Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51853C07C8A97E9D90BF5EF192E35731C7F397322085DDED0DA373BDCA002BFB/0/3230302e37342e3139322e302f31392d3234203d3e203231393830.roa
File:                     3230302e37342e3139322e302f31392d3234203d3e203231393830.roa (raw, json)
Hash identifier:          Wg8WncLb3F/4eKLhCd717UagghEUR4uU5CQrXOzw+X8=
Subject key identifier:   9D:4D:8D:C7:A9:F2:2B:62:C7:2F:5A:91:51:BB:B4:F6:06:F0:FA:DD
Certificate issuer:       /CN=0A2389622959E128FECE7B305A77F240C49F8116
Certificate serial:       7C390AB00F9F2E0410426CA63915AF34F678E4D6
Authority key identifier: 0A:23:89:62:29:59:E1:28:FE:CE:7B:30:5A:77:F2:40:C4:9F:81:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2389622959E128FECE7B305A77F240C49F8116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51853C07C8A97E9D90BF5EF192E35731C7F397322085DDED0DA373BDCA002BFB/0/3230302e37342e3139322e302f31392d3234203d3e203231393830.roa
Signing time:             Tue 04 Feb 2025 18:29:00 +0000
ROA not before:           Tue 04 Feb 2025 18:24:00 +0000
ROA not after:            Tue 03 Feb 2026 18:29:00 +0000
asID:                     21980
IP address blocks:        200.74.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51853C07C8A97E9D90BF5EF192E35731C7F397322085DDED0DA373BDCA002BFB/0/0A2389622959E128FECE7B305A77F240C49F8116.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51853C07C8A97E9D90BF5EF192E35731C7F397322085DDED0DA373BDCA002BFB/0/0A2389622959E128FECE7B305A77F240C49F8116.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2389622959E128FECE7B305A77F240C49F8116.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:39:0a:b0:0f:9f:2e:04:10:42:6c:a6:39:15:af:34:f6:78:e4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2389622959E128FECE7B305A77F240C49F8116
        Validity
            Not Before: Feb  4 18:24:00 2025 GMT
            Not After : Feb  3 18:29:00 2026 GMT
        Subject: CN=9D4D8DC7A9F22B62C72F5A9151BBB4F606F0FADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f3:5f:ad:86:23:90:4b:6a:77:54:62:45:77:
                    fa:ad:6f:23:5a:d0:8e:f5:5f:7c:9b:87:4d:d2:fe:
                    3c:12:50:9e:ff:03:3b:a5:ee:ec:b8:e0:90:50:d3:
                    3e:ae:13:e4:65:cd:5b:f4:7f:7e:bd:16:ab:0d:ef:
                    04:8b:2b:16:30:8a:a0:17:20:df:91:c6:1a:d6:62:
                    c9:2c:c7:3d:cc:88:6b:44:92:88:e0:b8:56:58:15:
                    a0:f7:c2:54:30:11:fe:b0:de:4e:48:ed:3c:8d:05:
                    44:06:d9:ee:80:3b:d9:78:82:9f:6f:86:a3:ff:dd:
                    a9:27:0f:b5:0f:dd:8f:41:58:a6:85:39:7c:af:00:
                    4d:f2:90:3f:d9:04:b9:69:14:1c:ae:25:e7:9f:f9:
                    e3:98:17:85:dd:f2:fe:40:6b:b0:5c:cc:33:4b:c7:
                    11:f7:ff:ec:b2:6a:a0:4b:19:c1:80:98:30:04:3a:
                    b0:aa:64:9c:d0:fd:fd:a1:4f:21:df:c4:21:35:27:
                    aa:c4:86:ec:cb:01:34:8d:77:ce:78:f9:ad:6d:90:
                    8a:06:f4:2e:3b:81:ac:38:2c:9a:f9:33:f5:6a:06:
                    2c:87:32:51:1b:1f:66:49:fa:d3:30:af:40:d8:4c:
                    38:c5:73:d1:49:12:57:ed:cf:a1:81:13:5a:23:1a:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4D:8D:C7:A9:F2:2B:62:C7:2F:5A:91:51:BB:B4:F6:06:F0:FA:DD
            X509v3 Authority Key Identifier:
                keyid:0A:23:89:62:29:59:E1:28:FE:CE:7B:30:5A:77:F2:40:C4:9F:81:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51853C07C8A97E9D90BF5EF192E35731C7F397322085DDED0DA373BDCA002BFB/0/0A2389622959E128FECE7B305A77F240C49F8116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2389622959E128FECE7B305A77F240C49F8116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51853C07C8A97E9D90BF5EF192E35731C7F397322085DDED0DA373BDCA002BFB/0/3230302e37342e3139322e302f31392d3234203d3e203231393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bc:00:c3:72:d8:eb:f7:4f:be:11:e0:3f:13:fb:24:87:c4:86:
         a9:c3:31:3c:33:72:a0:81:7d:e1:ba:38:3a:5e:8b:5b:86:86:
         dd:3a:a6:15:78:87:d1:2e:6c:63:6e:06:11:a1:e1:a8:3f:d4:
         ff:d9:50:32:33:8b:15:84:06:ac:6b:f6:81:61:02:81:4d:63:
         6a:c1:23:b4:d1:09:2a:10:c6:50:3c:22:54:1f:d6:42:83:02:
         e1:29:25:92:3f:a0:ca:99:f1:7e:00:10:44:51:39:2d:19:ff:
         26:90:4c:84:13:f7:6b:4a:ce:6e:22:d9:f4:46:6c:ac:49:9c:
         7f:c0:73:4d:69:fc:22:e9:d5:c7:73:85:30:38:0d:ab:31:be:
         e6:14:3d:1e:8c:ec:6e:05:07:cb:b9:23:12:da:26:f3:03:e4:
         c0:9e:c9:33:72:55:bf:6c:dc:84:c0:7a:90:54:42:60:4f:3a:
         38:61:d5:7e:98:9d:61:ca:08:01:3f:d1:89:0d:7f:cc:8b:02:
         86:a7:79:3f:7b:33:2a:e0:c6:70:53:5d:f6:b8:ff:97:a6:9d:
         ed:7a:8a:ca:bd:53:7c:95:84:70:f1:88:2d:9d:a1:13:01:6d:
         a3:40:00:f0:31:ac:c9:e6:52:c0:d5:66:03:4d:e5:8e:91:69:
         f9:7a:b4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:39 2025 by rpki-client