Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32302e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e32302e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          7R8uSevEgMcAHFkBLLRkS+XPSUi/lPHiikY8fsPMf0c=
Subject key identifier:   D3:B8:C9:24:60:99:69:50:4A:D1:7E:C6:AD:FD:7E:AA:12:59:95:44
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       257C420B8FF42A5ECF46AB23415474C145C7A521
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32302e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 04 Feb 2025 18:29:29 +0000
ROA not before:           Tue 04 Feb 2025 18:24:29 +0000
ROA not after:            Tue 03 Feb 2026 18:29:29 +0000
asID:                     12684
IP address blocks:        200.89.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7c:42:0b:8f:f4:2a:5e:cf:46:ab:23:41:54:74:c1:45:c7:a5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Feb  4 18:24:29 2025 GMT
            Not After : Feb  3 18:29:29 2026 GMT
        Subject: CN=D3B8C924609969504AD17EC6ADFD7EAA12599544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:99:1b:65:e0:a3:28:c7:f0:1d:a2:18:d1:
                    20:f9:04:a0:ff:b4:a5:be:7a:55:a7:ac:f7:1e:78:
                    a0:45:3d:f9:05:0b:aa:ed:aa:e9:42:d5:70:4e:e2:
                    c6:56:cf:95:49:eb:02:7b:0f:97:1a:20:ea:0a:26:
                    c5:a7:17:cc:4d:22:50:4f:3e:4c:c8:79:60:e3:a0:
                    f3:0e:d4:e6:c8:67:e0:10:e1:e7:4f:84:f2:86:62:
                    ac:d3:96:08:94:ee:6b:2c:2a:1b:e9:99:aa:c9:74:
                    44:c1:88:97:e5:08:22:5a:36:c4:fc:28:e3:2b:ef:
                    70:58:e3:09:1d:5b:85:53:af:2f:22:e5:a9:de:ce:
                    eb:50:c5:da:3c:49:5f:c4:ba:63:df:62:b4:35:ee:
                    1a:f3:32:00:5e:2d:f4:72:1a:da:5d:22:1f:32:73:
                    04:14:42:c0:1a:34:77:64:0e:57:ba:90:96:99:ce:
                    96:49:24:47:31:7d:cf:6c:e6:33:77:5d:00:35:4f:
                    b9:13:f9:b3:98:eb:39:5d:4f:5f:71:23:14:57:9c:
                    46:1e:fe:a5:83:ac:8a:79:81:38:03:7d:b2:07:23:
                    03:62:1c:64:b6:39:1e:f1:cd:6b:85:6f:08:b4:73:
                    92:bf:7a:fb:f9:34:4e:dd:13:bb:83:a8:d6:88:21:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B8:C9:24:60:99:69:50:4A:D1:7E:C6:AD:FD:7E:AA:12:59:95:44
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32302e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:53:2e:bf:84:24:36:78:00:b9:63:72:cf:3c:20:ad:8f:50:
         a3:7a:b1:51:81:63:95:d7:3e:f0:a9:00:b1:f0:63:6e:96:66:
         60:09:3a:9f:f1:af:88:09:84:cf:4d:d6:0e:f8:56:98:b0:4f:
         df:8a:e9:67:8c:2d:06:b9:2d:b9:55:1a:b9:0a:83:32:bd:13:
         4c:16:ab:ea:8c:00:40:aa:49:08:0e:91:da:a5:00:4a:e7:da:
         cf:79:f6:25:32:df:cf:66:81:ac:34:7c:fd:a0:1d:5c:f5:0a:
         48:34:97:70:e3:48:f7:52:6f:1e:88:82:7f:85:95:61:bc:61:
         a0:8f:6d:9c:5b:d5:5e:31:6d:20:f7:e5:e3:4b:22:f1:88:9e:
         26:84:e8:93:a4:b8:0b:8b:3d:dd:a0:92:dc:d6:19:60:da:7e:
         3a:bb:56:64:76:aa:aa:ca:07:ff:bc:8f:cf:1e:d4:f1:4c:3b:
         21:5a:be:60:9b:6a:2b:b4:a8:10:f9:62:b4:e6:58:43:33:d2:
         e4:2c:bc:ea:6d:fd:2d:fe:05:ad:b6:dc:6d:7f:9e:52:18:82:
         24:de:a5:70:cd:c7:7c:72:bd:de:3b:b4:90:96:94:4a:37:a7:
         fb:2f:f3:8f:f0:07:12:9c:ff:9f:e9:cf:c8:fd:de:34:ea:87:
         12:61:d3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:48:14 2025 by rpki-client