Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3139302e302f32342d3234203d3e203532323632.roa
File:                     3230302e33302e3139302e302f32342d3234203d3e203532323632.roa (raw, json)
Hash identifier:          mwC8gIEbr0L64wgbWZJF+E38ZSVw2rJb9zaiH6WxGZg=
Subject key identifier:   B2:00:6D:3B:1E:5D:F1:52:1D:64:1B:CC:28:D9:D8:21:D1:70:B0:5A
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       72ABEDE5FD9CDB104AA0AD9063AFDE77FA04CCBE
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3139302e302f32342d3234203d3e203532323632.roa
Signing time:             Tue 04 Feb 2025 18:38:32 +0000
ROA not before:           Tue 04 Feb 2025 18:33:32 +0000
ROA not after:            Tue 03 Feb 2026 18:38:32 +0000
asID:                     52262
IP address blocks:        200.30.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 16:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ab:ed:e5:fd:9c:db:10:4a:a0:ad:90:63:af:de:77:fa:04:cc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:32 2025 GMT
            Not After : Feb  3 18:38:32 2026 GMT
        Subject: CN=B2006D3B1E5DF1521D641BCC28D9D821D170B05A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:54:fa:03:95:34:33:a6:32:fb:4c:52:5a:
                    02:a3:46:6b:df:ca:36:09:9b:db:21:02:84:fc:2c:
                    da:ac:40:ca:df:52:8e:42:24:3f:18:e4:8f:d0:3e:
                    b2:0c:47:6c:c0:92:da:75:47:68:38:5e:bb:87:d6:
                    96:0e:d2:69:1f:10:fb:88:03:ed:24:24:b7:cd:d0:
                    d6:22:d3:42:dc:1d:a7:fc:a1:0f:f0:eb:49:c5:90:
                    ee:4b:28:61:95:c0:c1:99:f2:40:b7:19:45:ec:fa:
                    46:bc:1a:d9:7e:5c:79:3c:39:2f:8f:13:53:e8:ea:
                    5d:fc:2e:45:39:62:be:85:26:4c:a6:7b:ba:5d:57:
                    66:7e:b9:7e:fa:b6:1b:d9:97:59:be:9b:33:82:24:
                    73:94:82:70:0d:79:68:25:94:1a:3f:de:9d:35:24:
                    8f:a9:e1:1e:e4:69:b6:2a:32:2c:a7:37:d1:5f:9b:
                    d2:79:99:31:24:f6:9d:aa:89:44:af:52:ea:20:fb:
                    66:7c:38:56:75:b0:81:f5:93:65:dd:af:80:08:13:
                    97:2a:39:2a:05:6c:6d:35:b8:65:2b:9a:16:37:54:
                    21:da:c1:ef:79:67:ad:bf:96:d1:89:cd:2d:ac:27:
                    b8:cd:90:74:3e:d7:ad:28:0e:79:fb:d4:b6:29:e7:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:00:6D:3B:1E:5D:F1:52:1D:64:1B:CC:28:D9:D8:21:D1:70:B0:5A
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3139302e302f32342d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d2:79:12:b9:11:a9:93:d0:b0:93:c1:41:47:9c:d1:ef:39:
         2f:10:72:96:43:68:1f:8a:3f:6b:2d:2e:2d:91:bf:94:62:df:
         f9:17:25:53:f1:e9:1b:71:16:00:09:6f:65:f7:08:e8:ba:db:
         1d:8f:d1:ef:95:b6:9f:00:24:a2:5a:7b:99:0a:93:ef:87:20:
         92:3d:a0:8f:0b:14:49:a3:02:1c:8b:64:e2:24:da:dd:76:c3:
         53:57:13:9e:50:5b:55:9f:aa:04:0f:b9:7f:54:e9:13:02:2f:
         8b:cf:33:ab:9b:5e:62:c6:23:2c:d1:a6:b2:01:58:9f:75:9c:
         27:2b:64:25:0e:6f:1c:69:02:5e:7a:d1:26:e0:aa:fe:7c:8a:
         93:30:d3:d7:d6:2a:3a:5a:1a:17:e0:c5:c0:12:6b:75:31:ee:
         e8:17:8e:b8:cc:67:54:ee:77:13:f5:fe:8e:4d:54:a8:73:25:
         36:2a:47:03:55:21:68:e3:c1:7f:16:72:a1:de:37:2a:2a:d2:
         0b:c4:fe:40:ff:85:a3:64:60:d8:81:0c:82:9e:a2:80:0b:59:
         1e:f3:d0:53:05:09:16:10:85:1c:81:ae:fe:4a:0b:3a:ec:59:
         e7:67:f4:6a:5a:22:f8:cf:e7:ec:92:bf:4b:4d:74:81:40:a5:
         9c:5a:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 19:56:36 2025 by rpki-client