Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32332d3234203d3e203233303331.roa
File:                     3230302e3131322e3232322e302f32332d3234203d3e203233303331.roa (raw, json)
Hash identifier:          DlpZImvClDrjwcVIosF1eODZjsa0BwjH/+72jvzIaJg=
Subject key identifier:   1A:00:1D:FD:58:0D:F4:B5:C6:3C:FD:FC:40:64:45:86:D2:08:0D:AA
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       48DD34541AB3D644D22F8A3E31063860017B7573
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32332d3234203d3e203233303331.roa
Signing time:             Wed 23 Apr 2025 22:30:00 +0000
ROA not before:           Wed 23 Apr 2025 22:25:00 +0000
ROA not after:            Wed 22 Apr 2026 22:30:00 +0000
asID:                     23031
IP address blocks:        200.112.222.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:dd:34:54:1a:b3:d6:44:d2:2f:8a:3e:31:06:38:60:01:7b:75:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Apr 23 22:25:00 2025 GMT
            Not After : Apr 22 22:30:00 2026 GMT
        Subject: CN=1A001DFD580DF4B5C63CFDFC40644586D2080DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:37:05:21:03:7f:bc:9f:7f:61:75:a7:f6:
                    d2:ff:75:b9:92:6a:bc:d4:29:92:37:1a:ef:e6:36:
                    07:70:b5:88:c6:05:5e:d5:c0:9a:42:0c:17:9f:02:
                    eb:57:99:e4:d7:b8:df:aa:1d:57:54:c2:c7:b4:64:
                    cf:0b:19:82:c7:d0:43:65:f8:da:e9:75:0d:01:66:
                    dc:dd:bb:5c:2d:08:f4:dc:e2:1c:90:ce:53:99:34:
                    85:16:a9:91:40:c4:e3:7c:5d:7f:ad:79:51:e8:99:
                    a8:56:c6:70:1c:bb:eb:a2:4f:93:06:85:86:1a:4c:
                    7b:98:6d:5d:5b:ea:d7:c6:ec:03:33:b9:7b:4c:95:
                    39:6a:54:65:fc:ac:ce:e1:7b:52:11:94:e6:6f:1a:
                    68:2d:a5:e1:60:43:a9:68:b5:1e:1b:d1:a0:d7:69:
                    c4:d3:3b:1c:ad:7d:f6:3d:3e:ca:4c:50:b9:e2:6c:
                    8d:8f:5e:16:72:57:13:1f:c0:07:1b:16:17:fc:f2:
                    62:f0:68:93:64:dc:59:01:81:16:ac:52:42:be:04:
                    80:2c:b6:54:68:a6:e1:32:7b:d0:73:9f:00:72:23:
                    b5:cf:0b:fa:0b:33:d1:45:05:3c:1d:cd:14:16:54:
                    2b:67:95:b6:e1:31:f2:9a:7f:07:8a:f3:f7:36:15:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:00:1D:FD:58:0D:F4:B5:C6:3C:FD:FC:40:64:45:86:D2:08:0D:AA
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32332d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:e6:b8:62:6a:f7:b8:03:48:df:26:c2:d8:ee:52:f5:7b:f6:
         10:52:8d:a1:81:ac:20:3f:64:8c:2a:1a:5d:07:1c:6c:c6:b3:
         ce:73:97:e1:cb:6d:68:4b:9f:eb:5a:c0:98:5c:50:bc:f7:8b:
         d1:e3:44:87:45:b5:12:f4:d2:79:94:3e:84:56:c0:ed:49:d7:
         3e:6a:db:b0:68:31:64:b0:66:e6:33:24:ea:6d:2b:e1:97:cf:
         03:65:00:85:95:ae:d1:b2:52:e3:d3:91:e5:09:26:f3:23:5c:
         d0:8b:7f:55:2e:fe:77:52:59:19:c9:de:0e:9d:fe:de:5c:4e:
         de:bc:82:41:7c:f5:1f:58:f6:ac:ff:a0:43:43:7c:54:8a:ea:
         77:2a:af:06:5f:45:26:d1:35:80:d4:c6:11:f6:03:48:8a:9e:
         e1:2e:39:30:03:09:a5:da:30:94:5c:19:96:bd:b6:fb:04:2e:
         89:05:60:11:4f:85:d4:6a:63:12:ae:57:8e:e0:58:48:4c:fc:
         ab:33:88:08:1a:05:f9:6b:d7:cd:36:d6:33:64:e0:4e:6d:8f:
         61:c0:f0:aa:eb:f5:7c:bd:4d:2c:c6:a4:11:68:e4:f7:66:04:
         7c:61:97:50:22:fe:ce:de:82:88:17:00:1e:96:ec:1d:cb:32:
         b1:35:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:11 2025 by rpki-client on console.sobornost.net