Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235302e302f32342d3234203d3e20323633323432.roa
File:                     3230302e31322e3235302e302f32342d3234203d3e20323633323432.roa (raw, json)
Hash identifier:          b72Q2UfUy7kgNwB0uPWj0SC0ERdYJ/Iv3JbkjB28WI4=
Subject key identifier:   76:F6:FF:5C:7F:F2:41:26:74:1C:E7:12:3F:25:8B:24:64:C1:A6:F8
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       5F3E6C804639A12F6D0184179883F0C30195C1EF
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235302e302f32342d3234203d3e20323633323432.roa
Signing time:             Tue 04 Feb 2025 18:25:28 +0000
ROA not before:           Tue 04 Feb 2025 18:20:28 +0000
ROA not after:            Tue 03 Feb 2026 18:25:28 +0000
asID:                     263242
IP address blocks:        200.12.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3e:6c:80:46:39:a1:2f:6d:01:84:17:98:83:f0:c3:01:95:c1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Feb  4 18:20:28 2025 GMT
            Not After : Feb  3 18:25:28 2026 GMT
        Subject: CN=76F6FF5C7FF24126741CE7123F258B2464C1A6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:8b:33:e8:26:40:d7:58:97:ef:d2:7a:ad:
                    87:50:b6:23:fa:33:cc:28:37:0d:82:0b:cc:78:3d:
                    4a:83:2a:82:65:8d:48:70:0f:99:75:c1:28:11:a2:
                    45:82:be:05:dd:78:b9:e0:70:0d:bd:e1:22:30:41:
                    1c:44:db:59:e4:1b:c0:9d:3d:75:c3:3c:3a:42:fc:
                    2b:2f:51:11:cb:3f:8c:76:48:3a:9e:b7:22:19:a8:
                    74:a0:5f:ba:38:2d:16:f5:1c:44:c8:bb:29:bf:f2:
                    a8:eb:a7:27:9f:ed:62:22:ff:d4:80:3e:d6:d2:03:
                    23:85:89:3d:16:00:27:69:6a:5a:4a:37:10:09:e2:
                    79:2a:7c:39:9d:ae:97:ce:e9:37:40:22:64:99:dc:
                    70:27:9d:aa:2b:49:c7:0e:13:ca:c7:61:22:ae:b4:
                    9f:ef:c6:20:dc:2e:12:32:ad:bb:9e:ef:f7:fc:73:
                    2f:4f:ef:0d:37:ab:51:a5:09:0a:ac:0d:f3:50:7a:
                    9d:39:9b:5b:bb:98:02:be:90:ca:4d:1e:60:17:cb:
                    02:15:a0:50:0c:56:ed:d4:bd:b8:90:9f:2c:95:82:
                    91:5c:50:00:f4:b8:b3:c6:11:92:0c:4a:9d:fe:ad:
                    37:59:a7:03:6f:2b:43:46:4f:53:db:b7:6a:ad:dd:
                    ac:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F6:FF:5C:7F:F2:41:26:74:1C:E7:12:3F:25:8B:24:64:C1:A6:F8
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235302e302f32342d3234203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:d3:72:96:52:36:b8:69:29:5f:f1:84:5c:d1:4e:1f:bc:9c:
         94:4e:cd:40:ee:76:11:2a:45:d4:b5:0b:c9:75:c6:2d:b3:71:
         ef:65:08:b2:8b:51:bd:fb:e3:3e:d5:2b:d6:07:a2:a6:41:b7:
         59:4c:74:38:23:bf:06:f9:48:ca:8b:a2:8b:81:4e:22:eb:4a:
         77:24:2f:4b:b1:b8:29:ca:6c:b8:9d:64:c4:cf:51:2b:07:f9:
         77:3e:e7:2c:f2:6f:20:6b:ff:3b:2f:08:aa:07:08:57:24:41:
         1a:43:7e:fb:26:fd:67:c8:f9:ed:1b:d4:6a:b6:b3:61:08:48:
         68:28:5d:08:50:a0:e5:ff:b4:5b:21:f5:25:83:88:4c:af:b5:
         24:17:8b:f4:38:7c:36:28:31:c1:ac:71:81:88:92:65:e5:d0:
         0b:10:2b:db:9d:22:c9:eb:44:ef:42:f9:b4:0c:98:fd:49:ee:
         2a:05:e2:eb:2a:df:d6:10:1e:0f:57:e1:ab:32:c0:3e:c5:a7:
         f2:33:0f:92:43:ab:7a:62:d3:b4:99:76:53:f4:b5:db:cd:d7:
         a5:68:31:cd:7a:63:32:29:31:1b:84:80:00:a6:5c:dc:ee:01:
         d1:ca:cb:af:e4:b2:b3:24:8a:c3:60:14:0f:f6:64:d9:40:76:
         f4:69:cd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:16:45 2025 by rpki-client