Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137362e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3137362e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          tOHQnNTAs+kimpUTwucUdDX8vAsDhSQe2akWiRHNzPA=
Subject key identifier:   73:74:CF:2D:0B:F4:F6:0F:B7:20:42:EA:35:7A:E6:22:4E:AF:66:35
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       656129676AA09C801F400CCD42FB30054817DC0F
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137362e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 04 Feb 2025 18:38:39 +0000
ROA not before:           Tue 04 Feb 2025 18:33:39 +0000
ROA not after:            Tue 03 Feb 2026 18:38:39 +0000
asID:                     20299
IP address blocks:        200.30.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:61:29:67:6a:a0:9c:80:1f:40:0c:cd:42:fb:30:05:48:17:dc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:39 2025 GMT
            Not After : Feb  3 18:38:39 2026 GMT
        Subject: CN=7374CF2D0BF4F60FB72042EA357AE6224EAF6635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:28:08:40:07:e9:f1:61:e9:83:93:d8:16:03:
                    c4:b9:96:96:15:bc:bf:1c:1c:2a:61:c2:ab:e7:ea:
                    cf:1c:af:87:6f:e7:3b:09:9d:86:11:8a:95:7b:40:
                    69:cf:ca:52:3e:2a:1a:df:81:98:45:87:f7:45:15:
                    0a:62:63:c0:80:61:31:ac:f6:6f:c4:a5:51:97:09:
                    01:59:71:71:bc:cf:03:3b:b5:0b:39:c3:dd:7d:9a:
                    6a:bf:11:7d:af:ae:69:4a:73:91:6f:5d:80:c0:fe:
                    04:e3:9f:23:8d:88:4c:90:28:ba:51:e4:4f:25:9d:
                    db:ab:dc:39:a0:d5:bb:9c:7e:e4:53:82:1e:9f:23:
                    36:44:49:99:ad:36:d3:31:15:60:85:ba:78:8a:e4:
                    2a:57:2f:69:d8:17:70:49:df:52:b7:91:02:c8:75:
                    45:1c:d8:a7:0f:67:97:b5:5e:66:db:1d:d2:9d:bc:
                    16:aa:cc:73:14:40:d3:d6:5d:24:6d:95:54:b0:e3:
                    b2:53:3a:1a:c1:e1:80:36:6e:39:45:b0:5e:0c:cc:
                    91:dd:a4:53:a3:1f:87:e0:e4:e0:0a:52:2d:2b:ca:
                    b4:52:96:4d:3f:f3:1a:c9:49:79:98:e9:e7:36:83:
                    94:29:58:90:78:2e:5c:2f:25:09:7f:1e:21:23:d4:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:74:CF:2D:0B:F4:F6:0F:B7:20:42:EA:35:7A:E6:22:4E:AF:66:35
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137362e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:27:bf:c4:f4:28:4f:35:ce:56:29:1a:de:e7:03:91:73:34:
         aa:8c:b0:d9:1d:2f:bb:71:03:96:c4:5a:cd:38:c5:57:1b:91:
         2b:01:8a:1f:5c:9f:fe:c6:e7:a8:7d:13:59:49:a2:97:15:ea:
