Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3234382e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3234382e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          6QvDK5UYwiCpmxhcBSihRG2MkoSAhwnhwwp7lS8I1fk=
Subject key identifier:   BF:ED:BD:EA:F5:9B:DD:34:B4:51:9A:E4:B5:96:2C:15:3E:E9:9A:5D
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       725D6AC39D512457CF57281F1C1A589FA4346F82
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3234382e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 05 Mar 2024 18:17:43 +0000
ROA not before:           Tue 05 Mar 2024 18:12:43 +0000
ROA not after:            Tue 04 Mar 2025 18:17:43 +0000
asID:                     28050
IP address blocks:        200.74.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5d:6a:c3:9d:51:24:57:cf:57:28:1f:1c:1a:58:9f:a4:34:6f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Mar  5 18:12:43 2024 GMT
            Not After : Mar  4 18:17:43 2025 GMT
        Subject: CN=BFEDBDEAF59BDD34B4519AE4B5962C153EE99A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a6:cb:cf:5b:91:6b:cf:34:11:74:38:b8:16:
                    3a:16:8e:43:14:56:e4:13:79:3a:65:7e:4d:ca:11:
                    b1:58:86:ab:2e:d8:1d:15:91:4e:d2:06:1f:99:af:
                    c9:9b:e1:51:47:83:37:8c:0f:0f:9c:79:02:d4:24:
                    53:a7:52:db:57:cd:c7:ac:5e:bd:8c:4b:fa:97:a0:
                    18:90:90:c6:b3:44:d5:fa:cf:2c:01:ba:eb:d5:49:
                    75:5b:3e:ae:04:11:d7:4f:df:5d:61:c8:c1:f3:2b:
                    21:c3:a0:aa:c6:f7:8f:ff:65:d9:42:e7:3b:09:40:
                    8c:9d:30:82:96:86:f4:7c:01:72:b5:f3:48:a3:fd:
                    96:5f:b1:30:ad:37:33:2f:26:52:04:ed:6f:b1:c2:
                    6a:d4:a7:50:3b:1b:63:21:46:ee:59:74:c1:32:8d:
                    14:d6:0c:65:c3:c0:95:8d:b5:b4:4e:a2:50:19:5a:
                    db:07:8c:6a:6d:50:1a:d5:c1:08:06:87:ca:57:a4:
                    7c:d6:a6:7c:ac:5e:9d:2e:12:70:ff:b8:ac:b2:43:
                    4e:32:9c:cb:92:fb:ef:46:f1:f3:80:72:b0:3e:99:
                    36:9c:6f:8a:5a:05:c3:e5:d3:03:5c:ed:fe:aa:a2:
                    19:7e:45:69:08:fb:b6:c2:89:68:05:e6:df:57:db:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:ED:BD:EA:F5:9B:DD:34:B4:51:9A:E4:B5:96:2C:15:3E:E9:9A:5D
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3234382e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:2f:b9:8e:40:cd:93:64:a5:e2:a9:74:a8:14:94:7c:d5:a2:
         d4:b8:58:6d:42:06:c0:7f:69:b5:c6:5d:9a:ab:ad:de:4a:06:
         88:fc:69:ee:64:c7:64:5e:8d:21:63:38:0d:01:4c:ea:78:b8:
         f0:13:ae:af:61:e0:16:52:13:fe:6b:09:da:ed:f8:c9:4e:44:
         84:6b:f1:b2:20:74:fe:f5:58:e5:2e:02:01:9d:16:4f:15:be:
         42:a2:cd:90:a6:24:a5:8f:27:7e:8f:e0:4e:4d:64:79:dc:5a:
         2c:30:fd:68:6a:e0:f0:f3:8b:54:71:df:81:c1:ba:a7:0a:dd:
         be:07:9f:33:4e:66:1e:e9:bf:38:6e:8b:44:9a:bf:9c:69:65:
         38:28:ab:75:9b:2f:0b:69:de:b9:b1:78:8b:97:c4:8c:45:49:
         57:8a:9b:23:2b:81:13:04:6b:ee:49:6b:1f:9a:b9:c5:e3:f6:
         16:09:73:11:4e:39:a2:1e:9c:fb:c8:53:06:3c:09:0b:51:b7:
         39:48:b1:bb:3f:29:9a:f0:8a:87:d0:06:ad:15:56:64:bd:70:
         9d:38:48:20:bc:78:0f:6b:74:bb:c9:39:09:ae:82:54:65:e9:
         aa:6b:f9:73:b9:26:f0:10:d0:a1:33:5b:52:81:9b:19:3c:d0:
         ab:c9:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 21:47:22 2024 by rpki-client on console-ams.rpki-client.org