Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3230302e3130372e3234302e302f32312d3234203d3e20323632313631.roa
File:                     3230302e3130372e3234302e302f32312d3234203d3e20323632313631.roa (raw, json)
Hash identifier:          nlMqjD8kbrhhi8oUfyVegJs3l7dWul/bRTbDzekd5is=
Subject key identifier:   F8:B2:23:CF:E2:49:D7:C2:2D:98:34:8C:A2:76:75:A0:FE:8C:22:03
Certificate issuer:       /CN=4B84C283EBC8873151EF0DFD0D5E4DB824C81206
Certificate serial:       41E13920C8A7DB529FDBC435FC4CE180BC14F520
Authority key identifier: 4B:84:C2:83:EB:C8:87:31:51:EF:0D:FD:0D:5E:4D:B8:24:C8:12:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3230302e3130372e3234302e302f32312d3234203d3e20323632313631.roa
Signing time:             Wed 09 Apr 2025 03:40:00 +0000
ROA not before:           Wed 09 Apr 2025 03:35:00 +0000
ROA not after:            Wed 08 Apr 2026 03:40:00 +0000
asID:                     262161
IP address blocks:        200.107.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e1:39:20:c8:a7:db:52:9f:db:c4:35:fc:4c:e1:80:bc:14:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B84C283EBC8873151EF0DFD0D5E4DB824C81206
        Validity
            Not Before: Apr  9 03:35:00 2025 GMT
            Not After : Apr  8 03:40:00 2026 GMT
        Subject: CN=F8B223CFE249D7C22D98348CA27675A0FE8C2203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:a2:02:c3:a6:e8:fd:05:70:8d:9e:21:04:
                    3a:bf:67:46:29:85:6a:54:e6:a5:df:24:bb:88:49:
                    c1:81:33:c9:9e:b0:fd:6c:ca:5a:d1:ae:92:52:3c:
                    c5:af:b4:d8:04:96:78:7a:bd:8b:1f:0f:c6:ac:5e:
                    e0:a1:60:49:27:0a:59:40:65:ba:21:60:66:0a:29:
                    89:47:17:6d:21:64:03:06:bd:4c:ad:b9:eb:b2:2b:
                    37:76:ae:21:35:95:40:e2:4c:ed:f7:60:a3:2c:a2:
                    79:e4:cc:3e:57:8e:0a:59:79:39:97:a5:f0:07:76:
                    45:c2:c1:e4:c7:b6:56:99:a7:02:22:5b:d8:05:79:
                    98:53:a6:eb:28:06:1f:47:b7:9d:41:d8:a6:d1:0c:
                    a0:0f:2e:b0:d8:e6:2e:f3:3a:38:ff:7e:36:40:5f:
                    80:96:12:8e:ee:d4:b5:7f:60:f3:bf:f9:dd:4a:3c:
                    1d:06:10:a9:a6:4b:aa:e3:0c:e8:d5:72:3d:bc:d4:
                    6d:7b:3d:92:63:cd:88:5c:be:f7:ba:27:5d:fa:0c:
                    f1:a1:3f:c4:50:20:40:77:b2:f9:b0:70:4a:b0:96:
                    71:16:fa:64:5c:35:1f:80:8b:0a:94:34:f8:fa:e8:
                    53:6c:58:4f:02:2e:6d:c1:4a:05:da:20:ab:25:65:
                    0a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B2:23:CF:E2:49:D7:C2:2D:98:34:8C:A2:76:75:A0:FE:8C:22:03
            X509v3 Authority Key Identifier:
                keyid:4B:84:C2:83:EB:C8:87:31:51:EF:0D:FD:0D:5E:4D:B8:24:C8:12:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3230302e3130372e3234302e302f32312d3234203d3e20323632313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:24:0e:58:de:3b:d1:c6:58:db:97:be:d6:e8:63:9e:5f:9b:
         b6:72:80:2e:ca:e1:de:68:cb:cd:b4:3a:ff:56:d3:25:f0:9d:
         3b:4d:5d:73:72:82:53:cd:c9:21:84:eb:5a:83:c9:ab:67:e4:
         e1:df:c3:5d:e1:e4:53:f5:c0:72:21:1e:13:24:56:78:13:d3:
         8c:84:f2:24:83:d4:58:00:05:24:76:a0:0a:97:04:29:1e:23:
         d5:15:ff:3b:58:fc:5d:74:62:8f:e5:7a:15:be:70:60:b7:34:
         f8:71:22:e9:fb:2a:cd:7b:10:84:c3:8e:1f:de:09:65:d3:1e:
         e1:c0:21:f5:7b:e1:88:d9:c2:f6:b6:53:8f:b0:85:33:75:e9:
         02:c0:d2:5d:a8:54:b8:76:ad:f6:a3:d0:15:63:1d:b6:27:c5:
         79:fd:96:af:3b:b0:46:cb:3f:73:59:8d:fb:fb:83:7b:15:48:
         fb:41:4e:56:c1:cd:1a:a1:a4:71:f0:e2:d8:e0:91:d9:48:ea:
         90:58:1d:2f:63:a6:3c:7d:ad:c2:d2:0f:00:cc:95:8b:47:61:
         9d:26:68:e4:21:03:20:18:15:be:46:69:73:ca:0d:fc:3c:2e:
         1a:e3:51:65:5c:d4:50:1e:5d:1e:39:79:a6:3d:55:ac:8b:c4:
         76:d7:46:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:32 2025 by rpki-client on console.sobornost.net