         e6:87:4d:57:f7:77:4c:22:cb:f8:58:62:83:0b:74:fe:03:d1:
         61:6c:5f:e0:e6:28:b5:cf:e2:14:cf:2e:e7:f6:67:e7:81:f4:
         e7:ad:cd:2b:46:76:e5:75:7e:10:c5:66:30:aa:f6:94:45:dc:
         8b:95:da:8d:b2:fc:10:95:dd:4e:97:6a:54:03:9d:77:44:a2:
         64:d5:e5:02:2a:a6:25:3a:e7:7f:d9:71:64:77:2c:07:2b:31:
         44:99:1f:6a:92:40:d6:a7:d2:df:ca:88:10:94:09:9e:14:e7:
         f9:da:ba:3b:bd:f3:69:08:ba:8c:2b:cb:7b:6b:8e:d3:4f:c6:
         f4:22:e0:6b:dd:8b:cd:f9:ed:7f:e5:4c:9d:fc:c7:32:05:a8:
         02:dc:d7:95:62:db:a5:55:a0:11:6a:ce:e7:34:fd:c3:f7:76:
         07:73:c2:a5:0e:1c:fa:82:d5:32:08:03:9e:b1:6f:d1:31:3d:
         4b:d3:6b:b7:2c:f3:bc:32:57:14:60:92:cf:73:d4:82:e5:a0:
         f3:78:f3:6e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZWEpZ2qgnIAfQAzNQvswBUgX3A8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5MDg4OEQ5RDBDMDU2NTg0NjQyNzRGNjI2RDE0NjJB
QUE3MDM5OTAeFw0yNTAyMDQxODMzMzlaFw0yNjAyMDMxODM4MzlaMDMxMTAvBgNV
BAMTKDczNzRDRjJEMEJGNEY2MEZCNzIwNDJFQTM1N0FFNjIyNEVBRjY2MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUKAhAB+nxYemDk9gWA8S5lpYV
vL8cHCphwqvn6s8cr4dv5zsJnYYRipV7QGnPylI+KhrfgZhFh/dFFQpiY8CAYTGs
9m/EpVGXCQFZcXG8zwM7tQs5w919mmq/EX2vrmlKc5FvXYDA/gTjnyONiEyQKLpR
5E8lndur3Dmg1bucfuRTgh6fIzZESZmtNtMxFWCFuniK5CpXL2nYF3BJ31K3kQLI
dUUc2KcPZ5e1XmbbHdKdvBaqzHMUQNPWXSRtlVSw47JTOhrB4YA2bjlFsF4MzJHd
pFOjH4fg5OAKUi0ryrRSlk0/8xrJSXmY6ec2g5QpWJB4LlwvJQl/HiEj1CZrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUc3TPLQv09g+3IELqNXrmIk6vZjUwHwYDVR0j
BBgwFoAU+5CIjZ0MBWWEZCdPYm0UYqqnA5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTBDNTIzN0VBQTFFMzc4RTA1RjMzRjRCQzdDNENDOUI2
NjQzQUI0QjM0ODkxRTM4MkE4ODI3NzlGREY4MUQ3LzAvRkI5MDg4OEQ5RDBDMDU2
NTg0NjQyNzRGNjI2RDE0NjJBQUE3MDM5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjkwODg4RDlEMEMwNTY1ODQ2
NDI3NEY2MjZEMTQ2MkFBQTcwMzk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0UwQzUyMzdFQUExRTM3OEUwNUYzM0Y0QkM3QzRDQzlCNjY0M0FCNEIz
NDg5MUUzODJBODgyNzc5RkRGODFENy8wLzMyMzAzMDJlMzMzMDJlMzEzNzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMyMzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgesDAN
BgkqhkiG9w0BAQsFAAOCAQEAaye/xPQoTzXOVika3ucDkXM0qoyw2R0vu3EDlsRa
zTjFVxuRKwGKH1yf/sbnqH0TWUmilxXq5odNV/d3TCLL+Fhigwt0/gPRYWxf4OYo
tc/iFM8u5/Zn54H0563NK0Z25XV+EMVmMKr2lEXci5XajbL8EJXdTpdqVAOdd0Si
ZNXlAiqmJTrnf9lxZHcsBysxRJkfapJA1qfS38qIEJQJnhTn+dq6O73zaQi6jCvL
e2uO00/G9CLga92Lzfntf+VMnfzHMgWoAtzXlWLbpVWgEWrO5zT9w/d2B3PCpQ4c
+oLVMggDnrFv0TE9S9NrtyzzvDJXFGCSz3PUguWg83jzbg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:58:28 2025 by rpki-client