Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137372e302f32342d3234203d3e203237373432.roa
File:                     3230302e33302e3137372e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          2Fg3RHLACHj4h8uxsd6NSrmBFGdJ9JVepSzbYw21iCY=
Subject key identifier:   88:3A:38:41:D9:5E:50:24:A2:29:0F:09:21:5C:90:D5:3E:6A:71:20
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       2CAAAFA7E06C9BB350D70C89BD119EE18690009B
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137372e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 04 Feb 2025 18:38:34 +0000
ROA not before:           Tue 04 Feb 2025 18:33:34 +0000
ROA not after:            Tue 03 Feb 2026 18:38:34 +0000
asID:                     27742
IP address blocks:        200.30.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:aa:af:a7:e0:6c:9b:b3:50:d7:0c:89:bd:11:9e:e1:86:90:00:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:34 2025 GMT
            Not After : Feb  3 18:38:34 2026 GMT
        Subject: CN=883A3841D95E5024A2290F09215C90D53E6A7120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:35:61:bc:f1:37:f7:8e:9a:07:b8:77:57:71:
                    6e:4d:d3:72:b1:d6:f1:82:f5:d1:e7:c2:d2:1c:88:
                    2e:53:51:43:10:99:5e:af:31:56:82:82:c2:8d:4f:
                    92:8a:6e:06:2b:37:d6:d5:19:7c:88:41:72:b5:fc:
                    e1:98:fc:39:ad:da:d8:53:f8:73:b7:b9:56:3f:15:
                    cf:fb:07:e6:a7:12:af:0e:62:4e:7a:bb:a0:ae:65:
                    05:f7:b9:57:cf:97:bc:65:22:d2:e0:99:c5:fe:9e:
                    67:20:9a:4a:d3:1e:9d:47:c4:a1:b5:82:28:e2:b5:
                    ab:69:51:b9:fd:37:9b:cd:b1:e4:37:fd:ee:91:c8:
                    45:fa:1d:db:f2:68:68:59:9e:56:f5:b8:25:34:07:
                    30:24:2b:a2:52:06:84:18:4f:27:a7:2e:45:33:d5:
                    ad:a1:31:02:03:00:ee:cb:aa:7f:a5:e0:4a:f3:b6:
                    b3:1f:45:2c:01:31:33:45:f0:08:04:5f:3e:75:47:
                    e6:d9:5a:4c:f0:9d:fc:57:46:9e:d0:1e:fa:f3:e3:
                    d5:ff:2b:11:cb:95:3e:37:29:34:78:0b:51:a7:05:
                    4f:7f:b3:6c:d9:8e:9f:c5:75:11:fb:22:28:2e:31:
                    40:67:17:9c:7b:a2:01:f4:cc:59:be:27:be:92:1a:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3A:38:41:D9:5E:50:24:A2:29:0F:09:21:5C:90:D5:3E:6A:71:20
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3137372e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:0a:86:e5:39:84:14:51:67:9e:b6:a1:3c:1c:fa:45:8a:95:
         3c:d8:35:11:3f:71:c0:38:f8:7f:46:0c:fb:a1:64:fb:d2:0e:
