Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235302e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3235302e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          dbtl+9uX7PdG2FA9REeBw158WIFvABX3kOPXdLJyE/Q=
Subject key identifier:   28:0C:20:F9:EF:B4:F8:C2:F5:6C:78:C3:F2:24:6F:EA:FB:A9:C0:5F
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       300C9157D7CA7D9674C2B16DBB48E24B1E8EB1D8
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235302e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 04 Feb 2025 18:32:46 +0000
ROA not before:           Tue 04 Feb 2025 18:27:46 +0000
ROA not after:            Tue 03 Feb 2026 18:32:46 +0000
asID:                     28050
IP address blocks:        200.74.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0c:91:57:d7:ca:7d:96:74:c2:b1:6d:bb:48:e2:4b:1e:8e:b1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Feb  4 18:27:46 2025 GMT
            Not After : Feb  3 18:32:46 2026 GMT
        Subject: CN=280C20F9EFB4F8C2F56C78C3F2246FEAFBA9C05F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:df:92:25:d5:c7:c0:53:57:62:28:59:22:
                    6e:a3:00:cc:d4:c3:39:c9:80:24:f5:f0:c0:89:8c:
                    01:27:40:47:c5:67:2a:7e:20:31:01:9e:e4:c9:33:
                    f2:47:08:51:08:da:15:5c:33:9b:01:c3:a7:ba:ce:
                    45:70:69:ee:5e:c9:ef:3b:18:1e:5d:d7:36:b3:8c:
                    8d:b1:dc:f6:d8:49:57:e0:68:d1:39:6d:00:ab:93:
                    ca:6e:01:9b:a7:80:28:77:a6:7f:03:06:0c:53:3f:
                    1c:8f:d2:c7:32:9e:4c:39:fa:de:96:fe:28:fc:77:
                    a7:65:cf:cb:96:b7:cd:a0:28:21:a4:8f:6b:16:37:
                    73:f2:55:da:77:4d:f3:78:0d:2c:3d:a5:ba:dc:f3:
                    83:cc:32:19:17:80:6f:ad:04:e2:b9:f9:fc:8b:05:
                    67:e5:f8:39:eb:1c:d3:11:ac:e4:60:ec:8d:60:7f:
                    24:41:b5:75:46:15:e6:44:d8:f5:a2:10:00:a5:ff:
                    26:03:07:42:24:0e:39:73:4a:7c:09:c4:22:34:a3:
                    db:aa:41:43:e9:61:34:61:06:e2:b4:26:28:b6:98:
                    a4:ca:7a:79:f4:50:f6:64:41:1c:42:11:e7:9b:c1:
                    6e:a2:bf:9a:fa:61:77:83:1b:46:c2:50:b2:14:49:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0C:20:F9:EF:B4:F8:C2:F5:6C:78:C3:F2:24:6F:EA:FB:A9:C0:5F
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235302e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:39:d4:c7:67:71:40:fa:0c:77:5d:b9:fb:79:72:2b:98:9c:
         2b:1b:d2:2f:7c:48:1c:d0:64:7a:63:96:73:c8:5f:e7:2c:99:
         12:59:7f:97:2f:dc:c0:76:43:7b:70:ec:2d:99:fe:be:af:9d:
         d5:a3:16:5b:af:e8:de:47:cf:44:09:7d:41:ef:f4:9a:64:c7:
         91:14:41:e1:4d:3a:66:11:7d:8a:f2:ac:0a:47:74:81:e8:a7:
         d1:48:14:a0:a4:49:d1:51:ea:cb:6e:dc:4c:82:11:58:03:e3:
         70:a5:58:ed:39:89:6c:f5:0e:50:b8:0a:bd:22:7e:f5:65:dd:
         98:ff:ce:03:92:1b:1c:0e:b2:eb:45:9c:03:a9:16:32:9d:cf:
         16:84:1c:17:65:6d:a9:20:76:12:2b:f8:11:65:00:45:c1:d9:
         b9:0a:c1:8d:1e:47:a6:9a:e4:0b:1c:15:32:c6:47:0d:82:e9:
         e6:47:dc:5b:9c:5f:d2:61:22:b8:49:14:0f:e8:dd:35:cf:bf:
         98:d6:5d:6e:90:21:ca:e3:92:d1:e4:af:83:b1:49:da:0f:c4:
         13:f8:92:f4:2c:fa:a6:e8:de:78:ee:8f:ea:f4:76:40:fd:ec:
         86:de:67:5d:2c:ea:94:cc:fb:3f:e0:15:b7:47:3c:34:a7:54:
         b5:99:e6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:11 2025 by rpki-client