Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38392e302f32342d3234203d3e203532333735.roa
File:                     3230302e3131352e38392e302f32342d3234203d3e203532333735.roa (raw, json)
Hash identifier:          BahL9G6gYqUn/30M0ZJxNXB5+ZRGKt9gFx+bC2wP5XU=
Subject key identifier:   BB:D6:94:8E:A7:B2:D9:91:3B:B9:4A:A5:55:85:E2:5F:18:8F:1E:D0
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       2346A1C08FAF1F6CC299E00B35354E2EDAA4FA3C
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38392e302f32342d3234203d3e203532333735.roa
Signing time:             Tue 04 Feb 2025 18:35:03 +0000
ROA not before:           Tue 04 Feb 2025 18:30:03 +0000
ROA not after:            Tue 03 Feb 2026 18:35:03 +0000
asID:                     52375
IP address blocks:        200.115.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:46:a1:c0:8f:af:1f:6c:c2:99:e0:0b:35:35:4e:2e:da:a4:fa:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:03 2025 GMT
            Not After : Feb  3 18:35:03 2026 GMT
        Subject: CN=BBD6948EA7B2D9913BB94AA55585E25F188F1ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:8e:d2:ff:0c:6d:5b:3f:f1:c5:7a:70:ff:
                    f3:2f:23:dc:ff:4c:2c:96:b9:f8:09:c2:82:3a:b0:
                    77:eb:64:76:68:71:2e:36:f1:83:3e:ea:be:7e:6d:
                    04:48:06:cc:fb:78:5d:98:6a:c8:ce:05:61:1c:b6:
                    b2:3c:51:c2:20:70:14:23:eb:17:36:ed:60:c3:46:
                    10:19:34:1b:6f:0c:75:7c:f9:3f:fd:8b:1b:10:d3:
                    2b:15:b2:ae:39:75:59:a0:52:c7:c3:67:4a:e5:09:
                    60:44:68:9d:27:cb:c9:5a:a4:ae:67:9f:9c:ee:14:
                    86:1c:5a:aa:99:76:01:61:8a:5e:62:8b:4b:84:84:
                    e8:6d:69:ff:3c:a5:af:c8:ea:6e:ad:27:96:cb:4c:
                    44:0d:ba:5a:b8:6d:29:b1:da:d3:7a:0d:c4:30:87:
                    05:f4:ac:a6:b6:37:04:7d:72:ef:bd:55:3b:63:c0:
                    14:38:ed:01:1c:38:a5:0e:a8:e9:93:99:00:2d:61:
                    06:61:a1:1a:04:85:04:2a:63:16:14:4b:bd:c4:56:
                    74:8b:8a:a5:d1:2b:5f:38:ea:f1:5c:81:ab:aa:9c:
                    8e:89:b5:82:0f:62:48:96:fa:02:62:50:0a:5c:0b:
                    3e:53:be:4d:48:76:06:bb:17:24:8a:e9:4f:72:da:
                    a5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D6:94:8E:A7:B2:D9:91:3B:B9:4A:A5:55:85:E2:5F:18:8F:1E:D0
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38392e302f32342d3234203d3e203532333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:4d:56:bd:f5:cd:90:7b:72:30:36:7c:ab:35:34:6f:c5:72:
         7d:5a:33:a0:00:8f:4f:00:dd:08:7e:da:28:1c:31:5b:d5:80:
         b3:b5:dd:42:99:23:7a:60:ef:0d:eb:d0:7a:8b:da:45:4b:05:
         57:1f:86:6c:8d:f6:22:97:0e:63:41:0b:13:07:aa:9e:2a:1f:
         d5:8a:7c:04:d6:11:86:fe:6d:0f:60:b6:09:fd:92:be:6d:16:
         3a:ff:6d:43:f8:59:7c:8f:88:8a:05:ff:c1:18:2c:90:fa:d7:
         2d:0b:b8:a3:3d:b9:66:01:6a:1d:d7:0e:b9:08:2a:12:aa:31:
         61:60:55:21:d6:95:d3:9e:21:35:a7:be:59:3c:7e:73:2c:f8:
         9c:96:bd:78:fa:45:73:ce:e4:54:27:b2:62:5f:b6:8a:e0:fc:
         67:2c:81:a5:0a:56:7a:b8:8b:6a:03:e6:89:46:98:86:c4:67:
         3f:df:a0:10:6f:a7:5b:b2:b1:50:3e:fa:4c:4f:dd:15:cd:f9:
         50:39:fb:03:9b:41:b4:0b:36:1b:44:9a:81:b3:ac:f2:9d:96:
         73:2b:1c:b0:92:ae:52:5b:1f:53:f7:02:a4:9e:04:61:7c:06:
         9b:00:5f:89:bd:56:09:b3:10:90:d8:3e:45:09:a5:9c:e3:82:
         54:51:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:09 2025 by rpki-client