Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138382e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3138382e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          gnwF0LAdIj0ESrbxr2Qnp4v38TNoXW4Bt/u5wovmSas=
Subject key identifier:   0B:43:D1:13:7C:B4:25:C8:84:4D:89:0D:ED:E0:ED:6C:2F:26:C1:91
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       7C3E53BB89B524AC31DF6025A3A33F7A48BB37C8
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138382e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 04 Feb 2025 18:38:30 +0000
ROA not before:           Tue 04 Feb 2025 18:33:30 +0000
ROA not after:            Tue 03 Feb 2026 18:38:30 +0000
asID:                     20299
IP address blocks:        200.30.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3e:53:bb:89:b5:24:ac:31:df:60:25:a3:a3:3f:7a:48:bb:37:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:30 2025 GMT
            Not After : Feb  3 18:38:30 2026 GMT
        Subject: CN=0B43D1137CB425C8844D890DEDE0ED6C2F26C191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:e6:b9:e1:8c:b7:8d:e4:85:92:c7:3e:50:
                    82:57:af:8e:1f:d5:71:0a:86:05:db:a4:07:97:b3:
                    fd:9e:0f:9b:1e:bf:45:13:f3:71:55:b3:97:7a:b1:
                    a7:13:af:47:e0:bd:12:ca:a0:cf:32:f0:c4:42:e1:
                    ee:5d:f1:4c:16:d2:15:f9:65:df:75:f4:e1:45:ce:
                    8f:f7:3f:55:9d:4b:81:59:2c:e7:4a:bf:d1:0c:22:
                    6b:66:75:f7:08:14:0a:6e:c6:fe:5f:77:18:58:61:
                    9b:02:8a:5e:4b:b4:56:ba:9b:ac:e6:77:e9:49:56:
                    65:96:41:a1:86:1e:ef:bf:4a:56:68:09:62:9a:ce:
                    9d:32:61:be:4b:5a:cb:11:79:d7:18:ca:5b:88:66:
                    c6:31:e8:cb:8d:21:b0:94:98:5d:7d:57:49:8c:41:
                    e6:6a:3c:9a:da:f0:b0:45:41:a1:1e:f5:77:e3:e4:
                    54:fb:53:e1:45:3e:4c:2e:f5:dc:b4:c2:d9:06:96:
                    ab:59:f9:67:a3:1a:ad:52:9c:b6:cb:1f:9f:07:65:
                    53:e1:be:98:b7:22:60:95:94:32:0f:f8:99:bb:cb:
                    5e:3e:42:46:20:54:03:49:2f:5b:ba:73:f8:fe:d8:
                    90:ac:28:f5:65:03:2a:5f:2b:01:38:30:d6:c7:c9:
                    89:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:43:D1:13:7C:B4:25:C8:84:4D:89:0D:ED:E0:ED:6C:2F:26:C1:91
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138382e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:31:f7:78:28:e2:10:75:4f:1b:78:33:44:d8:ef:a2:98:39:
         d4:12:0c:2b:c9:6b:b1:f5:ec:aa:28:fa:74:7c:f8:4f:13:b9:
         01:83:f5:4b:82:93:5e:2c:c4:e7:92:d5:16:ea:e1:39:c1:e8:
         e1:f4:0b:b9:5a:2b:91:42:94:58:d4:c1:d2:ca:d0:c7:fb:9a:
         19:96:f9:28:40:f8:44:e4:e7:8a:b6:46:33:81:35:0d:1b:05:
         26:44:fc:02:d7:93:68:a9:3d:cc:e6:47:1d:2a:14:3f:47:5d:
         e0:bf:88:52:7b:1f:fb:18:ab:43:0d:5f:6d:ed:05:f8:de:a4:
         44:52:35:be:3d:1f:e8:08:3a:7a:65:ac:2f:72:c4:5b:31:96:
         b8:a5:c2:74:07:06:b4:5a:b9:0f:21:d6:19:00:9e:ef:f8:ce:
         4e:3b:bc:db:86:9a:9c:37:ce:d2:cf:ff:9c:92:bb:ce:70:40:
         d9:57:af:0e:1a:7b:b1:83:a0:a4:a3:c0:29:bd:e5:da:e2:80:
         37:f2:7c:af:92:59:f8:22:43:3e:21:39:cf:30:bf:03:e2:ac:
         b9:ee:b2:4e:12:a4:e6:b8:0e:bb:0b:95:8a:c5:5c:f7:a3:54:
         6e:48:53:b6:6f:67:7a:50:6e:e2:f2:5d:81:81:52:68:c0:1b:
         cd:7c:0f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:58:23 2025 by rpki-client