Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31392e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e31392e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          yZso+qbF7aBCTZgsBdbRwzfF20eW8LpWFCJ5KDuzK+M=
Subject key identifier:   0D:C2:FF:CD:60:F5:17:B8:B2:E8:12:4A:46:47:CA:37:18:69:93:42
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       733D480BB4F5910721E1C81DF31A1773E8B2DA93
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31392e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 04 Feb 2025 18:29:27 +0000
ROA not before:           Tue 04 Feb 2025 18:24:27 +0000
ROA not after:            Tue 03 Feb 2026 18:29:27 +0000
asID:                     12684
IP address blocks:        200.89.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3d:48:0b:b4:f5:91:07:21:e1:c8:1d:f3:1a:17:73:e8:b2:da:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Feb  4 18:24:27 2025 GMT
            Not After : Feb  3 18:29:27 2026 GMT
        Subject: CN=0DC2FFCD60F517B8B2E8124A4647CA3718699342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:4a:d9:7b:30:2a:86:34:8e:c2:e5:11:99:
                    17:77:16:0d:5e:52:ca:cd:eb:a3:ec:94:b0:aa:19:
                    6f:38:9e:ad:ef:22:94:4d:2b:a0:79:4c:75:fd:2b:
                    5f:ae:6b:5d:88:5a:49:cc:cf:34:b5:80:6c:bf:8e:
                    b5:57:44:02:26:15:00:70:91:0b:b5:33:7e:34:78:
                    e0:7c:fa:3b:3f:52:ac:bb:18:b5:26:9f:b4:05:a6:
                    f9:07:21:af:74:d8:53:6b:d2:c3:05:1e:13:9d:67:
                    5d:04:26:08:80:64:9e:d3:ef:65:c2:e6:5d:68:cf:
                    5d:e9:49:0e:6d:9f:33:da:af:c0:3a:2e:e1:10:8c:
                    96:0f:0c:1f:04:31:0e:f8:0c:61:1c:f3:66:c7:82:
                    ae:36:f8:20:9b:12:0f:9b:d6:ca:6e:67:66:35:6b:
                    11:99:ee:16:44:07:63:c1:0c:b1:21:ff:b5:e7:03:
                    d7:cb:4a:cc:c4:e4:c8:a0:d2:98:74:bd:81:7b:c1:
                    69:12:80:c2:a7:cf:c1:82:4d:a3:0f:a9:8f:e3:5f:
                    78:f4:e2:f9:4d:f6:49:8d:ca:fd:06:d5:32:73:58:
                    78:51:dc:50:6f:25:4b:74:04:20:69:ec:88:3b:de:
                    c3:aa:58:f3:79:f8:44:7d:d4:ae:26:45:04:9a:83:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C2:FF:CD:60:F5:17:B8:B2:E8:12:4A:46:47:CA:37:18:69:93:42
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e31392e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:8c:6d:d4:88:a2:ab:9f:9b:b0:a8:71:e3:8e:be:43:ab:27:
         57:e3:0a:1a:e5:db:1b:6c:f5:98:94:57:35:c7:11:99:24:15:
         72:87:c3:20:88:49:17:6c:29:4d:fd:63:06:87:b6:b2:41:25:
         a0:44:2e:5d:81:db:18:ca:f3:00:1a:c4:e8:4b:fd:96:ea:0b:
         1d:a7:43:75:81:30:b5:e5:19:01:bd:39:2c:f5:22:a5:5c:41:
         f9:44:4b:e6:60:38:09:7f:34:27:d8:73:f8:c5:08:30:ac:89:
         1e:56:78:62:e0:9f:a1:f5:a3:fc:15:68:7d:8c:59:7f:c9:ec:
         33:c2:02:8d:43:8d:62:be:92:be:72:fd:66:3a:b3:bc:b6:a2:
         13:99:28:4b:1d:99:ea:be:20:1e:7b:f3:02:0b:2e:54:90:8b:
         65:42:3e:88:18:48:03:76:a0:fa:63:90:0d:a2:17:1e:aa:bd:
         ea:5f:a1:42:86:7f:c7:af:85:d4:fd:33:6c:f0:13:2c:fd:35:
         24:d9:56:74:09:e5:4b:bc:b2:86:bc:00:57:75:66:c4:cf:db:
         58:8d:32:6e:70:01:20:5e:c6:1e:2a:47:0d:77:68:dc:ed:3e:
         d3:ed:85:a7:d8:59:12:cf:05:39:10:56:fa:34:96:12:c5:2b:
         f6:be:7f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:48:15 2025 by rpki-client