Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/3230302e31362e38392e302f32342d3234203d3e203532333138.roa
File:                     3230302e31362e38392e302f32342d3234203d3e203532333138.roa (raw, json)
Hash identifier:          o7sEXqy7UD1on5j1THI4qF7xgtu6z6fyWq3dxpU+evc=
Subject key identifier:   E4:FD:38:2A:58:63:DC:55:BC:C0:83:C8:BC:02:65:08:BC:7B:CB:5E
Certificate issuer:       /CN=D4F1585FADC5386D18707CA8C82245CBAE06969F
Certificate serial:       1FFE8D203AD562FF1DF660F6F7237D9873399435
Authority key identifier: D4:F1:58:5F:AD:C5:38:6D:18:70:7C:A8:C8:22:45:CB:AE:06:96:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/3230302e31362e38392e302f32342d3234203d3e203532333138.roa
Signing time:             Tue 04 Feb 2025 18:54:04 +0000
ROA not before:           Tue 04 Feb 2025 18:49:04 +0000
ROA not after:            Tue 03 Feb 2026 18:54:04 +0000
asID:                     52318
IP address blocks:        200.16.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fe:8d:20:3a:d5:62:ff:1d:f6:60:f6:f7:23:7d:98:73:39:94:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F1585FADC5386D18707CA8C82245CBAE06969F
        Validity
            Not Before: Feb  4 18:49:04 2025 GMT
            Not After : Feb  3 18:54:04 2026 GMT
        Subject: CN=E4FD382A5863DC55BCC083C8BC026508BC7BCB5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:0a:4b:fc:4e:e4:1b:57:39:f7:59:cf:c4:
                    ac:9a:9c:77:8c:5f:e0:32:00:4a:8e:29:1a:88:ee:
                    ba:87:c6:73:cf:33:81:c6:de:92:43:30:c1:78:e4:
                    25:3c:35:43:57:80:b5:a9:87:8f:9d:7b:72:3c:d0:
                    7d:0f:1a:0a:69:4c:66:35:71:09:28:67:8e:cc:71:
                    cb:9e:e6:90:26:2f:9a:39:2a:7a:e9:23:4f:89:9f:
                    ce:b6:f4:c1:e8:c5:03:09:2a:32:8b:26:01:ee:f6:
                    0e:f9:4f:41:5f:f4:69:bd:ef:9d:da:ff:6a:ca:1e:
                    24:01:48:c2:4e:fa:e5:18:e9:b6:22:61:d9:1f:d0:
                    e5:3b:fd:67:60:e9:8b:19:79:a8:a7:53:d9:41:67:
                    1e:5f:bb:80:53:5c:18:7b:b3:14:1f:b6:2f:58:16:
                    3d:62:95:0f:38:21:4f:5c:49:9f:d3:71:82:38:01:
                    43:d3:c5:fd:23:56:5a:c6:b3:6b:b3:3b:0e:29:27:
                    35:6c:62:7f:8d:1a:b3:f5:22:87:63:88:44:15:85:
                    e7:fa:a2:e2:1c:b2:c8:6b:ae:6f:75:ca:af:2e:6c:
                    60:8a:11:2c:9a:6b:e8:08:9a:5e:e6:59:b6:7e:59:
                    c2:27:6b:e8:45:12:72:1a:75:0e:a7:dd:64:9a:76:
                    21:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FD:38:2A:58:63:DC:55:BC:C0:83:C8:BC:02:65:08:BC:7B:CB:5E
            X509v3 Authority Key Identifier:
                keyid:D4:F1:58:5F:AD:C5:38:6D:18:70:7C:A8:C8:22:45:CB:AE:06:96:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4F1585FADC5386D18707CA8C82245CBAE06969F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B3195F98E06E5B6847A4338FA88DC07CB2E5599DB8B255DC2352FD64C148E7A/0/3230302e31362e38392e302f32342d3234203d3e203532333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:b3:d0:41:2e:b0:6c:81:d8:89:5f:cf:05:8f:d3:f6:72:59:
         95:2f:43:ab:25:2a:a7:9f:d0:35:93:04:91:2e:e0:14:c5:88:
         54:0e:b3:c6:b5:d7:91:87:24:23:64:1d:6f:f5:72:49:7e:a4:
         5d:a7:d5:3c:ae:e4:8b:7a:cb:0b:c4:8f:40:26:07:6d:7c:86:
         7c:62:35:51:bc:16:94:a5:89:d5:ac:d5:a6:78:27:f5:f0:3e:
         d8:5a:07:e6:e8:35:95:d8:30:0e:4c:76:e8:27:c9:52:15:9a:
         e5:16:28:df:05:fc:51:11:b6:d5:15:ef:a0:31:7c:df:1b:ae:
         b2:65:ef:db:d5:48:9c:cd:16:08:dd:04:b4:96:26:61:76:db:
         15:0b:50:5b:d6:e8:dd:f9:04:1e:0c:48:59:f0:5a:ed:1d:5a:
         d2:5f:7f:a9:66:86:1e:4e:e8:69:cb:02:99:01:3a:06:3a:a7:
         94:b5:be:df:f1:6d:e6:b8:71:c1:b2:72:79:c3:36:5c:d8:2d:
         79:05:d1:4a:0d:92:d9:10:10:2a:db:ac:10:c7:c9:ea:9d:65:
         ce:0c:7e:c0:f6:e2:03:e1:d8:f1:c2:23:17:ca:9c:94:65:0a:
         da:01:54:92:d7:9f:56:b5:70:94:12:06:a2:db:b7:d2:e3:8a:
         b4:77:e2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:02 2025 by rpki-client