Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31382e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e31382e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          HIdxo0aTCUBxLzsY1xqCvYWFU7B33n+g8QMaUTDrUFw=
Subject key identifier:   90:07:6D:62:68:40:DE:76:D1:91:A6:D1:1A:19:B0:A5:EA:89:6F:1B
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       51FCBB0A356BBFC8453016958EAD92238273B9DE
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31382e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 04 Feb 2025 18:29:30 +0000
ROA not before:           Tue 04 Feb 2025 18:24:30 +0000
ROA not after:            Tue 03 Feb 2026 18:29:30 +0000
asID:                     12684
IP address blocks:        200.89.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fc:bb:0a:35:6b:bf:c8:45:30:16:95:8e:ad:92:23:82:73:b9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Feb  4 18:24:30 2025 GMT
            Not After : Feb  3 18:29:30 2026 GMT
        Subject: CN=90076D626840DE76D191A6D11A19B0A5EA896F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4d:1d:71:f7:53:9a:91:19:3a:48:9b:7b:33:
                    b0:72:39:f7:ff:c4:20:52:2e:1c:da:60:1e:9b:08:
                    00:6b:b6:f4:ba:73:1d:3e:d4:09:b6:d4:f1:b5:a1:
                    3a:55:d8:7c:44:56:c4:31:97:62:3a:f0:9b:05:86:
                    2d:b3:32:40:0c:18:f0:66:f7:37:b5:c8:c0:1a:a0:
                    00:0f:d6:4a:6f:91:b7:6d:f8:87:64:b3:82:a8:74:
                    5c:7a:2d:f8:10:11:12:3a:7f:63:eb:ed:fd:50:78:
                    c0:3a:d7:7b:0b:f1:68:44:28:36:3a:6d:6f:ed:75:
                    8d:67:14:5d:af:19:a5:eb:aa:46:1f:61:49:d4:29:
                    85:e6:dd:a9:a1:58:61:dc:f2:60:b6:21:ab:56:44:
                    76:07:24:f3:15:24:5a:71:dc:33:bc:97:ad:77:59:
                    f8:bb:f2:47:c8:16:21:08:42:1f:d4:19:1d:4a:fa:
                    3e:9b:ec:3a:b8:a2:b3:c9:f7:a7:e3:36:92:f5:b9:
                    41:2a:89:7f:5f:1b:0c:9a:c8:de:3d:db:a7:dc:bc:
                    67:ba:b4:95:98:24:d4:b0:3a:05:8b:2e:12:a3:c9:
                    88:c3:6c:b0:47:27:05:57:68:54:65:de:7a:d2:cb:
                    d6:c9:80:18:e0:1a:64:76:28:5e:3b:e7:4f:26:0b:
                    85:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:07:6D:62:68:40:DE:76:D1:91:A6:D1:1A:19:B0:A5:EA:89:6F:1B
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31382e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:ff:47:70:37:fe:b2:74:5d:99:62:63:2d:23:62:6c:f9:3b:
         58:59:2a:83:83:b3:c5:db:ae:40:15:5d:59:aa:86:db:2d:d7:
         28:34:ca:75:ba:07:02:f9:63:60:07:78:1b:e7:f8:2f:e4:a1:
         5d:7c:f1:1a:32:a2:72:d4:86:d6:5e:46:d6:83:b9:c0:37:67:
         66:a8:3a:23:6a:ae:6b:a9:b3:d6:ab:77:bf:04:81:45:39:11:
         0c:14:89:ae:74:82:b5:db:ba:e2:28:0a:e1:c6:42:19:3f:5e:
         29:c1:ed:ed:88:59:cb:1e:66:89:02:f6:d1:a0:fe:5e:b5:23:
         e6:c5:cf:7c:47:09:67:fc:12:bb:44:03:34:61:3e:6d:e3:91:
         38:ab:d2:ca:21:6d:75:71:2f:0a:3a:03:45:3e:24:d5:4f:de:
         81:c2:20:c5:bb:e7:9f:95:f4:16:75:e1:a5:d3:01:2c:4a:63:
         93:66:f7:7d:3d:c8:42:0d:0e:4c:a7:ba:41:53:9f:4c:36:55:
         b5:71:36:1b:80:33:fa:39:13:13:67:54:49:b8:38:b3:37:e2:
         9c:de:2c:22:a2:70:56:0d:11:9b:18:9c:c9:b6:d3:d3:fa:3e:
         9a:31:36:5d:ac:4b:23:40:ea:ba:bd:e4:f9:58:0e:1c:ca:1a:
         f5:2d:80:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:48:20 2025 by rpki-client