Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133382e302f32342d3234203d3e203237373733.roa
File:                     3230302e33302e3133382e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          PBT0HDX2MSinh4qBMtX7imKX8KrCSU+1hv2g2lrTHsE=
Subject key identifier:   2F:02:C1:BC:43:6E:13:66:58:BB:4D:3D:92:4C:A8:8C:96:C8:3A:69
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       2806DED0B3457C2DDD7F0041D8BDAEDCC99E268C
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133382e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 18:38:38 +0000
ROA not before:           Tue 04 Feb 2025 18:33:38 +0000
ROA not after:            Tue 03 Feb 2026 18:38:38 +0000
asID:                     27773
IP address blocks:        200.30.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:06:de:d0:b3:45:7c:2d:dd:7f:00:41:d8:bd:ae:dc:c9:9e:26:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:38 2025 GMT
            Not After : Feb  3 18:38:38 2026 GMT
        Subject: CN=2F02C1BC436E136658BB4D3D924CA88C96C83A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:94:e5:02:d0:29:61:2a:5d:55:fc:80:60:4a:
                    b9:cf:a3:9e:0a:fb:e1:07:14:67:57:01:45:e5:03:
                    65:40:f6:4f:5b:46:00:57:60:28:ea:5a:d3:67:73:
                    30:b7:b2:6e:64:7e:be:91:8b:13:07:04:37:03:04:
                    7e:d1:d1:b1:2b:52:4f:a8:42:4b:13:cc:73:57:e0:
                    a9:ba:22:9d:11:23:a1:40:b2:24:b9:c3:ea:a1:87:
                    fb:fa:64:c8:8a:27:1a:53:1a:60:ab:1c:63:10:07:
                    a5:e5:7d:dd:d4:98:29:59:31:fe:2b:cc:4d:a2:44:
                    bf:60:ff:31:4e:68:1a:6c:b5:36:06:78:e8:60:cb:
                    c7:7a:ff:95:25:28:a6:9b:d6:b0:33:f7:6a:ff:8e:
                    ba:5a:48:2d:cd:fc:ac:5c:32:ca:2e:1f:03:f5:65:
                    89:65:8d:c2:65:f2:01:19:93:87:4a:b2:f7:fe:5a:
                    b8:aa:fc:1d:dc:e6:ab:2d:bd:0e:98:01:1d:41:be:
                    d3:7d:fd:fb:2d:c1:2b:c5:69:29:a3:24:3b:bc:3f:
                    f6:4f:93:28:cd:ab:83:b9:3e:86:91:4e:9b:06:d9:
                    b8:41:c0:d3:5d:80:2f:03:11:5f:e8:88:99:6d:51:
                    70:d4:27:37:3f:b9:3d:e6:b7:e1:f8:e0:ed:06:dd:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:02:C1:BC:43:6E:13:66:58:BB:4D:3D:92:4C:A8:8C:96:C8:3A:69
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133382e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:8d:9d:bf:6e:4b:fc:ea:58:81:bf:b6:12:70:58:02:4d:
         7c:33:70:89:0e:98:6a:25:7e:cd:34:77:82:19:7e:57:6d:ce:
         82:08:9d:eb:53:c3:46:3d:c5:4d:ca:a6:d1:a3:30:d2:c5:99:
         8c:db:94:59:cf:8f:d1:f8:82:2e:21:b9:29:42:35:fc:4f:8f:
         38:bc:69:d9:3b:14:b6:25:ec:40:2b:d5:42:82:ba:ab:03:ba:
         28:17:84:3a:29:25:49:23:05:ee:b3:73:0f:38:58:b8:cf:49:
         1e:52:af:3d:cf:65:34:92:f5:4a:d2:dd:4a:a7:57:67:c3:83:
         21:28:99:e7:52:c1:e2:fc:81:81:22:d0:3d:28:14:69:e3:17:
         32:85:76:ee:c0:40:4a:00:e2:9f:18:03:23:bb:ca:f0:71:a3:
         80:ae:4b:f5:14:2f:c6:e9:4f:0e:c6:e0:ce:5e:b6:ad:57:ca:
         ec:a0:5e:4a:df:85:76:f0:ed:d3:3a:22:f5:dd:f5:f3:df:2e:
         b1:74:4b:af:df:35:fe:b0:22:0a:3e:cf:2f:bc:fb:22:96:48:
         d9:e7:c6:7b:52:c9:20:b6:8a:18:6a:64:17:a1:f4:d6:4e:02:
         62:da:32:40:02:78:3f:a7:b6:64:59:4e:cb:b4:49:8f:27:80:
         05:ff:5b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:56:59 2025 by rpki-client