Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e20323632313937.roa
File:                     3230302e33302e3138392e302f32342d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          NYdvw7okyfUMs3HgRtU6BFHhhKjiqru2uKMTf8DXuK8=
Subject key identifier:   E9:B5:C5:9E:E9:BF:D0:3B:CE:36:88:0C:82:F7:B1:F0:4F:77:0A:93
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       181745DC6B73BDFFBC591E4C0E2BE99E95E33DD8
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e20323632313937.roa
Signing time:             Tue 04 Feb 2025 18:38:38 +0000
ROA not before:           Tue 04 Feb 2025 18:33:38 +0000
ROA not after:            Tue 03 Feb 2026 18:38:38 +0000
asID:                     262197
IP address blocks:        200.30.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:17:45:dc:6b:73:bd:ff:bc:59:1e:4c:0e:2b:e9:9e:95:e3:3d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:38 2025 GMT
            Not After : Feb  3 18:38:38 2026 GMT
        Subject: CN=E9B5C59EE9BFD03BCE36880C82F7B1F04F770A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:f4:7f:91:60:63:33:34:e8:db:ac:0a:c7:
                    df:fd:d1:ee:49:c1:a2:5b:98:4f:56:48:43:a2:c2:
                    2e:a7:8a:26:b9:d7:06:f5:2e:d3:ce:09:67:31:ff:
                    57:ec:d1:40:c9:08:72:30:79:b2:7b:ad:bd:b7:12:
                    1a:2a:b3:e6:dd:ae:46:b8:1f:5b:ea:26:9c:87:aa:
                    95:f8:6e:41:70:07:e7:5e:cf:56:91:fc:c5:83:11:
                    89:c5:a8:b3:3d:7c:5d:01:a0:42:2c:b7:22:f4:f6:
                    54:ab:96:1d:c5:e8:99:98:6a:4f:8b:8d:bd:07:26:
                    69:cd:fa:85:dc:71:db:82:55:60:fd:3a:a7:3b:27:
                    a1:85:d7:93:bc:ab:10:f8:f9:1b:fe:7a:9f:73:be:
                    bb:1c:4c:20:89:5e:5b:a2:96:6d:4c:b3:31:4f:39:
                    ae:51:ab:29:c5:17:94:85:76:cd:d2:41:b2:97:79:
                    7f:5c:60:16:3e:ba:2b:5b:85:4e:9c:09:b8:9f:2e:
                    12:8c:cd:57:1a:18:77:a1:40:64:37:1b:39:73:a2:
                    4a:c2:1e:58:14:00:6b:16:bb:71:16:7c:ee:ef:b8:
                    c7:07:6f:4a:8f:83:34:a9:6d:03:93:33:d6:11:89:
                    08:22:83:5c:d6:29:c3:e3:1c:21:5d:67:39:12:36:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B5:C5:9E:E9:BF:D0:3B:CE:36:88:0C:82:F7:B1:F0:4F:77:0A:93
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:05:6b:43:3f:36:63:bf:4b:6a:2e:88:3a:7d:d1:50:90:78:
         d3:6e:73:05:a1:5e:16:da:6b:9e:47:b6:1d:37:12:ec:5f:d7:
         81:d7:66:73:2e:be:ed:88:12:ad:f2:6d:4e:98:3b:32:10:e7:
