Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135322e302f32332d3234203d3e203237373733.roa
File:                     3230302e33302e3135322e302f32332d3234203d3e203237373733.roa (raw, json)
Hash identifier:          YEAKCj4lNclTS/uBgMDpiT5zFJVOjhiuJW08dxOX9m4=
Subject key identifier:   C5:6D:40:A5:08:1F:9B:03:97:F8:7A:02:7C:C9:EE:1B:AA:55:5D:99
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       6D44178936071C19A1004EF56EB4A4AD176C449A
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135322e302f32332d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 18:38:32 +0000
ROA not before:           Tue 04 Feb 2025 18:33:32 +0000
ROA not after:            Tue 03 Feb 2026 18:38:32 +0000
asID:                     27773
IP address blocks:        200.30.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:44:17:89:36:07:1c:19:a1:00:4e:f5:6e:b4:a4:ad:17:6c:44:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:32 2025 GMT
            Not After : Feb  3 18:38:32 2026 GMT
        Subject: CN=C56D40A5081F9B0397F87A027CC9EE1BAA555D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:01:76:48:cb:00:bf:3e:c4:12:2b:7f:0f:
                    99:80:d8:01:a1:26:62:d8:05:3a:5b:45:93:e8:3d:
                    80:6c:23:8c:bd:39:09:b3:c5:54:76:6d:2a:b7:3a:
                    84:c7:81:72:84:7a:43:ef:1c:a2:15:59:48:7c:82:
                    a5:ff:29:6e:c2:04:81:9d:92:c6:bd:50:bd:ad:9e:
                    4d:04:14:66:51:60:d9:e7:dc:6d:d3:be:67:26:13:
                    fb:34:66:7b:f1:5f:7d:65:ca:8a:a1:5c:7c:18:8b:
                    74:23:78:5c:fc:9a:7e:ef:d0:4a:f0:c3:c5:64:49:
                    37:62:f7:ee:06:b9:48:ff:a8:0d:3a:dd:23:91:ad:
                    e3:80:56:16:63:8c:a5:74:f8:03:e4:8d:8b:c0:89:
                    fd:c5:a4:d9:95:f3:65:a5:56:ba:e5:fa:94:db:c1:
                    ed:9e:6d:3d:80:d7:2b:6b:26:cb:59:4c:04:6e:8a:
                    28:d2:4f:5d:65:9c:6d:59:c3:fb:fc:63:ae:93:d9:
                    5d:21:a2:f9:57:2d:4e:b6:f4:86:06:94:85:da:af:
                    0f:60:08:b2:43:86:79:c0:6b:1b:01:b0:29:4f:cd:
                    04:b4:9f:7d:c3:92:85:d9:74:e1:37:8a:a8:25:be:
                    1a:16:ec:60:47:04:f7:f4:60:bf:33:06:0f:48:4e:
                    a5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6D:40:A5:08:1F:9B:03:97:F8:7A:02:7C:C9:EE:1B:AA:55:5D:99
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135322e302f32332d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:ce:d2:b5:59:f1:89:3a:e6:6e:9d:53:38:8e:47:2c:51:3a:
         9a:93:60:ed:f6:b1:de:3d:ae:75:e4:93:ff:b9:31:78:51:55:
         2b:c3:58:6e:30:55:1c:e3:f3:7e:a1:3f:cc:06:0e:38:41:fa:
         3f:78:28:0a:b4:bd:0e:44:09:a9:75:cc:b8:3d:a7:3f:df:aa:
         9e:1d:e9:e9:f3:83:ae:47:f8:b0:80:b1:c2:bc:4c:20:f3:e3:
         c0:99:2f:86:17:6b:b9:72:fa:ae:ab:40:c6:ba:cd:4d:ba:70:
         6d:ba:63:90:36:05:28:e3:07:04:cc:ec:2d:2e:b9:31:82:3d:
         75:f6:c0:3c:68:a7:61:61:30:30:e6:14:d3:a7:4e:60:40:17:
         ed:a2:41:4a:fa:84:8f:b2:a1:9c:35:fd:15:7b:5e:5f:86:19:
         48:35:2f:aa:fa:3b:5e:cd:51:ef:61:bb:64:7d:28:e0:47:22:
         14:48:65:d3:03:53:99:e3:61:0c:ff:02:6a:11:18:b8:4a:04:
         ee:67:9d:f5:8d:a5:ee:1f:e4:2e:db:83:47:cd:f6:b9:12:3b:
         86:17:c5:72:f1:d2:ee:28:55:76:9d:3d:27:c8:dc:37:ae:5e:
         fa:00:5e:44:8d:45:4d:75:07:aa:ab:1b:97:a8:ab:fe:bf:fe:
         76:9d:ca:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:57:02 2025 by rpki-client