Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235322e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3235322e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          93aGNsNifP3OVF+eeUqRj4VzNi6ml4CEBm9NizKGCk8=
Subject key identifier:   C3:E3:41:EE:60:71:01:35:8F:43:74:2B:65:A7:0F:6F:CE:F3:51:FB
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       62F65CE75FA916D613D95421BD8A92954291603F
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235322e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 04 Feb 2025 18:32:48 +0000
ROA not before:           Tue 04 Feb 2025 18:27:48 +0000
ROA not after:            Tue 03 Feb 2026 18:32:48 +0000
asID:                     28050
IP address blocks:        200.74.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f6:5c:e7:5f:a9:16:d6:13:d9:54:21:bd:8a:92:95:42:91:60:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Feb  4 18:27:48 2025 GMT
            Not After : Feb  3 18:32:48 2026 GMT
        Subject: CN=C3E341EE607101358F43742B65A70F6FCEF351FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:45:a3:7b:65:8e:e7:f0:0f:d6:37:97:17:1f:
                    47:9a:a1:29:ca:a6:86:10:3b:a3:d9:88:b4:c4:84:
                    1e:35:8d:c1:27:07:2c:97:38:69:87:1a:c4:d7:52:
                    53:03:5f:8f:f6:bb:ad:22:aa:36:62:0d:47:6b:2d:
                    aa:d8:27:c3:de:57:d3:e5:99:38:81:31:c1:35:01:
                    43:06:7d:17:ac:97:54:1c:dc:61:2b:78:09:fb:e6:
                    cb:de:cf:b5:dd:7d:00:ac:40:be:71:b8:8f:7b:81:
                    34:d5:19:43:6f:9c:51:8c:eb:ee:65:00:49:24:1e:
                    59:7c:8b:c2:c3:38:da:70:0d:e6:0d:73:5e:2b:1c:
                    69:1d:66:8e:6d:dc:73:b3:38:33:aa:91:83:d3:b2:
                    ec:77:51:0e:da:73:68:5c:19:81:ae:c4:ce:30:81:
                    ff:2f:7d:82:4b:5a:53:59:24:bc:b2:41:90:32:04:
                    1c:5f:2b:a6:ff:dc:85:c8:40:bf:4a:be:ab:de:d5:
                    a4:49:70:71:2f:01:ab:98:a3:df:e0:94:ec:31:08:
                    cb:a5:c3:eb:d9:de:10:ad:d3:a5:9d:9b:35:1d:05:
                    e1:e9:0b:67:1c:38:39:a5:91:99:68:8c:00:e9:50:
                    4f:77:1c:1d:8f:eb:b2:d5:26:08:95:67:60:cb:49:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E3:41:EE:60:71:01:35:8F:43:74:2B:65:A7:0F:6F:CE:F3:51:FB
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235322e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:14:fb:d2:9f:99:00:a4:58:83:9d:78:31:05:e9:ea:84:e6:
         aa:4c:6e:eb:7f:94:60:fd:79:dd:23:d3:2f:f6:ca:f8:44:85:
         32:c4:af:d1:4a:52:72:90:59:c1:a8:91:36:3b:bd:23:91:e7:
