Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135392e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3135392e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          TotV6j2jragXsyRCIz/YSdu6jF8+RZTe2wGsLmwPMU8=
Subject key identifier:   CE:C9:A9:78:3F:C1:9F:79:7D:E0:E5:1C:6D:4C:1D:62:52:12:C3:94
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       69E969825CBD5548100A4E0141C2C0EF1C0E342D
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135392e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 04 Feb 2025 18:38:37 +0000
ROA not before:           Tue 04 Feb 2025 18:33:37 +0000
ROA not after:            Tue 03 Feb 2026 18:38:37 +0000
asID:                     20299
IP address blocks:        200.30.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e9:69:82:5c:bd:55:48:10:0a:4e:01:41:c2:c0:ef:1c:0e:34:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:37 2025 GMT
            Not After : Feb  3 18:38:37 2026 GMT
        Subject: CN=CEC9A9783FC19F797DE0E51C6D4C1D625212C394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:26:fe:0e:ec:70:05:99:d1:70:6a:ba:c5:ab:
                    77:c8:20:4e:2e:51:f7:eb:36:9a:55:2e:0f:18:4d:
                    e8:c9:e5:00:cb:d0:38:e0:6a:75:b0:3e:a2:1d:32:
                    62:69:3c:ad:3b:17:9b:82:7e:23:94:6b:9f:e3:ea:
                    11:1c:72:1c:3d:9f:01:7a:da:f0:3e:d1:0b:e9:61:
                    29:60:77:90:5d:d4:62:9a:95:54:3f:c4:df:e3:b0:
                    32:7d:5e:92:c1:ad:58:82:23:95:cd:5f:0b:0c:62:
                    ae:af:d4:a7:74:dc:2d:34:5d:d6:78:1d:a7:e2:21:
                    d2:2e:f4:99:2e:42:18:8b:96:c9:89:5b:a3:9e:d7:
                    d4:d4:95:70:8d:7b:bf:74:8b:d9:49:c5:ba:05:f9:
                    c8:d6:98:d1:9e:e4:54:ae:fa:a2:12:5e:b9:a5:9f:
                    1f:0d:77:ef:25:35:48:dc:75:2b:f7:4b:14:76:39:
                    c2:36:83:4e:51:9f:fd:b6:e8:5a:2e:36:c1:64:39:
                    3b:f0:06:2e:30:dd:39:61:7d:9c:99:0e:15:81:66:
                    a6:66:a6:b3:b8:19:49:b9:f4:01:88:4d:c6:1b:d4:
                    5c:56:69:cd:46:cb:f7:5c:b6:73:69:12:83:2a:81:
                    a7:4d:cf:c6:37:ae:41:6a:64:71:f6:cf:20:16:88:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C9:A9:78:3F:C1:9F:79:7D:E0:E5:1C:6D:4C:1D:62:52:12:C3:94
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135392e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:35:1d:c8:fd:6e:33:a3:e1:07:8f:9c:15:c4:23:07:9c:b9:
         80:7c:dc:b5:04:7f:3a:db:60:a0:7c:ea:43:9d:53:83:e1:e2:
         ee:d8:67:90:f4:b7:04:a3:97:f7:3d:eb:56:86:87:0e:30:6e:
         ba:53:39:01:d6:f1:cd:71:86:c2:11:d1:92:70:ad:ed:da:57:
         6b:6e:33:32:40:90:cf:5e:fe:78:c0:34:02:2e:18:dc:3c:29:
         43:fa:73:ea:c7:9b:91:57:47:4c:cc:db:13:03:dc:5f:57:f1:
         8f:f9:a0:b5:9b:53:1f:91:d1:a0:9b:b0:2e:5a:4f:ec:ab:d8:
         4e:90:d3:34:ca:ec:49:3f:eb:49:3c:7d:6a:c4:d6:f5:7f:0d:
         d0:65:63:b0:cb:d9:24:92:9c:d6:2c:bb:77:90:4f:b8:6f:8d:
         88:33:1a:a8:59:03:d8:fd:4a:9e:a2:70:8a:69:17:60:3f:20:
         72:c3:45:49:21:af:b9:15:03:79:cc:91:1e:c8:0b:ba:25:b8:
         91:c1:8e:21:fb:e1:59:44:98:de:b1:41:fc:5c:07:9a:23:9d:
         4e:19:e7:e4:1b:24:a7:80:87:49:1e:02:a6:54:41:46:09:66:
         9b:49:47:ef:e8:f0:fb:f3:e2:6e:0c:af:4a:42:9b:35:77:c3:
         d6:cc:4d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:58:19 2025 by rpki-client