         88:70:ad:6b:a6:8d:a7:13:01:3e:a1:19:46:5b:e0:98:e0:23:
         7e:b9:c4:15:91:26:14:55:25:1c:58:be:30:4d:75:d2:fd:2a:
         93:e6:75:e7:19:92:6f:67:10:92:f2:b9:eb:e2:25:16:8a:62:
         c4:87:df:6c:fe:24:ab:71:86:c4:1b:dc:95:4a:9c:a2:c1:1f:
         23:58:6a:ce:ae:6b:41:41:33:fd:df:cd:be:d8:2f:a4:37:68:
         53:52:3c:fa:75:08:b5:42:62:42:03:02:59:e7:4d:2e:c4:cc:
         fd:e6:fc:43:6a:6f:6d:d8:7c:c7:a1:6b:9d:27:94:0b:dc:87:
         bd:5d:b7:6c:30:90:d1:e1:80:fe:5e:1d:df:6a:19:c7:b2:2d:
         63:b1:ef:8c:df:94:69:d5:35:ed:04:d8:e6:71:c5:0c:23:cd:
         dc:20:3e:2a:d9:29:36:b1:30:53:f3:20:0d:52:76:02:0f:d3:
         d0:c5:f7:71:49:c9:07:f8:09:fb:c4:14:48:f3:80:3d:77:a2:
         4e:dc:7f:83:d4:1d:d3:8b:a0:db:fb:15:f2:1d:79:c9:aa:b2:
         f9:22:34:7f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULKqvp+Bsm7NQ1wyJvRGe4YaQAJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5MDg4OEQ5RDBDMDU2NTg0NjQyNzRGNjI2RDE0NjJB
QUE3MDM5OTAeFw0yNTAyMDQxODMzMzRaFw0yNjAyMDMxODM4MzRaMDMxMTAvBgNV
BAMTKDg4M0EzODQxRDk1RTUwMjRBMjI5MEYwOTIxNUM5MEQ1M0U2QTcxMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNWG88Tf3jpoHuHdXcW5N03Kx
1vGC9dHnwtIciC5TUUMQmV6vMVaCgsKNT5KKbgYrN9bVGXyIQXK1/OGY/Dmt2thT
+HO3uVY/Fc/7B+anEq8OYk56u6CuZQX3uVfPl7xlItLgmcX+nmcgmkrTHp1HxKG1
gijitatpUbn9N5vNseQ3/e6RyEX6HdvyaGhZnlb1uCU0BzAkK6JSBoQYTyenLkUz
1a2hMQIDAO7Lqn+l4ErztrMfRSwBMTNF8AgEXz51R+bZWkzwnfxXRp7QHvrz49X/
KxHLlT43KTR4C1GnBU9/s2zZjp/FdRH7IiguMUBnF5x7ogH0zFm+J76SGlFHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUiDo4QdleUCSiKQ8JIVyQ1T5qcSAwHwYDVR0j
BBgwFoAU+5CIjZ0MBWWEZCdPYm0UYqqnA5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTBDNTIzN0VBQTFFMzc4RTA1RjMzRjRCQzdDNENDOUI2
NjQzQUI0QjM0ODkxRTM4MkE4ODI3NzlGREY4MUQ3LzAvRkI5MDg4OEQ5RDBDMDU2
NTg0NjQyNzRGNjI2RDE0NjJBQUE3MDM5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjkwODg4RDlEMEMwNTY1ODQ2
NDI3NEY2MjZEMTQ2MkFBQTcwMzk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0UwQzUyMzdFQUExRTM3OEUwNUYzM0Y0QkM3QzRDQzlCNjY0M0FCNEIz
NDg5MUUzODJBODgyNzc5RkRGODFENy8wLzMyMzAzMDJlMzMzMDJlMzEzNzM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgesTAN
BgkqhkiG9w0BAQsFAAOCAQEAXwqG5TmEFFFnnrahPBz6RYqVPNg1ET9xwDj4f0YM
+6Fk+9IOiHCta6aNpxMBPqEZRlvgmOAjfrnEFZEmFFUlHFi+ME110v0qk+Z15xmS
b2cQkvK56+IlFopixIffbP4kq3GGxBvclUqcosEfI1hqzq5rQUEz/d/NvtgvpDdo
U1I8+nUItUJiQgMCWedNLsTM/eb8Q2pvbdh8x6FrnSeUC9yHvV23bDCQ0eGA/l4d
32oZx7ItY7HvjN+UadU17QTY5nHFDCPN3CA+KtkpNrEwU/MgDVJ2Ag/T0MX3cUnJ
B/gJ+8QUSPOAPXeiTtx/g9Qd04ug2/sV8h15yaqy+SI0fw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 01:56:49 2025 by rpki-client