Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235312e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3235312e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          2qSj8DllafoL0YTwuGanzeUVSWm1vD7YvLZMrGi6fuA=
Subject key identifier:   02:1D:A4:58:DB:4C:0E:DD:48:89:AB:C4:69:84:E0:E5:61:31:58:91
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       28DEEF413CAE42B56D005B53806F83B0CACB6CE2
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235312e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 04 Feb 2025 18:32:47 +0000
ROA not before:           Tue 04 Feb 2025 18:27:47 +0000
ROA not after:            Tue 03 Feb 2026 18:32:47 +0000
asID:                     28050
IP address blocks:        200.74.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:de:ef:41:3c:ae:42:b5:6d:00:5b:53:80:6f:83:b0:ca:cb:6c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Feb  4 18:27:47 2025 GMT
            Not After : Feb  3 18:32:47 2026 GMT
        Subject: CN=021DA458DB4C0EDD4889ABC46984E0E561315891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:c1:8f:d8:4a:b2:04:a3:f1:e9:cd:58:56:
                    c9:56:3b:01:d7:f1:17:45:d3:f9:aa:de:52:74:f9:
                    ad:0c:a0:77:10:d4:e0:32:cc:27:d6:fd:92:43:90:
                    95:13:9f:62:ea:8e:a7:10:29:69:d2:31:f5:13:e8:
                    99:c2:e4:03:a2:d7:bb:42:e1:31:58:a6:31:84:76:
                    e0:61:b9:76:76:96:78:37:9d:0c:0e:8b:43:17:5f:
                    80:3f:45:a5:98:3d:78:26:dc:98:77:02:87:91:fc:
                    92:9e:fb:3c:c9:4c:be:d1:4f:c4:5b:1b:13:7c:0c:
                    e8:9f:3d:9b:a8:7d:3f:69:ad:bd:55:ea:29:5e:5e:
                    5e:82:f3:2d:86:a7:e2:b5:e3:cc:23:78:67:8f:61:
                    b2:88:f0:9c:3e:cd:59:23:1e:b9:2e:ef:3b:38:f1:
                    1e:3d:0e:7f:99:59:6c:42:73:78:cd:37:9c:ba:85:
                    30:83:16:89:48:67:52:51:aa:e2:e8:3e:7d:c6:cd:
                    ff:47:a7:d0:2a:b1:f2:e9:c7:71:bf:d1:33:86:84:
                    22:72:28:0f:cf:18:87:aa:92:6a:5f:81:e5:08:fb:
                    1c:d5:40:bb:26:5d:5d:ea:33:c5:28:e6:16:70:98:
                    fb:d3:ba:e7:3b:7d:15:1b:b1:64:78:60:c5:f1:10:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1D:A4:58:DB:4C:0E:DD:48:89:AB:C4:69:84:E0:E5:61:31:58:91
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235312e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:84:3d:a3:3a:5e:8b:b5:87:4b:b0:29:d6:12:b0:65:a0:8b:
         49:74:ba:10:a3:32:3a:24:58:08:1f:91:26:89:ae:7e:7a:fb:
         94:c3:8b:d5:1e:a8:d9:8f:ec:70:35:5f:df:a7:ef:1e:86:91:
         c6:e1:76:fc:42:25:db:b7:00:38:08:e4:8a:a7:4f:5c:9d:c7:
         90:f6:fb:2d:9a:0e:4d:e5:98:ed:a7:73:68:a8:91:b9:9d:ce:
         3f:f8:7c:66:f3:74:02:1a:14:0b:7b:3c:ab:f6:71:b4:b8:58:
         b3:d5:69:ba:fe:39:49:25:6b:8a:6d:79:46:89:f7:f5:7d:ad:
         48:33:1b:4a:e5:95:cd:1e:bc:41:41:da:8e:80:4e:5a:0e:28:
         b8:13:35:f0:6e:c8:d0:9f:f3:b6:69:98:55:e3:c0:de:6a:aa:
         13:4b:bb:06:37:a5:f7:be:9e:80:ed:64:2a:c3:b8:04:14:2b:
         fe:8d:51:76:51:65:d8:8b:24:77:2c:08:26:7f:25:a7:25:07:
         64:77:49:d5:5f:eb:38:6c:ef:2e:29:2f:bb:c8:21:c1:43:25:
         e9:a4:cc:52:41:19:5c:2a:b8:30:fa:67:8a:ea:e2:01:18:35:
         fc:fc:70:c5:f4:82:65:87:8f:de:45:22:09:98:84:f0:97:8f:
         64:fe:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:46 2025 by rpki-client