Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/3230302e37332e3131322e302f32312d3234203d3e20323633323337.roa
File:                     3230302e37332e3131322e302f32312d3234203d3e20323633323337.roa (raw, json)
Hash identifier:          VZsYGr4hoDdu2T4MXE5O7lb5sGEZudXM+EV8BgFLT74=
Subject key identifier:   31:63:95:40:79:90:E5:E8:97:88:6A:D6:53:72:6B:3F:0B:92:4B:64
Certificate issuer:       /CN=6F5638A54E694E3FCFC335F3AFD2311F07D05D08
Certificate serial:       592FF569909AF23B966302398E4BFF8B24AB2B77
Authority key identifier: 6F:56:38:A5:4E:69:4E:3F:CF:C3:35:F3:AF:D2:31:1F:07:D0:5D:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/3230302e37332e3131322e302f32312d3234203d3e20323633323337.roa
Signing time:             Tue 04 Feb 2025 18:06:15 +0000
ROA not before:           Tue 04 Feb 2025 18:01:15 +0000
ROA not after:            Tue 03 Feb 2026 18:06:15 +0000
asID:                     263237
IP address blocks:        200.73.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2f:f5:69:90:9a:f2:3b:96:63:02:39:8e:4b:ff:8b:24:ab:2b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5638A54E694E3FCFC335F3AFD2311F07D05D08
        Validity
            Not Before: Feb  4 18:01:15 2025 GMT
            Not After : Feb  3 18:06:15 2026 GMT
        Subject: CN=316395407990E5E897886AD653726B3F0B924B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:51:2c:46:7b:f0:ad:a8:fc:3c:43:95:54:
                    5f:e8:06:ec:2f:0c:16:cc:bb:05:58:be:1c:4a:da:
                    67:fb:2d:07:b9:3e:76:67:2e:00:6c:8b:10:6a:fd:
                    84:96:ee:d1:83:92:1c:3d:91:68:9c:6e:39:d2:de:
                    3e:6f:a4:f5:2c:92:95:fd:0a:1e:1c:15:74:f0:ad:
                    58:ff:2a:b5:1e:b7:ba:c0:e3:ef:fe:54:dc:d6:a0:
                    c1:22:3a:89:79:a9:92:a7:a7:c2:e1:c1:bb:cb:86:
                    e9:c4:7c:28:3f:63:b0:81:e5:81:a2:d1:35:66:29:
                    d2:5f:a6:f0:0b:3a:34:dc:f7:b0:c4:9c:df:63:b3:
                    88:ed:1c:c0:0b:da:ff:a8:7e:68:5f:43:f3:95:ca:
                    56:4e:a4:7c:8b:25:f5:42:f9:af:dd:79:6f:9c:33:
                    97:70:55:19:25:ea:d6:e8:c4:d0:bc:7f:fa:5d:ba:
                    7e:be:c7:ee:29:86:7c:1f:91:7c:2e:31:f1:69:bc:
                    42:24:d2:fc:d2:d9:ec:34:0d:1d:fb:2f:56:ec:8b:
                    8a:c8:6b:4a:20:a0:e7:33:80:a7:f2:a2:0a:00:51:
                    da:b2:a3:f7:ff:51:24:d9:66:f3:a1:af:77:bd:96:
                    5e:59:a6:9f:63:ce:53:6c:1c:ea:0e:18:92:7b:e1:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:63:95:40:79:90:E5:E8:97:88:6A:D6:53:72:6B:3F:0B:92:4B:64
            X509v3 Authority Key Identifier:
                keyid:6F:56:38:A5:4E:69:4E:3F:CF:C3:35:F3:AF:D2:31:1F:07:D0:5D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F5638A54E694E3FCFC335F3AFD2311F07D05D08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9698A2CC2D249AA8756FD138D30804C21927952D66FCAFC4A3D613E7C75C8191/0/3230302e37332e3131322e302f32312d3234203d3e20323633323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:b7:16:58:46:eb:c9:49:3e:44:70:40:10:40:92:0b:cd:
         28:03:ba:17:e0:92:e6:9a:05:65:b1:61:0b:32:c3:92:57:2d:
         b4:5b:d3:2d:8a:94:be:ac:85:4e:df:e1:86:c8:58:f2:25:f1:
         95:80:f3:d8:33:67:99:a6:6a:96:3b:b9:d3:ae:11:ff:45:8a:
         ae:c5:c7:48:b2:dd:4d:0f:08:52:3b:7c:61:19:62:b8:26:ba:
         b4:ea:fe:34:9c:92:3e:23:c7:c3:78:59:99:80:77:83:a3:d8:
         ad:d4:1f:d3:80:0f:55:bf:b6:cd:03:23:7e:44:66:ab:13:e9:
         27:f4:38:ea:2e:be:db:1b:0a:c2:11:bb:66:ee:ca:9a:00:ac:
         67:0c:f1:ec:32:e6:d9:69:a5:3c:2d:4c:30:90:26:e5:e7:b4:
         f5:b8:11:46:a7:21:c3:cd:57:ec:29:c7:57:4f:9e:5e:a4:cf:
         b4:76:6e:e5:0d:c9:d3:f2:ae:7c:32:fa:63:5f:9e:b5:f6:c4:
         31:bf:e9:f8:ea:3d:11:3c:ff:3a:63:1e:b7:4e:8e:d6:f6:ee:
         cc:c9:14:64:61:f7:87:dc:2a:41:8f:84:54:2f:c9:91:ec:ec:
         b5:bc:52:5c:b3:83:97:eb:f6:ab:82:57:26:a6:d8:c1:9c:73:
         c7:30:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:01 2025 by rpki-client on console.sobornost.net