Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3234382e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3234382e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          dOHLOsSAt9dMYyx6gsP/D/1zl2CueJEIiBzHqVQNr+I=
Subject key identifier:   18:B9:49:8E:77:15:DF:B2:59:9F:D5:6E:0F:A2:D6:3C:DF:79:B5:A3
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       42122E95B20A56ACA1B4E211A5B923C6EA3B129C
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3234382e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 04 Feb 2025 18:32:45 +0000
ROA not before:           Tue 04 Feb 2025 18:27:45 +0000
ROA not after:            Tue 03 Feb 2026 18:32:45 +0000
asID:                     28050
IP address blocks:        200.74.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:12:2e:95:b2:0a:56:ac:a1:b4:e2:11:a5:b9:23:c6:ea:3b:12:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Feb  4 18:27:45 2025 GMT
            Not After : Feb  3 18:32:45 2026 GMT
        Subject: CN=18B9498E7715DFB2599FD56E0FA2D63CDF79B5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:0c:df:af:40:ff:0d:d4:81:86:11:79:33:
                    3a:7b:68:20:0a:1a:a9:05:e3:ef:c0:df:58:3f:bb:
                    8d:31:1a:e2:7b:8f:bc:45:78:38:b4:6f:31:05:29:
                    19:c4:da:d6:3d:c2:5f:7c:b1:47:c7:ea:db:23:fb:
                    87:67:8f:fe:cb:5c:49:ea:93:88:01:27:78:ad:d9:
                    ab:65:f2:5e:ba:28:1e:4f:7c:f3:7c:58:a7:50:fe:
                    31:0b:11:18:0c:5d:bf:24:bd:e9:60:73:f1:3f:2a:
                    b7:78:47:83:31:69:9c:04:97:47:c7:57:a6:79:37:
                    2f:11:de:be:37:dd:cd:af:44:c3:57:60:27:db:02:
                    46:d4:53:8e:7d:e9:39:86:34:5a:50:f9:02:64:c2:
                    7c:4e:7e:45:4a:39:05:8f:50:b1:f6:a5:ec:4b:4f:
                    97:a7:55:07:13:ab:20:a0:e5:ee:1e:4c:b9:80:7e:
                    80:f7:9f:40:1f:aa:9c:23:b4:d6:ac:4c:ff:bf:ef:
                    f6:8a:a9:ff:a9:fa:1c:52:06:4d:13:b0:2c:be:f0:
                    61:a7:0f:a5:91:0b:9b:6d:5c:93:39:76:2c:b2:59:
                    84:7c:d3:9b:45:77:65:a5:86:9b:d4:ec:b5:f4:de:
                    81:f6:d3:d0:64:0d:27:d9:f7:03:b5:de:ad:bf:39:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B9:49:8E:77:15:DF:B2:59:9F:D5:6E:0F:A2:D6:3C:DF:79:B5:A3
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3234382e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:41:d0:37:3b:54:be:22:10:56:d9:ea:62:44:46:76:06:ee:
         fb:2f:ea:77:97:c8:c9:0b:a2:9c:a7:b2:d0:8a:03:f8:6d:6a:
         33:d5:89:26:07:54:78:15:a6:c6:91:cc:d9:73:c5:f8:7f:01:
         ca:6d:f4:13:16:df:f7:3f:62:90:48:b8:e0:c8:6f:8b:e1:62:
         e3:09:e1:2c:d6:25:6b:61:17:10:3b:d8:21:5f:1f:1f:4f:e8:
         bb:a5:63:65:c4:ab:07:1a:92:0b:f3:d5:03:86:19:4e:3d:e7:
         c3:3b:29:2e:a1:fe:77:08:c2:2e:9f:bc:d1:74:13:5f:75:cb:
         5e:59:a2:45:36:7c:be:a1:14:d4:b2:87:6c:00:36:3a:6e:30:
         bd:1b:26:d9:a4:95:96:d8:08:16:d9:c5:a4:32:7c:cb:7f:b2:
         1d:8b:c0:5c:66:36:45:08:9b:f2:67:e7:df:14:eb:7c:d7:8a:
         d8:5c:ca:fa:59:3c:4b:a6:e6:75:3b:34:6e:db:44:9d:cf:f3:
         36:58:d9:8f:50:55:cf:f9:a2:68:dc:68:61:db:e0:f8:9a:83:
         dc:d0:fc:63:b9:8e:98:ab:a9:8a:f5:6e:a5:dd:ed:54:56:83:
         81:14:b3:33:82:f6:bc:b1:d7:9f:d4:8d:fd:72:ad:eb:ed:e2:
         6b:32:3e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:16 2025 by rpki-client