Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e322e302f32342d3234203d3e20323632353839.roa
File:                     3230302e32342e322e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          8hwcwgOUQnslDeHwMH4mxXmu+aaYI3ja58BF7Smg5EA=
Subject key identifier:   15:F3:E9:25:3A:E5:AB:DE:22:DD:02:84:1A:42:9F:63:F0:3B:29:CE
Certificate issuer:       /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Certificate serial:       7481F36611A068B2A9B2969C5FF7B4625FA9F371
Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e322e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 10 Jun 2025 21:00:00 +0000
ROA not before:           Tue 10 Jun 2025 20:55:00 +0000
ROA not after:            Tue 09 Jun 2026 21:00:00 +0000
asID:                     262589
IP address blocks:        200.24.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 20:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:81:f3:66:11:a0:68:b2:a9:b2:96:9c:5f:f7:b4:62:5f:a9:f3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
        Validity
            Not Before: Jun 10 20:55:00 2025 GMT
            Not After : Jun  9 21:00:00 2026 GMT
        Subject: CN=15F3E9253AE5ABDE22DD02841A429F63F03B29CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:e1:75:25:06:d5:c9:1a:6f:59:b9:a6:10:
                    48:3b:16:81:38:52:25:58:08:35:84:ec:47:5e:c9:
                    ff:ca:ca:25:da:2c:e1:de:96:ec:d2:67:4a:b7:23:
                    04:ed:e3:a7:f6:79:a9:c5:5c:84:06:b2:1d:4a:32:
                    28:d6:e5:1e:34:c3:95:2c:fc:d2:73:2f:64:6c:7b:
                    14:f3:f2:6c:4a:42:03:43:8a:aa:1b:71:cf:c6:47:
                    6a:24:c1:a1:6e:7e:80:12:20:2b:cb:52:5f:62:97:
                    cd:ad:fc:3f:66:ce:ea:0b:45:d0:ef:c4:37:1f:8f:
                    25:5d:ea:21:a3:e7:e1:41:d8:96:66:09:65:ee:7b:
                    c0:bd:7b:18:b2:80:19:24:23:12:0a:8b:f3:16:87:
                    2e:7d:d4:b0:54:fb:13:c2:bf:2a:2a:f6:03:92:12:
                    c2:c3:46:3b:11:10:44:1c:ba:83:d8:99:f7:a4:39:
                    c4:3b:97:27:e4:63:17:70:5e:be:91:a8:90:d9:99:
                    7b:53:9e:51:97:33:44:7f:2c:6b:01:0b:fe:81:2b:
                    2e:f5:c1:77:68:8d:62:47:54:60:e6:26:83:a3:32:
                    88:df:1d:39:a2:0f:54:ee:1e:3d:08:7e:6c:ff:fd:
                    a8:e6:a3:8b:0d:5d:93:8d:5e:5b:17:7d:6c:57:9b:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F3:E9:25:3A:E5:AB:DE:22:DD:02:84:1A:42:9F:63:F0:3B:29:CE
            X509v3 Authority Key Identifier:
                keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e322e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:cc:ff:4f:77:a6:dc:03:b6:e3:a6:db:00:c3:6f:2e:40:65:
         d1:db:63:90:0b:6f:93:bf:b0:f6:62:9b:0a:30:4c:36:2d:5e:
         7b:29:7e:1f:c8:d2:38:4f:34:df:e4:ed:7c:0f:52:5b:fd:60:
         e6:bc:c8:44:4b:c5:1d:1c:b8:b7:1f:d7:7f:a9:33:bf:93:fa:
         1d:b9:b6:ce:34:3d:15:ed:2c:6e:ca:5c:fa:13:57:0f:07:dd:
         94:bc:0d:f8:0a:f6:91:86:6e:77:16:15:32:51:d7:d2:fd:61:
         b0:7f:29:51:f3:13:8e:8b:53:7c:5e:76:f1:25:2c:dd:be:43:
         91:82:a1:9f:2c:69:b4:bb:81:17:2c:45:31:02:78:a4:7c:a2:
         25:9e:00:52:c8:28:9a:be:75:13:79:db:a1:1c:bb:3a:3e:14:
         aa:8e:db:f6:10:ad:bb:c3:c2:6a:e9:fd:1c:68:2a:3a:3d:fd:
         4a:73:86:23:83:a7:14:2c:be:8e:49:a9:e4:68:b5:3c:fe:a4:
         5d:10:73:eb:56:d0:9d:2d:83:12:04:8a:f8:7a:ad:9b:54:af:
         a4:ad:35:c0:31:15:f7:74:63:c8:3f:0f:7b:16:d6:c8:31:da:
         97:60:83:f2:5e:74:bc:f7:75:fd:a2:9e:a8:e1:b3:5c:89:31:
         76:1a:ec:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:26:35 2025 by rpki-client