         2d:1b:81:1d:59:f2:3a:e9:37:c0:3c:1c:d4:15:c4:44:9e:21:
         89:0c:37:ba:80:ac:69:7b:e9:8a:4d:7e:e7:85:d1:69:5e:fc:
         90:29:34:63:08:14:51:2f:ec:cf:cd:c4:e1:93:eb:b8:d7:20:
         97:b5:96:cf:23:e9:89:67:d2:7e:42:85:59:80:88:2a:55:86:
         ff:1a:a9:3d:d7:59:d5:93:a1:c6:b7:ef:f2:65:1e:30:98:84:
         88:c4:b8:55:5f:a6:53:a9:36:aa:5e:43:b9:14:31:ca:2f:9a:
         d3:12:ef:bc:8e:47:0b:3a:d1:25:c2:5c:17:18:e0:21:7a:11:
         0f:e9:da:0e:05:16:d9:4e:37:f3:85:05:a1:b8:97:fa:a4:eb:
         0a:96:7c:24:5d:b3:d3:42:1f:d5:07:5f:50:57:28:43:22:7b:
         38:81:ba:94:a3:70:68:48:22:4c:6d:61:bd:8f:63:57:9a:b2:
         9f:09:d1:c1:9c:e9:13:44:c9:e3:4e:82:80:53:aa:d0:0a:17:
         e0:80:76:cf
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYvZc51+pFtYT2VQhvYqSlUKRYD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ1QzhCM0I5RjVBRDFFMTIyNTkwQjNBOEM4NDlCNjdD
RTA5QjUwQjAeFw0yNTAyMDQxODI3NDhaFw0yNjAyMDMxODMyNDhaMDMxMTAvBgNV
BAMTKEMzRTM0MUVFNjA3MTAxMzU4RjQzNzQyQjY1QTcwRjZGQ0VGMzUxRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNRaN7ZY7n8A/WN5cXH0eaoSnK
poYQO6PZiLTEhB41jcEnByyXOGmHGsTXUlMDX4/2u60iqjZiDUdrLarYJ8PeV9Pl
mTiBMcE1AUMGfResl1Qc3GEreAn75svez7XdfQCsQL5xuI97gTTVGUNvnFGM6+5l
AEkkHll8i8LDONpwDeYNc14rHGkdZo5t3HOzODOqkYPTsux3UQ7ac2hcGYGuxM4w
gf8vfYJLWlNZJLyyQZAyBBxfK6b/3IXIQL9Kvqve1aRJcHEvAauYo9/glOwxCMul
w+vZ3hCt06WdmzUdBeHpC2ccODmlkZlojADpUE93HB2P67LVJgiVZ2DLSek5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUw+NB7mBxATWPQ3QrZacPb87zUfswHwYDVR0j
BBgwFoAUvVyLO59a0eEiWQs6jISbZ84JtQswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RjM5QTg5Qjg5RjlCMzM0MTczMzg3QjIxMzk2Q0RBQ0JG
NDM4NDcxNzFEQjMyMTkxQkFFOTQxODU0OUI1OUY0LzAvQkQ1QzhCM0I5RjVBRDFF
MTIyNTkwQjNBOEM4NDlCNjdDRTA5QjUwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDVDOEIzQjlGNUFEMUUxMjI1
OTBCM0E4Qzg0OUI2N0NFMDlCNTBCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEYzOUE4OUI4OUY5QjMzNDE3MzM4N0IyMTM5NkNEQUNCRjQzODQ3MTcx
REIzMjE5MUJBRTk0MTg1NDlCNTlGNC8wLzMyMzAzMDJlMzczNDJlMzIzNTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMwMzUzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhK/DAN
BgkqhkiG9w0BAQsFAAOCAQEAdRT70p+ZAKRYg514MQXp6oTmqkxu63+UYP153SPT
L/bK+ESFMsSv0UpScpBZwaiRNju9I5HnLRuBHVnyOuk3wDwc1BXERJ4hiQw3uoCs
aXvpik1+54XRaV78kCk0YwgUUS/sz83E4ZPruNcgl7WWzyPpiWfSfkKFWYCIKlWG
/xqpPddZ1ZOhxrfv8mUeMJiEiMS4VV+mU6k2ql5DuRQxyi+a0xLvvI5HCzrRJcJc
FxjgIXoRD+naDgUW2U4384UFobiX+qTrCpZ8JF2z00If1QdfUFcoQyJ7OIG6lKNw
aEgiTG1hvY9jV5qynwnRwZzpE0TJ406CgFOq0AoX4IB2zw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:13 2025 by rpki-client