:ae:1a:10:8a:e0:ed:23:e8:34:61:74:68:7f:aa:
         e1:87:1a:d2:e3:48:bb:a2:eb:41:bc:fd:81:ed:36:48:61:78:
         c6:d0:15:ea:ce:80:66:89:9b:f8:d8:c4:c4:a2:2a:7d:42:43:
         ec:31:56:3d:2d:18:47:1a:ae:7f:4a:25:bb:35:ac:b5:7f:72:
         4f:e1:0d:11:30:f4:0e:bc:03:ff:8a:b8:17:d3:f7:7b:71:71:
         0d:97:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 01:28:53 2025 by rpki-client