Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e342e302f32342d3234203d3e20323632353839.roa
File:                     3230302e32342e342e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          /cq/M3M2PBJx0XRNTOLE/4/zdKmI/6CURhYvAxoiK3k=
Subject key identifier:   EF:AB:BE:96:AA:A1:C1:B2:B8:E6:3E:4C:8C:38:1A:09:88:15:12:6B
Certificate issuer:       /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Certificate serial:       58CCD65DD0A45D2991DBD7D79AB1C58ACA73066A
Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e342e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 10 Jun 2025 21:00:00 +0000
ROA not before:           Tue 10 Jun 2025 20:55:00 +0000
ROA not after:            Tue 09 Jun 2026 21:00:00 +0000
asID:                     262589
IP address blocks:        200.24.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 20:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cc:d6:5d:d0:a4:5d:29:91:db:d7:d7:9a:b1:c5:8a:ca:73:06:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
        Validity
            Not Before: Jun 10 20:55:00 2025 GMT
            Not After : Jun  9 21:00:00 2026 GMT
        Subject: CN=EFABBE96AAA1C1B2B8E63E4C8C381A098815126B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:95:50:57:0a:d2:d3:1f:73:38:f3:52:49:
                    af:7a:44:e4:37:21:78:e0:e4:fc:50:e8:2a:e6:68:
                    5c:48:b0:aa:a6:98:15:87:28:72:0f:79:28:65:f2:
                    a3:74:04:77:c2:ad:42:94:a2:31:12:e1:72:5e:97:
                    26:ec:da:a9:78:97:3c:77:a3:2f:b5:b9:f4:cc:24:
                    6f:11:b3:0a:27:a5:27:34:97:87:f5:91:e0:a7:4c:
                    4c:b4:34:30:90:5a:03:75:bf:04:d8:7e:f7:1a:3b:
                    52:f3:31:68:9a:8e:62:ed:2f:ec:d2:eb:54:75:5a:
                    58:a8:bb:3e:b4:57:53:09:b7:03:bf:45:60:8d:31:
                    b0:6c:65:12:56:69:a9:4b:4f:50:49:e4:54:62:6c:
                    77:63:46:aa:31:99:9b:c7:aa:4f:7a:85:1a:67:86:
                    dd:20:fd:41:30:41:97:c5:b0:95:c7:96:50:ee:40:
                    8e:77:73:4b:91:b7:01:ce:83:95:ff:db:90:6d:aa:
                    37:b9:21:47:37:99:51:12:e5:32:52:c0:3f:ed:e6:
                    e0:34:46:75:78:49:7b:8b:26:9e:40:e1:aa:f8:68:
                    4b:79:4a:2c:63:da:4c:57:d1:b1:ba:8a:63:ed:90:
                    11:bf:a9:05:0a:d9:d0:ef:c0:a7:c1:4b:81:25:10:
                    9a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AB:BE:96:AA:A1:C1:B2:B8:E6:3E:4C:8C:38:1A:09:88:15:12:6B
            X509v3 Authority Key Identifier:
                keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e342e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:3c:10:1f:9e:21:b0:0c:b8:87:b1:57:3c:07:97:fa:03:db:
         f5:c7:d3:ae:5c:96:90:83:f6:71:70:a2:10:1d:46:28:a7:fb:
         cf:c7:ac:98:70:e2:bb:1c:14:c5:f0:a0:89:38:fd:9f:3e:d0:
         03:72:56:5d:2f:3c:ab:6d:ac:b2:c4:5e:cd:90:f1:f2:fb:28:
         2b:6d:90:60:e4:8b:19:b0:92:90:b1:62:26:75:9e:7d:4d:f6:
         04:21:72:4c:e2:a1:53:69:ea:df:ce:a1:08:f4:e2:b5:a1:f7:
         a0:55:c0:8b:e7:dd:8f:f7:12:1c:b4:05:ad:ca:db:99:cf:57:
         65:c9:03:c7:6c:f8:ca:14:c0:2c:67:21:a3:fd:3a:e1:7d:e1:
         6d:a5:ed:0c:1c:ef:df:30:e5:c0:4d:bc:ca:68:06:c1:07:1a:
         9b:21:bc:61:96:98:a1:a4:05:c0:c7:12:24:16:70:76:56:27:
         ee:82:37:e3:f9:7d:1a:5d:28:5a:4e:f5:6b:dc:9a:87:13:7a:
         d5:6b:b3:08:37:f5:72:0b:0b:21:5f:a0:ad:dc:f7:32:2e:9c:
         60:bd:f4:2f:9c:6c:f3:65:67:e1:d6:e6:46:42:9a:99:89:28:
         67:8d:7c:d9:0d:30:51:a1:70:93:25:eb:61:14:bc:88:c4:47:
         fe:a0:e6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:26:33 2025 by rpki-client