Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3234392e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3234392e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          k/un8zqpTMglunOD4EcoItdRqA0WoCxs4fArTst6BKI=
Subject key identifier:   F9:35:3E:74:55:CB:74:DC:DB:00:65:C0:48:9A:B3:50:0E:C5:D7:5D
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       797BC0E2BAC2A3E101C232CD490686D656EEAB35
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3234392e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 04 Feb 2025 18:32:48 +0000
ROA not before:           Tue 04 Feb 2025 18:27:48 +0000
ROA not after:            Tue 03 Feb 2026 18:32:48 +0000
asID:                     28050
IP address blocks:        200.74.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7b:c0:e2:ba:c2:a3:e1:01:c2:32:cd:49:06:86:d6:56:ee:ab:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Feb  4 18:27:48 2025 GMT
            Not After : Feb  3 18:32:48 2026 GMT
        Subject: CN=F9353E7455CB74DCDB0065C0489AB3500EC5D75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:fa:d0:0e:b7:c4:53:12:43:af:3b:d6:7f:
                    68:b7:21:35:65:ba:45:88:8b:27:23:23:c4:60:58:
                    4b:ec:1d:77:fa:b2:d3:01:a9:c3:5b:b9:29:22:cb:
                    87:1e:f6:10:e2:29:4b:8b:26:22:3b:a9:d9:eb:83:
                    1e:0d:9f:8a:61:91:a2:61:cc:5f:53:83:5b:0f:44:
                    a8:0b:8c:a6:50:5a:2f:46:89:83:44:fb:a0:02:3c:
                    f5:b8:ad:29:8c:7f:3a:38:f8:35:36:6e:74:2d:b7:
                    9b:38:c2:33:97:ca:45:87:77:22:c6:b3:36:0b:36:
                    e3:ed:41:f7:93:da:1e:f2:b8:57:7d:2a:58:23:72:
                    09:bf:f9:89:ad:2c:ec:e3:eb:6d:e1:9d:02:4f:50:
                    17:46:49:27:2b:22:ad:ec:57:1b:2a:e0:13:fd:bb:
                    8b:3e:c5:31:07:10:1c:d9:f6:68:01:a5:50:75:c9:
                    2f:9a:dd:b4:73:d7:87:12:4a:32:dc:bb:86:e6:d4:
                    62:c6:e3:ac:5b:a8:9c:4f:c8:ac:93:99:40:07:fd:
                    5a:9e:46:be:d7:d3:0e:d5:c5:5c:89:63:81:55:55:
                    f1:54:0b:16:37:e3:78:3d:23:ee:81:36:f2:7e:c2:
                    d2:04:0a:2b:c0:dc:fd:1d:f3:ec:d5:78:6a:41:24:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:35:3E:74:55:CB:74:DC:DB:00:65:C0:48:9A:B3:50:0E:C5:D7:5D
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3234392e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:7d:70:e6:72:59:ee:88:8a:c4:3f:f9:b0:40:07:71:ed:2f:
         dc:52:2c:a9:d3:5e:21:e1:96:7d:f8:89:03:4f:49:db:3f:cc:
         8c:7b:5a:63:4b:8c:83:78:9e:5d:4d:66:01:89:69:bd:0d:c7:
         4a:3a:d5:03:85:65:3a:d0:cc:e0:6b:19:63:08:2d:a4:d4:cb:
         f5:00:f1:4a:5d:45:ac:5d:76:e2:b7:f8:04:54:55:3c:75:10:
         42:df:1f:be:81:11:00:b4:df:81:bb:0b:a4:ab:94:49:4e:6f:
         2d:55:06:a5:e9:52:ed:36:58:e4:2f:da:21:a7:19:5a:51:b6:
         55:b4:8a:3a:dd:02:96:35:41:b9:35:f9:20:ef:58:50:07:6c:
         f4:bb:78:94:58:ce:1f:6f:aa:63:e1:08:2f:fe:9f:aa:85:55:
         aa:9b:45:3f:67:82:e8:d5:fa:86:cd:48:4e:74:2c:f7:2d:e2:
         ea:fa:ca:ea:05:2e:03:27:7c:29:2e:04:20:84:b3:15:d3:54:
         a5:47:bc:81:da:26:70:61:3e:f3:f3:27:3e:b4:70:2e:99:58:
         a3:4c:41:f1:ce:6f:d6:41:2b:cf:88:27:a7:d7:72:40:76:3f:
         77:72:53:3b:10:24:ab:83:e5:f3:63:36:03:5c:ca:3a:32:16:
         dd:78:8f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:18 2025 by rpki-client