Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/3230302e3130372e3232392e302f32342d3234203d3e203237393236.roa
File:                     3230302e3130372e3232392e302f32342d3234203d3e203237393236.roa (raw, json)
Hash identifier:          BOx1az5jMtNL8Q7t2IvPq4E8ODuL4ApJ1WF79onHjrA=
Subject key identifier:   57:B9:76:CD:A3:61:14:7A:83:CD:36:4A:94:AB:78:EF:75:B0:6C:7B
Certificate issuer:       /CN=6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F
Certificate serial:       194F7AA8926A9ED760AC46FA9094C8BE605C7C87
Authority key identifier: 6A:21:82:9D:C4:22:50:CC:0D:3D:D3:59:4F:F6:FB:4A:3A:8D:70:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/3230302e3130372e3232392e302f32342d3234203d3e203237393236.roa
Signing time:             Tue 04 Feb 2025 18:01:56 +0000
ROA not before:           Tue 04 Feb 2025 17:56:56 +0000
ROA not after:            Tue 03 Feb 2026 18:01:56 +0000
asID:                     27926
IP address blocks:        200.107.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4f:7a:a8:92:6a:9e:d7:60:ac:46:fa:90:94:c8:be:60:5c:7c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F
        Validity
            Not Before: Feb  4 17:56:56 2025 GMT
            Not After : Feb  3 18:01:56 2026 GMT
        Subject: CN=57B976CDA361147A83CD364A94AB78EF75B06C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:13:62:9c:0e:1a:d9:f2:c2:2a:47:07:53:
                    3f:fa:5b:65:cd:89:ce:20:37:7f:06:43:28:e4:25:
                    64:e4:cf:c5:7f:b4:06:21:b9:0f:51:5d:a1:66:3f:
                    b5:bf:23:73:d6:42:f8:b1:08:77:1f:6a:4c:ef:4b:
                    9e:37:ad:4f:a4:08:04:d7:02:8c:04:ad:43:32:33:
                    65:9c:f8:57:d9:e7:cf:11:02:5c:36:ab:29:4b:8a:
                    31:60:c3:68:1c:be:7b:c4:01:56:a1:89:3c:60:71:
                    3f:2c:33:85:bd:f5:2d:ad:65:74:c0:04:5f:a1:5b:
                    22:fd:e8:9f:70:80:a2:d8:5b:33:9f:fe:dc:27:94:
                    70:4f:f0:e8:6c:cb:6d:80:5a:2b:dc:50:74:6d:09:
                    26:9b:cf:68:3c:41:5a:4c:84:10:2b:6b:30:f9:e4:
                    1b:91:b1:9d:da:91:e1:3c:fb:a4:79:86:83:18:45:
                    7c:11:68:be:db:b9:98:d3:e1:bb:32:c1:2a:3b:b2:
                    44:da:e1:25:82:ca:6b:75:e5:e3:a2:55:93:ea:e6:
                    13:3c:a8:f6:e5:81:98:f7:b9:4b:5e:19:d1:56:b1:
                    4d:66:53:a6:2c:39:ba:17:46:8f:73:4c:9a:b7:68:
                    c7:cc:6c:85:26:69:b7:41:73:cc:5f:94:78:8e:92:
                    1f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B9:76:CD:A3:61:14:7A:83:CD:36:4A:94:AB:78:EF:75:B0:6C:7B
            X509v3 Authority Key Identifier:
                keyid:6A:21:82:9D:C4:22:50:CC:0D:3D:D3:59:4F:F6:FB:4A:3A:8D:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/3230302e3130372e3232392e302f32342d3234203d3e203237393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:43:06:be:21:02:64:4a:ed:60:01:09:cb:c8:af:c2:7b:78:
         78:e1:30:a5:e4:c1:f5:ad:46:22:d7:45:58:e4:71:e1:0b:fd:
         d7:ca:7e:53:1b:bd:f7:c3:46:9b:94:32:b3:f8:7e:2e:2e:57:
         c2:2c:95:f4:72:04:8a:de:84:9d:08:ef:b2:75:67:2e:f9:e7:
         f0:49:f6:6e:9d:65:52:2c:5c:b7:3f:75:59:36:2c:d2:93:f4:
         9d:8a:75:43:22:15:e3:e8:b1:01:05:10:3b:23:8b:a0:33:16:
         f1:3f:a4:a4:e6:73:53:98:e6:f7:35:48:1e:b3:b9:e1:fe:2c:
         9e:c2:5d:d2:8d:e4:bd:57:d7:17:57:d4:f1:bf:b0:15:2a:ad:
         a2:06:7f:9e:d3:65:b8:0e:0d:b4:fd:11:c7:45:2f:3e:23:17:
         37:88:2e:c4:3b:82:8e:7f:ae:ba:42:30:da:f1:6d:b5:58:74:
         88:7f:25:68:ff:f2:8d:1c:8a:6c:ad:4a:f5:2c:94:59:80:5f:
         dd:80:25:64:0a:d9:bc:f9:39:01:02:d0:4f:74:e6:39:bb:2e:
         f8:97:1c:fb:0a:7e:2a:38:74:b5:87:8a:c1:be:c2:63:be:53:
         48:aa:47:1a:8e:53:5e:9a:89:f9:5b:11:50:8c:20:37:0d:5d:
         a3:28:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:30 2025 by rpki-client on console.sobornost.net