Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32322e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e32322e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          WQJifPYzLSMnStY+x9HpvN7PdaLJH/GMBFXojyY9Mjg=
Subject key identifier:   60:4B:75:2B:8C:45:04:90:36:77:0C:E9:16:D9:C0:46:3E:E5:EF:A4
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       3B0650720CF0F0ADF44085F5F2BC0EEFB9522A7F
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32322e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 04 Feb 2025 18:29:29 +0000
ROA not before:           Tue 04 Feb 2025 18:24:29 +0000
ROA not after:            Tue 03 Feb 2026 18:29:29 +0000
asID:                     12684
IP address blocks:        200.89.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:06:50:72:0c:f0:f0:ad:f4:40:85:f5:f2:bc:0e:ef:b9:52:2a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Feb  4 18:24:29 2025 GMT
            Not After : Feb  3 18:29:29 2026 GMT
        Subject: CN=604B752B8C45049036770CE916D9C0463EE5EFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:8f:b8:f7:58:c7:34:4a:9a:41:2f:23:b2:
                    0b:69:43:8f:13:7d:32:ab:38:59:5f:6b:7b:d0:ac:
                    cb:2f:ab:08:2b:8f:d5:3b:bf:71:aa:88:ca:5a:af:
                    7a:42:4d:cd:bb:95:2d:d3:f6:cc:ca:88:9b:92:40:
                    1c:92:77:51:52:2e:a2:b7:d6:9e:a8:ff:98:00:73:
                    0c:76:2d:0d:ff:53:2c:ac:de:25:3c:0a:05:ac:41:
                    86:7f:63:a3:41:ae:95:c5:1a:f7:f9:f3:2f:13:99:
                    c7:2b:44:b5:d9:37:d1:ea:90:82:a4:67:a4:83:6a:
                    24:d7:8d:2c:e5:57:5b:9f:5c:66:4a:65:ef:f4:b4:
                    a6:0b:16:95:b4:b6:59:3e:e7:7d:1c:62:a3:a4:24:
                    f1:2b:20:ef:0d:35:f0:17:b5:0a:b3:c0:a5:e9:4d:
                    27:b6:6f:dc:b2:ac:be:3f:0c:e0:ee:2c:94:ce:22:
                    01:3f:fd:3a:bb:e8:ff:b9:96:91:ac:38:2f:cc:0f:
                    42:c3:1b:d7:ba:a8:b2:c5:4e:ea:9c:35:be:f3:a4:
                    c2:35:bd:c5:8f:0a:cd:8c:ec:28:c3:4a:a0:fc:3a:
                    af:54:11:e7:f2:f4:be:7e:f5:2f:bd:b9:8e:c7:8b:
                    94:81:8e:bb:ba:4e:f2:df:da:fe:68:28:74:9c:0a:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4B:75:2B:8C:45:04:90:36:77:0C:E9:16:D9:C0:46:3E:E5:EF:A4
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32322e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b8:13:17:c5:78:20:a6:05:14:52:9b:f0:8b:b9:c5:ce:46:
         91:8e:a0:d2:c8:e7:9d:6c:91:7f:18:b1:55:5d:10:ed:cc:5e:
         83:1d:65:1d:62:95:6b:97:8f:51:de:b9:2d:e0:a2:9a:e2:7f:
         d0:04:e7:b1:2f:8f:ca:77:af:6c:07:3b:f5:32:6b:e2:04:9f:
         65:24:c9:4d:c4:33:62:9b:b4:86:bc:17:4d:fc:8d:89:af:59:
         67:66:26:26:1f:15:18:82:85:8e:73:7b:79:65:3b:69:0b:05:
         73:75:ed:73:ee:fc:82:7a:8e:bf:17:89:7f:92:17:2f:d9:c9:
         4b:66:0f:03:fb:6d:55:84:16:6d:f1:40:ec:43:5b:f9:d9:9c:
         51:10:0f:dd:3e:69:74:fb:69:9a:53:02:63:d0:be:62:83:15:
         ad:4b:49:27:93:c0:a2:0d:1c:db:67:74:83:a2:80:29:48:06:
         59:ca:ec:4d:ff:6d:a7:72:83:23:af:5b:9e:c9:67:a6:4f:0e:
         12:01:f0:6b:ec:36:6b:a9:37:d4:f4:fc:04:a3:f0:64:86:f4:
         2c:fe:fd:06:d0:86:51:73:82:0b:4e:24:4c:6a:5a:16:fc:a5:
         90:b7:2d:f2:ad:44:f8:74:6b:a3:e6:54:a9:1b:d9:c4:64:e3:
         f6:ea:b3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:48:19 2025 by rpki-client