Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3132382e302f32342d3234203d3e203237373432.roa
File:                     3230302e33302e3132382e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          i4XVLQQYopONJIU92PXZdMPjk4FhwkjX23Pbdyiw8/w=
Subject key identifier:   85:9B:58:5C:92:08:AF:92:A3:E7:B2:A3:28:41:93:6C:B1:E5:81:1A
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       35EE0D81A2BCDE8A1FCFCA1B2022C3F00F2DA292
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3132382e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 04 Feb 2025 18:38:41 +0000
ROA not before:           Tue 04 Feb 2025 18:33:41 +0000
ROA not after:            Tue 03 Feb 2026 18:38:41 +0000
asID:                     27742
IP address blocks:        200.30.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ee:0d:81:a2:bc:de:8a:1f:cf:ca:1b:20:22:c3:f0:0f:2d:a2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:41 2025 GMT
            Not After : Feb  3 18:38:41 2026 GMT
        Subject: CN=859B585C9208AF92A3E7B2A32841936CB1E5811A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:2d:b9:25:cc:0d:2a:1f:66:23:24:67:17:
                    2b:0b:f1:b0:7b:59:52:2b:4a:d9:42:f8:98:ae:69:
                    d7:be:0c:8c:db:ee:4e:54:96:04:69:2a:4b:b2:73:
                    66:f6:a1:c7:fa:63:61:61:4c:46:db:97:fa:21:d2:
                    04:ad:11:9e:44:4f:ef:df:ac:fe:80:24:32:d7:b6:
                    e3:c5:51:ed:c8:16:84:e6:76:2e:19:67:47:ad:e2:
                    80:7f:16:8d:f0:06:ab:86:08:e1:09:0c:a5:76:ed:
                    2d:67:a7:47:4b:e7:c6:79:ad:17:72:74:78:bd:fc:
                    97:00:36:67:44:f9:34:66:7d:45:06:59:6f:e2:88:
                    80:49:1d:3d:e7:c6:bf:f9:80:07:89:0a:b9:ac:76:
                    40:4a:ab:e0:ec:70:4f:a7:6e:d6:9a:d7:59:f4:6b:
                    c6:59:eb:fc:00:d1:4e:b9:26:c8:63:72:43:fe:99:
                    75:37:ec:a4:eb:47:3f:b9:db:6a:38:ed:5a:ee:25:
                    a6:6b:39:15:94:3b:c5:23:90:af:43:50:29:53:2c:
                    4c:09:b0:1f:f9:df:22:4f:b8:da:50:5e:ea:1e:0a:
                    cc:56:14:b6:cf:f9:5c:5c:2c:48:f4:ff:3c:0d:bc:
                    80:fc:b9:c3:04:a5:06:73:f6:c1:b4:79:12:46:d9:
                    75:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9B:58:5C:92:08:AF:92:A3:E7:B2:A3:28:41:93:6C:B1:E5:81:1A
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3132382e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:93:a1:69:f8:ad:ce:b5:c5:ee:fd:57:99:5c:05:af:1b:55:
         94:3a:9b:ff:c9:8f:2e:99:7d:17:3b:73:4e:cb:ad:ff:d2:95:
         67:12:2f:41:b0:e6:bf:da:b8:d4:50:22:1c:49:91:7b:49:a5:
         8e:f6:ed:c9:c7:38:f7:0d:93:b1:70:bf:33:0a:1c:a7:47:7c:
         24:ba:03:0f:f1:09:b7:de:9f:bb:9b:f8:26:13:cb:47:57:d3:
         66:6c:ec:f6:ca:35:2f:d3:c6:f9:b2:40:e4:5c:92:29:08:d9:
         c7:25:8e:10:57:0f:ff:bf:27:4d:da:22:25:47:0d:79:f8:d3:
         30:1b:07:05:d7:a2:d0:b1:84:47:ec:16:79:6c:ea:38:26:93:
         8d:54:ce:31:95:b9:76:10:86:18:44:0b:2e:1c:bb:e9:bf:86:
         0b:1a:47:f3:a6:ac:c0:01:f0:c7:20:73:a8:cd:2b:17:b5:34:
         21:c4:5c:80:5f:da:f2:4f:39:8b:e5:05:39:04:9f:98:e6:54:
         94:4a:12:72:87:70:78:c4:cf:4c:31:f4:06:41:24:b5:0e:f8:
         27:ef:e1:a1:01:35:c9:96:f4:92:2b:23:fa:d6:76:cd:b2:b0:
         9f:54:92:b8:e7:43:51:70:55:46:22:52:a8:5b:f8:30:ec:f0:
         79:d2:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:32 2025 by rpki-client