Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31372e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e31372e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          TpVYFMKNig3hopnB6cWzEdbgJ9o8bEvdMC7Wh0m2hpk=
Subject key identifier:   71:DC:3C:5D:D3:1C:7C:39:48:A4:71:C0:1D:D7:4A:26:C2:38:8C:7E
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       686B3AF90CE0BF07BB087A570795D368EEA9276E
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31372e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 04 Feb 2025 18:29:28 +0000
ROA not before:           Tue 04 Feb 2025 18:24:28 +0000
ROA not after:            Tue 03 Feb 2026 18:29:28 +0000
asID:                     12684
IP address blocks:        200.89.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6b:3a:f9:0c:e0:bf:07:bb:08:7a:57:07:95:d3:68:ee:a9:27:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Feb  4 18:24:28 2025 GMT
            Not After : Feb  3 18:29:28 2026 GMT
        Subject: CN=71DC3C5DD31C7C3948A471C01DD74A26C2388C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:61:f8:85:9c:4c:77:a9:a7:7c:ef:32:af:
                    e9:17:07:09:2c:7f:25:eb:76:21:a4:05:e2:49:06:
                    4b:d2:44:68:18:69:d1:08:75:63:03:74:7c:5d:de:
                    59:22:0e:00:1e:b2:bc:11:eb:93:26:a5:8d:ec:0f:
                    ee:be:26:e9:87:49:a4:94:79:31:cb:fa:ea:fc:71:
                    10:70:ea:96:dd:fc:7e:c0:69:b4:b3:ec:f3:de:f9:
                    2b:08:3f:5c:28:df:ee:65:30:25:b1:44:10:2e:35:
                    60:89:a2:94:8e:c8:f4:06:41:75:00:e6:3b:70:d0:
                    2d:c8:69:8c:68:dc:4b:0c:f8:dc:47:f8:a4:d8:51:
                    0a:77:84:fd:a8:20:e0:f1:8b:ae:d8:17:d4:02:dd:
                    0a:75:1a:25:55:a6:00:c9:df:dc:ee:8e:1e:34:65:
                    dc:7b:7c:a8:f5:51:29:e2:8a:c6:6a:c8:07:93:a3:
                    46:f3:85:ff:e9:91:11:3e:9b:c0:32:a1:f3:20:19:
                    1a:66:28:5e:ac:72:ca:f0:02:83:0d:cd:56:d4:a7:
                    84:56:ea:eb:95:10:47:55:9b:69:cc:86:e2:2c:1d:
                    64:e9:fd:9d:f6:2e:86:19:fc:40:8e:64:c8:e2:e4:
                    c7:a7:4a:41:cc:92:e4:b1:0b:ee:b1:d5:ed:fe:bf:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DC:3C:5D:D3:1C:7C:39:48:A4:71:C0:1D:D7:4A:26:C2:38:8C:7E
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31372e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:53:b7:73:d5:b1:92:5f:fb:72:f2:55:5c:46:bb:f2:0e:8f:
         c7:f4:f3:4b:5f:c0:8f:9e:f5:e4:b1:80:e2:bc:01:92:e1:aa:
         ab:b6:52:06:cb:78:8e:b9:9e:79:80:72:97:a3:62:a1:3c:ba:
         03:bc:dc:d8:47:db:54:cc:2c:93:b7:38:7b:9a:97:6c:1f:99:
         ee:fc:e0:d3:2f:45:60:35:d8:a9:65:41:b1:d7:0f:7b:f8:a3:
         91:fb:1a:57:0f:ef:ed:b4:ac:82:dc:02:8b:ae:be:57:07:7c:
         d0:66:6f:ce:15:a8:ee:91:da:8f:1c:40:c1:7f:ad:b1:5a:e9:
         b8:5d:4b:7b:20:d0:a5:1d:1e:a6:5e:03:a7:15:c7:54:ec:d8:
         e3:df:75:14:82:39:c3:0a:2f:b9:4f:5e:2c:e0:35:18:b9:bb:
         88:56:1c:04:ad:4a:21:f8:f1:84:b0:25:69:b0:62:6d:e0:6c:
         ea:2c:f8:4a:02:8b:ea:cc:87:56:d9:45:34:48:04:61:b4:ea:
         c7:82:02:79:e0:bd:48:dc:47:9e:0f:9a:17:2a:30:ce:50:5d:
         26:c6:fe:2b:81:01:f8:e6:c6:81:3a:83:b8:55:99:38:21:08:
         37:a4:f3:f2:ea:95:4a:f9:a6:29:b7:7f:d8:9f:79:71:2d:bb:
         ad:6f:2c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:48:23 2025 by rpki-client