Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32342e302f32342d3234203d3e203132363834.roa
File:                     3230302e38392e32342e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          P/VXC5QglMlDhiCxoTUMaLQ9QnwPmSUVKDx0uxrrbic=
Subject key identifier:   49:18:08:1E:06:C8:0F:75:BA:9C:25:AC:0A:EA:08:A7:F5:5A:78:3E
Certificate issuer:       /CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
Certificate serial:       4B3B916E7E0BBC3133E26AB850166BB7853F5E1B
Authority key identifier: CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32342e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 04 Feb 2025 18:29:30 +0000
ROA not before:           Tue 04 Feb 2025 18:24:30 +0000
ROA not after:            Tue 03 Feb 2026 18:29:30 +0000
asID:                     12684
IP address blocks:        200.89.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3b:91:6e:7e:0b:bc:31:33:e2:6a:b8:50:16:6b:b7:85:3f:5e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF30813FA8F0F3E08E452C964FD82F7CA748290A
        Validity
            Not Before: Feb  4 18:24:30 2025 GMT
            Not After : Feb  3 18:29:30 2026 GMT
        Subject: CN=4918081E06C80F75BA9C25AC0AEA08A7F55A783E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:df:e2:ba:a2:8f:1b:6f:34:c6:2c:c2:7f:7d:
                    42:e1:de:e0:7d:15:59:30:10:45:b3:f2:b3:55:44:
                    b3:dd:48:1f:f2:3f:99:23:d9:f2:56:37:22:a2:c6:
                    1a:d7:35:b5:51:c8:a8:ca:50:71:79:80:04:ef:43:
                    c7:f3:e9:a8:54:89:b4:f9:43:a4:47:b7:6b:64:09:
                    fb:8a:e3:ec:57:3b:df:db:d4:68:20:b2:c6:9e:ba:
                    51:16:18:ee:7a:d6:09:74:8d:26:1e:43:6e:71:97:
                    bc:ac:58:e6:24:54:75:33:bf:e1:6a:88:f7:27:81:
                    59:4c:02:3e:7a:04:67:7e:8f:f9:5e:0e:ca:c7:4e:
                    a6:f1:80:26:c0:26:26:20:db:04:2e:93:c6:90:4c:
                    c5:ce:32:fb:b1:16:04:c9:b6:a4:5d:3a:19:4b:70:
                    05:54:a6:77:fd:9e:df:79:70:1f:9f:da:64:c1:15:
                    91:a9:46:48:ec:ec:4d:bb:0c:b4:7e:2b:7c:cf:5f:
                    7a:90:26:75:50:b7:32:f0:27:9d:32:01:89:8b:08:
                    c6:74:d5:34:cc:80:e3:0c:16:a6:d4:aa:1a:f1:4d:
                    95:09:df:9c:fe:18:e6:e0:11:9e:cd:e7:63:ff:b0:
                    6a:ad:ff:9a:06:14:9b:83:9e:22:1e:72:06:96:13:
                    c6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:18:08:1E:06:C8:0F:75:BA:9C:25:AC:0A:EA:08:A7:F5:5A:78:3E
            X509v3 Authority Key Identifier:
                keyid:CF:30:81:3F:A8:F0:F3:E0:8E:45:2C:96:4F:D8:2F:7C:A7:48:29:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF30813FA8F0F3E08E452C964FD82F7CA748290A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783F6C703079210FC9CE96CA7DC0C9985F528961BE92F13181792495747D9918/0/3230302e38392e32342e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:99:8d:d2:c2:98:ba:b1:c4:5d:b7:d0:e0:94:d5:97:4b:f2:
         c0:4c:ba:04:8d:1c:1b:3d:09:52:1b:21:fa:19:49:dd:b1:92:
         8b:49:5d:33:a3:df:51:cd:72:7a:2c:77:89:e0:e1:de:1c:03:
         f2:f7:39:40:50:4c:23:ff:65:83:74:93:b0:e4:c0:46:1d:3c:
         c8:4c:5c:f1:f0:d1:25:11:e2:fd:6b:96:1b:2a:15:4f:e7:3d:
         8c:b2:db:ad:e5:4c:01:d2:f8:df:2e:73:ac:3d:f3:13:59:a1:
         62:6e:75:38:8c:d0:e0:47:de:20:af:06:41:32:bd:7a:af:35:
         ed:a6:47:32:29:37:64:a3:a5:59:74:19:5c:d2:f2:c9:c6:01:
         59:a0:ab:0c:2b:0d:5e:9d:2e:75:5e:47:6b:d8:1e:96:9b:7d:
         08:00:8f:41:76:58:0d:eb:f8:fc:77:65:04:46:ef:b8:ad:75:
         53:91:00:a9:c8:4d:1f:3e:a9:81:83:4b:2c:30:17:b2:4f:32:
         e3:12:d1:61:43:bd:46:54:0c:c3:26:25:76:4b:7f:de:ac:50:
         39:4b:fd:3e:c4:eb:2c:16:b7:8e:a4:f0:c8:02:2e:3e:a2:01:
         53:ad:c5:bb:fc:13:50:77:fa:2f:ca:38:88:1b:12:c5:49:e3:
         be:02:cf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:48:16 2025 by rpki-client