Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3230302e302e39302e302f32332d3234203d3e203238333934.roa
File:                     3230302e302e39302e302f32332d3234203d3e203238333934.roa (raw, json)
Hash identifier:          dsNqsIRLppipfiK97wDbOfVrZDkGOJmmC7ZfbZLOODI=
Subject key identifier:   48:C8:54:8E:01:4B:48:C5:3B:16:1F:38:88:14:F8:4E:2B:56:27:DC
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       0CF3CCE62ED2621007B646FEDF3CC9DD8050C5A1
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3230302e302e39302e302f32332d3234203d3e203238333934.roa
Signing time:             Mon 21 Jul 2025 19:25:58 +0000
ROA not before:           Mon 21 Jul 2025 19:20:58 +0000
ROA not after:            Mon 20 Jul 2026 19:25:58 +0000
asID:                     28394
IP address blocks:        200.0.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f3:cc:e6:2e:d2:62:10:07:b6:46:fe:df:3c:c9:dd:80:50:c5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Jul 21 19:20:58 2025 GMT
            Not After : Jul 20 19:25:58 2026 GMT
        Subject: CN=48C8548E014B48C53B161F388814F84E2B5627DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:e6:d2:0f:8f:02:b3:a6:1d:36:d3:22:9d:
                    8e:ce:17:3a:d7:85:ae:07:79:3f:54:92:c3:53:72:
                    4e:82:d9:9f:3e:e9:f9:61:5b:9a:f0:3f:c0:5f:85:
                    f1:31:d2:b8:ac:2f:0b:56:ed:8a:2d:e6:4a:3e:34:
                    d0:12:5c:b1:a0:2d:04:a1:be:be:be:79:fc:91:fd:
                    50:1d:ff:23:df:95:2f:5f:c6:9e:1b:a3:e3:d5:9b:
                    8a:2f:7b:53:f8:5f:2d:95:66:2b:b3:c8:ec:79:38:
                    4b:50:95:58:df:84:e1:e4:f4:61:bc:6d:c8:07:5c:
                    e1:85:b2:9f:07:8c:4f:26:82:a2:ee:35:0f:dd:8d:
                    35:10:43:84:24:24:b5:d7:ab:b0:3d:42:55:ed:ed:
                    b4:42:b1:7c:e7:a0:48:21:51:b9:41:0f:94:a9:bc:
                    cc:48:0b:51:f8:43:27:10:5e:ed:53:e1:a3:0b:5a:
                    41:34:68:22:45:57:43:75:67:01:0b:8f:e8:d5:48:
                    08:fa:be:e6:2f:a4:2e:08:13:3f:c7:cd:a7:51:b9:
                    81:8d:c2:33:22:bd:b2:cc:c8:b9:0e:5c:02:3f:03:
                    c3:4d:8b:d6:d5:0c:4e:98:a4:07:90:f6:7d:ff:a3:
                    4a:b8:5f:95:b8:35:bc:1c:22:24:3b:3e:12:0f:cb:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C8:54:8E:01:4B:48:C5:3B:16:1F:38:88:14:F8:4E:2B:56:27:DC
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3230302e302e39302e302f32332d3234203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:e6:e2:4d:d7:30:ed:e3:5b:b3:05:a1:08:85:d5:81:b4:ad:
         e8:bc:4d:7e:b5:8c:a0:5f:f3:22:c3:78:37:12:94:c0:7b:85:
         ca:e3:c2:8b:9c:08:27:db:b6:83:c2:5b:d3:6b:45:30:72:71:
         19:94:77:16:3c:d2:a9:36:c4:6e:ef:15:cf:ec:49:52:07:07:
         13:7e:f5:d7:4b:0a:83:5e:d7:d2:4a:9a:48:3b:07:d9:59:f3:
         00:08:a1:76:24:42:10:ca:bb:23:23:4a:82:9d:e3:d7:25:ff:
         e4:48:11:75:ac:b3:08:b2:08:c2:cd:58:33:6c:be:0e:e5:f6:
         f2:f5:cb:ac:82:50:d9:6e:a0:b0:22:71:95:bd:3c:a8:c3:5f:
         e0:d8:da:92:8c:36:67:06:3b:24:1a:f8:3d:04:d1:d8:67:af:
         ac:4e:c7:f0:42:61:c2:3f:a7:6a:37:94:72:b6:a8:f4:10:0a:
         ea:f6:91:ba:53:f2:4a:ad:15:14:7c:bf:4e:8b:16:78:2d:f9:
         37:f5:b5:f9:63:52:f5:15:d7:9a:4f:ba:d5:9e:52:25:eb:9e:
         27:23:43:87:31:a9:02:54:c5:d2:c0:7f:01:c6:87:e7:62:19:
         6f:48:ab:d0:10:69:14:43:f3:2f:22:1f:de:6b:89:c3:cf:bc:
         a7:0a:d4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:24:27 2025 by rpki-client