Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230302e37362e38302e302f32302d3234203d3e2037343338.roa
File:                     3230302e37362e38302e302f32302d3234203d3e2037343338.roa (raw, json)
Hash identifier:          7kPOC93ubaoZAASe/CJ7WvEuZ218a8KjFhfuV8vK9bs=
Subject key identifier:   3A:07:17:AF:61:E9:3B:91:20:DC:9F:23:1E:15:83:C7:86:AC:4F:33
Certificate issuer:       /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial:       5FE6B74DF923CF6758498BF801A282B44F2068E8
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230302e37362e38302e302f32302d3234203d3e2037343338.roa
Signing time:             Tue 04 Feb 2025 20:05:57 +0000
ROA not before:           Tue 04 Feb 2025 20:00:57 +0000
ROA not after:            Tue 03 Feb 2026 20:05:57 +0000
asID:                     7438
IP address blocks:        200.76.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 14:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e6:b7:4d:f9:23:cf:67:58:49:8b:f8:01:a2:82:b4:4f:20:68:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
        Validity
            Not Before: Feb  4 20:00:57 2025 GMT
            Not After : Feb  3 20:05:57 2026 GMT
        Subject: CN=3A0717AF61E93B9120DC9F231E1583C786AC4F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:e0:26:ab:99:b7:1b:6c:3c:bf:92:a1:65:
                    ee:13:e1:fd:f4:cb:fc:60:ce:f2:8d:22:91:7d:72:
                    ec:2e:77:69:b7:e8:e8:8c:62:a6:9d:47:46:46:8b:
                    b4:f2:4f:64:2c:80:29:83:04:2e:96:38:b8:8e:17:
                    30:6a:0c:a2:7a:87:ae:9f:ba:13:7c:e9:60:d7:f6:
                    ca:c7:87:3b:e6:de:25:ec:da:bd:58:64:63:6d:fc:
                    40:df:27:43:fc:73:90:66:fe:f1:27:5f:20:4a:0b:
                    de:f3:08:8a:0e:94:88:b1:c1:e5:91:ff:a1:1a:c9:
                    d4:25:e8:91:2f:7b:76:d4:af:ba:68:85:82:cf:fe:
                    d1:c3:12:ba:6a:2a:ce:07:3d:51:30:43:b6:f0:6d:
                    7d:bd:86:8e:43:3e:5a:ce:fc:06:9f:38:d7:92:85:
                    9b:27:80:da:c0:b1:c3:94:27:ea:ba:15:2a:97:0f:
                    d8:4f:5d:9a:4a:c8:5d:41:2b:83:bf:aa:6c:b8:18:
                    31:e6:d9:d1:e8:96:34:69:7d:bf:a0:4e:35:3e:dd:
                    c0:4b:83:ff:01:39:42:75:47:21:16:58:cf:5b:08:
                    46:06:b6:25:bb:eb:e4:eb:c5:52:eb:1e:ba:3c:9d:
                    1a:de:fb:f0:6c:1c:02:9c:d1:c7:34:74:9e:42:32:
                    4c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:07:17:AF:61:E9:3B:91:20:DC:9F:23:1E:15:83:C7:86:AC:4F:33
            X509v3 Authority Key Identifier:
                keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230302e37362e38302e302f32302d3234203d3e2037343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:cd:81:88:17:ad:1b:b8:af:7c:5b:00:44:2a:c5:5e:bd:a7:
         d6:e4:33:b6:6a:ac:4d:e3:f6:8d:d2:f7:da:39:d5:e0:dc:93:
         df:f9:1e:c9:77:3f:f1:c2:98:e6:46:be:31:8d:3e:c6:4d:62:
         1a:28:b8:20:56:b4:60:81:48:45:2c:10:d4:ba:09:ef:8f:9c:
         9b:d2:64:af:af:0f:03:32:e5:1d:91:1e:85:7d:2f:d7:a7:06:
         8c:b0:28:b1:ae:cb:8a:d0:3d:a9:66:fb:9a:7e:d8:8e:bc:68:
         69:0d:1a:a1:9a:5c:43:fb:59:81:11:fd:47:7c:e1:84:f5:c9:
         f3:dd:3c:bf:d1:66:4b:60:e8:71:97:d3:8d:a9:84:36:eb:5e:
         14:59:03:10:c8:2e:3b:d3:1e:43:e0:16:0d:03:f2:16:08:90:
         a3:a4:35:fc:22:ee:a3:72:4a:c6:5c:0d:42:14:7f:26:b4:cc:
         16:8d:02:63:c6:0c:76:80:6e:bb:88:89:49:eb:d5:8d:12:21:
         1b:f5:8d:e1:9f:a4:2e:57:60:26:0f:23:2f:23:91:2b:5b:12:
         59:19:3f:a9:f7:59:c1:7d:a4:73:89:c7:d3:c4:c9:62:b4:1f:
         0f:e7:7e:d4:1b:c8:57:29:c1:05:a2:a8:e5:3f:9c:85:de:31:
         4e:e8:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:45:52 2025 by rpki-client