Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39332e302f32342d3239203d3e203532323934.roa
File:                     3230302e3131352e39332e302f32342d3239203d3e203532323934.roa (raw, json)
Hash identifier:          kzHvmszNaDzCpqAXU6pckzz4Paxi+R+jhn31Er1PTME=
Subject key identifier:   A1:DC:B7:2B:23:8E:DB:A5:9E:4F:67:8B:5C:46:FB:96:D8:BD:D3:77
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       177EB477B99B75B3B760E2DB6688E7736E8E143F
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39332e302f32342d3239203d3e203532323934.roa
Signing time:             Tue 15 Apr 2025 12:14:53 +0000
ROA not before:           Tue 15 Apr 2025 12:09:53 +0000
ROA not after:            Tue 14 Apr 2026 12:14:53 +0000
asID:                     52294
IP address blocks:        200.115.93.0/24 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7e:b4:77:b9:9b:75:b3:b7:60:e2:db:66:88:e7:73:6e:8e:14:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Apr 15 12:09:53 2025 GMT
            Not After : Apr 14 12:14:53 2026 GMT
        Subject: CN=A1DCB72B238EDBA59E4F678B5C46FB96D8BDD377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:d8:02:75:ec:44:6d:ed:bb:d0:6b:69:4d:
                    60:52:d5:c2:f1:0f:8e:80:bc:4d:d8:b2:ac:cb:19:
                    3a:cb:1b:7f:f8:40:09:73:fe:ee:bc:13:f5:e4:c5:
                    ba:e2:c7:08:bd:fe:39:20:cf:e0:5b:a6:c6:95:fe:
                    9b:02:15:f1:37:5e:39:22:ad:b6:bd:34:4a:ad:03:
                    c1:a4:be:7e:95:62:e2:16:df:41:30:a9:2d:12:67:
                    1a:e4:3a:cb:7f:9c:c6:ce:53:06:64:4e:91:bd:0c:
                    f7:e7:d3:22:60:f9:ce:4b:f0:88:48:d0:59:44:2a:
                    bc:06:2c:af:0b:c3:d5:a8:1f:8b:7f:af:6c:90:86:
                    25:4a:23:bc:56:4f:95:42:26:d1:44:a1:08:f6:c2:
                    f9:bb:fa:ec:df:9b:c0:52:2a:6c:d9:bc:d9:01:6a:
                    6c:12:35:64:83:8b:61:43:8f:bb:b0:70:97:58:a8:
                    2e:5a:50:1b:a9:fc:6a:1c:1d:a0:35:1b:94:1b:00:
                    69:b2:d1:36:d3:b1:f4:a0:63:6c:1a:b8:5e:f6:64:
                    9f:34:99:90:9c:aa:e8:f8:c8:d4:2c:a9:3b:17:5e:
                    fd:28:2f:14:40:b9:c4:d7:0e:de:0e:6d:8d:a2:53:
                    cf:b0:71:c3:4e:e2:ed:9b:fb:8b:05:3b:de:ca:44:
                    33:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DC:B7:2B:23:8E:DB:A5:9E:4F:67:8B:5C:46:FB:96:D8:BD:D3:77
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39332e302f32342d3239203d3e203532323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:e1:64:9d:02:64:b7:59:af:3d:6d:96:a0:78:3c:57:59:74:
         e8:74:0c:87:bd:dc:8f:82:4a:49:aa:a4:de:6c:39:ca:a3:99:
         63:13:b6:fa:41:4e:10:72:70:08:4f:39:73:bf:05:55:71:15:
         a7:18:b9:4b:25:35:d5:4a:ab:5a:04:6f:fb:97:e0:12:44:68:
         23:1e:25:bf:cf:c7:53:7c:e6:f8:85:33:3f:cb:27:24:0f:c3:
         45:72:fd:93:12:17:f4:a7:5b:60:b3:9a:1e:64:2d:f7:d6:76:
         e7:52:1b:c6:47:fb:e5:7d:07:a6:32:fb:7a:f3:12:54:1a:d5:
         f8:be:11:33:59:af:84:31:93:62:fc:15:24:a7:a0:ea:51:9a:
         43:53:9f:03:97:7e:5d:6e:6c:35:a7:78:be:58:30:bc:b7:a5:
         62:af:48:39:47:0e:2d:a0:71:4a:1d:34:24:28:7f:d6:d9:6d:
         40:3f:97:2b:e4:0d:2a:a9:02:f9:97:b9:22:5f:3f:c8:52:df:
         ec:13:1a:be:3d:3b:07:08:80:f3:74:c5:33:b5:23:f4:70:ff:
         d6:93:ea:2e:32:9e:40:ea:65:d8:10:ca:d4:8d:7a:b6:0b:6b:
         7e:2d:f4:15:21:ed:49:7d:a7:1f:33:37:6b:07:be:14:f5:b8:
         d7:3c:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:12 2025 by rpki-client on console.sobornost.net