         8e:bb:0b:11:a4:e7:df:98:cc:d3:84:d8:61:03:85:49:80:85:
         24:0b:79:38:60:8f:bb:39:ff:bb:04:33:52:7b:50:58:b7:8a:
         9f:07:cc:30:5c:a1:38:e0:d3:b4:21:ff:51:8e:20:4d:c9:e0:
         a6:7c:b6:3d:d3:6e:ad:5f:76:cd:93:45:a7:73:b0:ae:20:7a:
         6e:ac:e7:02:1a:86:d7:6a:0d:22:fb:fd:92:00:cd:c9:87:a2:
         76:45:e3:cb:3d:87:a1:8f:82:93:ac:a9:f7:e9:37:4c:fb:77:
         fc:fb:63:cf:90:5c:00:5c:8d:e6:e0:06:a6:18:46:1c:25:74:
         bf:44:ce:28:d0:5a:c3:45:69:e3:83:da:71:02:ce:4c:a6:5d:
         1c:59:de:90:84:d3:90:78:0d:f4:07:4e:ec:d2:dd:96:13:43:
         0d:4b:03:b3:6d:11:42:33:ee:f6:54:2e:a2:35:dc:3c:d1:67:
         e8:f4:75:c7:d5:34:6a:f5:4e:a8:10:6c:64:ac:d1:3d:e1:8f:
         39:22:4f:65
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGBdF3Gtzvf+8WR5MDivpnpXjPdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5MDg4OEQ5RDBDMDU2NTg0NjQyNzRGNjI2RDE0NjJB
QUE3MDM5OTAeFw0yNTAyMDQxODMzMzhaFw0yNjAyMDMxODM4MzhaMDMxMTAvBgNV
BAMTKEU5QjVDNTlFRTlCRkQwM0JDRTM2ODgwQzgyRjdCMUYwNEY3NzBBOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj/PR/kWBjMzTo26wKx9/90e5J
waJbmE9WSEOiwi6niia51wb1LtPOCWcx/1fs0UDJCHIwebJ7rb23Ehoqs+bdrka4
H1vqJpyHqpX4bkFwB+dez1aR/MWDEYnFqLM9fF0BoEIstyL09lSrlh3F6JmYak+L
jb0HJmnN+oXccduCVWD9Oqc7J6GF15O8qxD4+Rv+ep9zvrscTCCJXluilm1MszFP
Oa5RqynFF5SFds3SQbKXeX9cYBY+uitbhU6cCbifLhKMzVcaGHehQGQ3GzlzokrC
HlgUAGsWu3EWfO7vuMcHb0qPgzSpbQOTM9YRiQgig1zWKcPjHCFdZzkSNnzvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU6bXFnum/0DvONogMgvex8E93CpMwHwYDVR0j
BBgwFoAU+5CIjZ0MBWWEZCdPYm0UYqqnA5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTBDNTIzN0VBQTFFMzc4RTA1RjMzRjRCQzdDNENDOUI2
NjQzQUI0QjM0ODkxRTM4MkE4ODI3NzlGREY4MUQ3LzAvRkI5MDg4OEQ5RDBDMDU2
NTg0NjQyNzRGNjI2RDE0NjJBQUE3MDM5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjkwODg4RDlEMEMwNTY1ODQ2
NDI3NEY2MjZEMTQ2MkFBQTcwMzk5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0UwQzUyMzdFQUExRTM3OEUwNUYzM0Y0QkM3QzRDQzlCNjY0M0FCNEIz
NDg5MUUzODJBODgyNzc5RkRGODFENy8wLzMyMzAzMDJlMzMzMDJlMzEzODM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB69
MA0GCSqGSIb3DQEBCwUAA4IBAQAkBWtDPzZjv0tqLog6fdFQkHjTbnMFoV4W2mue
R7YdNxLsX9eB12ZzLr7tiBKt8m1OmDsyEOeOuwsRpOffmMzThNhhA4VJgIUkC3k4
YI+7Of+7BDNSe1BYt4qfB8wwXKE44NO0If9RjiBNyeCmfLY9026tX3bNk0Wnc7Cu
IHpurOcCGobXag0i+/2SAM3Jh6J2RePLPYehj4KTrKn36TdM+3f8+2PPkFwAXI3m
4AamGEYcJXS/RM4o0FrDRWnjg9pxAs5Mpl0cWd6QhNOQeA30B07s0t2WE0MNSwOz
bRFCM+72VC6iNdw80Wfo9HXH1TRq9U6oEGxkrNE94Y85Ik9l
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:04 2025 by rpki-client