Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/3230302e31302e3135342e302f32342d3234203d3e20323633373130.roa
File:                     3230302e31302e3135342e302f32342d3234203d3e20323633373130.roa (raw, json)
Hash identifier:          Rs05fAP7IM23aaFHjxCihDrSafuDRhNHNEVG5KsN318=
Subject key identifier:   F6:EC:F2:60:45:C2:BD:A9:15:8E:6B:57:04:A1:C2:E2:A5:F4:9B:46
Certificate issuer:       /CN=189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1
Certificate serial:       07280491C47D6AF698FECD8F9711E088479689C3
Authority key identifier: 18:9F:F1:E7:0A:37:3D:6E:16:2F:9C:90:BC:4D:9B:EB:84:AA:7D:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/3230302e31302e3135342e302f32342d3234203d3e20323633373130.roa
Signing time:             Tue 04 Feb 2025 20:07:11 +0000
ROA not before:           Tue 04 Feb 2025 20:02:11 +0000
ROA not after:            Tue 03 Feb 2026 20:07:11 +0000
asID:                     263710
IP address blocks:        200.10.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:28:04:91:c4:7d:6a:f6:98:fe:cd:8f:97:11:e0:88:47:96:89:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1
        Validity
            Not Before: Feb  4 20:02:11 2025 GMT
            Not After : Feb  3 20:07:11 2026 GMT
        Subject: CN=F6ECF26045C2BDA9158E6B5704A1C2E2A5F49B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:26:71:a0:e0:96:02:8a:84:a6:e0:71:9b:28:
                    bb:1c:02:0d:f7:e9:fd:35:db:58:de:5b:2d:37:6b:
                    c9:7f:e6:bf:cd:45:09:47:a3:6d:61:72:b4:e4:ce:
                    2b:57:29:e0:dd:6b:16:19:59:8b:5c:1d:af:2b:ae:
                    6e:83:69:d7:be:e7:db:8d:96:fd:ba:7c:d9:c2:c0:
                    5a:a3:ce:23:e8:dd:cd:c9:2b:86:b9:f1:b2:93:0c:
                    1d:b1:6d:d4:7c:e6:1c:da:cc:43:48:54:8e:d1:4f:
                    dd:81:93:e7:08:a6:12:24:92:c8:7f:7b:db:5e:da:
                    07:87:64:5d:55:19:8b:72:63:7f:fa:55:59:58:b0:
                    11:60:d1:ee:ae:7e:03:74:64:48:07:04:67:b5:df:
                    18:86:56:6a:d3:6b:5d:49:a8:19:7c:a9:61:66:9a:
                    a0:3d:70:6d:91:21:a4:6c:f3:a4:2a:ee:60:2d:00:
                    64:1c:5b:56:04:48:e1:45:44:4e:7f:bf:2f:7a:86:
                    6a:b4:7f:df:bc:67:8d:2a:26:58:8b:c8:c5:99:fb:
                    76:04:b1:63:8c:5e:1b:c9:27:a2:c8:41:eb:f7:73:
                    6d:78:bd:e0:08:fe:25:21:ad:d6:8d:df:ec:77:e0:
                    2d:c5:f9:46:4f:65:3e:73:dc:f3:47:71:e6:9f:b9:
                    44:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EC:F2:60:45:C2:BD:A9:15:8E:6B:57:04:A1:C2:E2:A5:F4:9B:46
            X509v3 Authority Key Identifier:
                keyid:18:9F:F1:E7:0A:37:3D:6E:16:2F:9C:90:BC:4D:9B:EB:84:AA:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/189FF1E70A373D6E162F9C90BC4D9BEB84AA7DA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FB7A388427A0A2269AF9E0B4C573CBEF1D046BDF34D7B5F3846790510F66E13/0/3230302e31302e3135342e302f32342d3234203d3e20323633373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:4a:00:80:30:43:e4:2f:ff:64:8a:24:0b:20:c4:eb:d1:d7:
         dd:0c:a0:47:68:28:0e:29:b1:ba:fa:02:e1:f7:d1:98:7f:5d:
         6f:c4:63:69:ec:96:c5:c4:b7:80:d7:b9:1f:8b:c7:22:ef:30:
         0c:93:05:ac:33:3a:0e:8a:9c:25:5d:91:67:96:49:4d:df:df:
         fd:c7:75:22:19:ca:7c:6b:cc:98:bc:9f:db:44:bd:f0:3f:83:
         78:aa:f3:7f:10:bb:24:49:0c:44:a4:a4:e0:2f:4c:a8:70:68:
         85:d0:cf:f7:64:ff:fa:f7:54:e4:87:12:cd:f2:b2:61:fe:da:
         3d:6c:b9:f8:45:db:ff:09:e2:34:20:ba:67:99:09:91:9f:4a:
         f8:bd:32:12:c2:c4:44:d8:13:9e:2a:4f:ae:0e:fe:f8:14:67:
         27:2f:17:7e:df:d4:24:06:d0:80:2e:0f:0f:fa:d6:dc:48:a5:
         b6:0d:53:f7:d3:6a:1a:e6:47:d2:12:d7:c8:a2:24:e4:1f:de:
         69:23:9b:75:e0:b9:73:d0:e3:cd:dc:b4:f3:06:18:af:55:22:
         01:2f:32:0e:dc:f6:99:4f:15:da:c6:ba:d4:52:42:13:4b:ac:
         1b:73:ac:4d:60:dd:50:4a:09:01:25:2e:47:62:99:c6:9a:e7:
         8b:89:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:13:05 2025 by rpki-client