Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e302e302f32332d3234203d3e203138363738.roa
File:                     3230302e32342e302e302f32332d3234203d3e203138363738.roa (raw, json)
Hash identifier:          RDpns3uQkHJjJ6ZEVv0fHm7AtHuypdjnZoRTV11H/50=
Subject key identifier:   1C:60:16:65:EE:B7:83:D5:12:56:8B:68:64:3A:BF:1A:8F:8A:DC:ED
Certificate issuer:       /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Certificate serial:       4B2399AA155158933B40A58C75AD7B5CD2557C25
Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e302e302f32332d3234203d3e203138363738.roa
Signing time:             Tue 10 Jun 2025 21:00:00 +0000
ROA not before:           Tue 10 Jun 2025 20:55:00 +0000
ROA not after:            Tue 09 Jun 2026 21:00:00 +0000
asID:                     18678
IP address blocks:        200.24.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 07:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:23:99:aa:15:51:58:93:3b:40:a5:8c:75:ad:7b:5c:d2:55:7c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
        Validity
            Not Before: Jun 10 20:55:00 2025 GMT
            Not After : Jun  9 21:00:00 2026 GMT
        Subject: CN=1C601665EEB783D512568B68643ABF1A8F8ADCED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:7b:60:bd:17:e4:61:2f:aa:bf:4d:70:0d:
                    9d:50:02:dc:56:c2:c0:46:87:2c:8c:6c:93:af:cb:
                    5c:9e:eb:33:aa:db:8c:3c:4b:81:72:03:d0:a4:5f:
                    e5:e4:bb:64:fa:c0:93:9a:3b:ad:fa:54:8d:94:b8:
                    ac:e3:be:c9:eb:08:60:cd:a1:59:b4:8c:88:49:a7:
                    15:eb:50:25:f6:27:15:70:16:5b:2a:39:ed:b0:1c:
                    90:eb:38:f2:71:f0:4e:9a:ac:f8:26:f9:34:b2:98:
                    17:97:a6:0e:8e:7a:88:51:3d:aa:c4:f4:34:78:4d:
                    33:64:62:a3:34:4f:52:96:42:3c:5d:fa:3b:ec:6d:
                    65:41:bf:6a:99:af:bc:0e:45:1a:f1:c8:60:4e:27:
                    0e:51:cd:56:26:b1:b9:3f:0f:62:16:7f:34:4f:66:
                    f6:40:23:ff:18:e5:11:ab:a8:32:15:42:f3:80:05:
                    60:2a:73:8c:64:22:65:9f:5f:17:3b:07:b0:2f:12:
                    ef:3e:09:eb:7b:83:8b:a9:63:40:05:b0:aa:ce:e5:
                    07:0c:18:7f:a0:b9:44:88:e1:77:fe:f6:d5:ad:b0:
                    17:b1:30:93:96:3a:61:c3:d1:17:cf:04:88:6c:70:
                    cc:64:80:9c:b9:bc:cd:73:cb:12:2e:55:31:d6:ab:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:60:16:65:EE:B7:83:D5:12:56:8B:68:64:3A:BF:1A:8F:8A:DC:ED
            X509v3 Authority Key Identifier:
                keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e302e302f32332d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:e0:57:0c:94:ee:39:7b:5c:61:81:d3:d2:10:d3:2c:2f:48:
         4f:dd:35:2d:f2:66:50:58:c8:21:5a:01:a5:65:f4:c6:a8:0e:
         56:9c:65:ea:c0:b9:f3:3a:34:62:81:1a:7a:b7:f3:af:95:2e:
         e8:98:f3:cb:e4:15:eb:89:0c:bd:33:44:15:8e:70:ef:7a:81:
         b8:cd:65:af:23:42:b5:af:24:b5:dc:4e:e3:8a:4f:2c:7d:78:
         e7:2d:37:d4:2e:39:e6:c0:7a:f1:9d:d0:61:08:b8:c2:85:47:
         8d:9b:88:ca:48:af:de:e8:02:c1:26:7d:cd:20:08:0e:c8:89:
         84:0f:d7:e7:6a:de:49:b2:f4:2e:a2:5e:b7:ef:1d:1b:ff:de:
         d6:ff:21:15:48:40:fa:5d:75:d5:14:64:37:ba:8a:8d:19:2d:
         fb:f3:69:8b:2d:e7:0d:c9:a1:38:12:ca:3b:52:7b:af:e1:3b:
         75:7a:1d:ab:e4:2b:de:35:dd:52:84:eb:6a:27:f5:51:76:5e:
         7b:7e:df:5a:65:e7:04:bd:a2:8b:e8:1a:30:18:a1:e6:d0:d0:
         6d:c5:53:e6:cf:90:8b:3f:14:bf:fe:8d:61:14:f6:69:37:cd:
         24:95:ff:f1:63:14:fe:6f:00:39:bc:47:85:c6:65:8a:1c:9b:
         68:1c:b5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:55:41 2025 by rpki-client