Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3234342e302f32342d3234203d3e203237373534.roa
File:                     3230302e38302e3234342e302f32342d3234203d3e203237373534.roa (raw, json)
Hash identifier:          nd8wqu60m4S0B0n+Y3kvsboEHdxlo8qgKet9Wgu8BdY=
Subject key identifier:   72:A4:0A:F3:8B:2C:78:BA:08:C7:2B:FD:E7:8F:20:3B:4F:BF:5F:5D
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       51964D27A1C828E282E5929D2E59953A2D66111D
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3234342e302f32342d3234203d3e203237373534.roa
Signing time:             Tue 04 Feb 2025 18:08:47 +0000
ROA not before:           Tue 04 Feb 2025 18:03:47 +0000
ROA not after:            Tue 03 Feb 2026 18:08:47 +0000
asID:                     27754
IP address blocks:        200.80.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:96:4d:27:a1:c8:28:e2:82:e5:92:9d:2e:59:95:3a:2d:66:11:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Feb  4 18:03:47 2025 GMT
            Not After : Feb  3 18:08:47 2026 GMT
        Subject: CN=72A40AF38B2C78BA08C72BFDE78F203B4FBF5F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:72:73:48:36:e4:03:1f:5c:b3:f4:ad:11:fd:
                    8e:7e:89:f6:62:aa:b3:40:1f:f1:e7:93:df:4a:b0:
                    2f:ef:09:0f:66:45:04:fb:3a:a4:4b:8c:8d:36:7c:
                    d2:1f:59:81:ce:69:28:2f:d7:06:a5:4e:fb:49:69:
                    90:a6:fe:ca:50:e4:26:c5:28:6e:6e:83:a2:c5:ab:
                    3b:e4:d8:6a:4c:be:d7:43:ce:34:c6:65:71:a1:0c:
                    de:ad:b2:cd:83:1c:f4:d7:30:4a:8e:5f:48:f2:7b:
                    b1:32:f7:e4:c7:c3:07:c4:60:db:e4:43:04:b7:6d:
                    90:36:a6:a9:e8:f7:92:a0:71:ad:93:69:cf:0f:8f:
                    ee:54:13:8c:91:01:3b:39:49:b1:9b:2b:3b:43:43:
                    c8:0e:41:45:73:99:fb:2d:31:f4:02:30:12:76:4b:
                    51:a8:91:47:50:ae:06:48:0c:00:97:5f:2d:87:f7:
                    99:27:7c:6c:73:79:c4:60:f5:4d:31:e9:15:b1:7a:
                    52:e0:f9:01:c5:5e:07:15:ee:7c:a1:9b:ca:de:02:
                    a2:bf:1f:60:1b:ea:9f:a4:5f:35:3d:02:24:5b:65:
                    35:5a:02:55:aa:5e:0a:c7:4c:55:57:fa:96:0d:21:
                    9e:f3:22:25:63:37:cc:7e:64:ca:7a:8a:89:50:5e:
                    25:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A4:0A:F3:8B:2C:78:BA:08:C7:2B:FD:E7:8F:20:3B:4F:BF:5F:5D
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3234342e302f32342d3234203d3e203237373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:e6:0c:f0:88:54:ce:26:b8:96:f4:b7:4c:e1:b1:48:10:26:
         21:91:bd:ae:8c:65:fd:fd:ce:04:f2:84:0c:50:2b:9f:82:32:
         ac:77:5c:1b:f4:c8:17:da:28:b5:e7:6b:75:e4:82:75:2c:15:
         c1:2e:79:5b:c4:6d:57:dc:46:bc:bd:52:0d:05:68:dd:5c:56:
         ac:92:6c:b6:41:be:51:9a:dc:b7:33:79:0c:38:41:91:58:5d:
         93:0e:f9:1a:6d:f4:7e:1f:34:8e:68:ee:8f:9a:47:cb:28:e6:
         6b:3c:e5:87:ff:4b:cc:a8:c3:a0:d6:04:46:80:a3:0f:f6:3b:
         62:ad:76:c2:de:b5:06:98:d1:dd:a7:7c:bd:f4:46:5a:ec:d3:
         cc:51:43:1f:a7:a9:4d:10:a1:2b:b4:ef:17:c8:6f:3f:26:bd:
         15:f3:2d:92:12:0f:a4:77:16:01:81:4e:fd:37:e3:90:1c:2d:
         51:15:96:77:16:92:05:aa:c2:b2:cd:cd:da:fb:e4:a7:cc:fe:
         be:b1:fd:4d:6d:cf:47:d2:5a:cf:76:06:7c:d7:7b:f0:e6:73:
         59:7c:e8:4a:8f:f1:c7:8a:62:7d:2c:7d:72:e1:a0:a1:09:9a:
         b1:da:c8:37:48:5c:d5:91:d8:35:55:4f:40:78:30:71:a7:fe:
         9d:37:f5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:15 2025 by rpki-client