Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/3230302e31302e322e302f32342d3234203d3e203237383533.roa
File:                     3230302e31302e322e302f32342d3234203d3e203237383533.roa (raw, json)
Hash identifier:          gzFV9jznq1z7Mj9XufHG3v6M9LKTYXHmnjDsas/6kDU=
Subject key identifier:   13:08:66:C6:78:7D:F3:7D:D4:95:D9:D1:46:56:23:60:96:C7:AF:90
Certificate issuer:       /CN=979EB6F46297D1850B9D5762A6C41CE6DCD9773E
Certificate serial:       7E2400C5B398B3CCD24FE6D8D1C01236F3972F13
Authority key identifier: 97:9E:B6:F4:62:97:D1:85:0B:9D:57:62:A6:C4:1C:E6:DC:D9:77:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/3230302e31302e322e302f32342d3234203d3e203237383533.roa
Signing time:             Fri 09 May 2025 01:18:08 +0000
ROA not before:           Fri 09 May 2025 01:13:08 +0000
ROA not after:            Fri 08 May 2026 01:18:08 +0000
asID:                     27853
IP address blocks:        200.10.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 13:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:24:00:c5:b3:98:b3:cc:d2:4f:e6:d8:d1:c0:12:36:f3:97:2f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979EB6F46297D1850B9D5762A6C41CE6DCD9773E
        Validity
            Not Before: May  9 01:13:08 2025 GMT
            Not After : May  8 01:18:08 2026 GMT
        Subject: CN=130866C6787DF37DD495D9D14656236096C7AF90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b6:76:3f:6b:1d:87:91:bd:04:7b:04:04:aa:
                    f2:e6:25:e3:d7:9d:f3:af:b7:e2:98:ca:19:89:c8:
                    b5:42:46:35:58:d2:1e:62:0f:82:ae:d9:13:5a:4f:
                    e0:df:b6:e5:72:f9:e3:62:8c:8c:c6:b1:f4:04:7d:
                    a6:72:5a:28:89:f1:81:2c:95:a3:2e:f9:6d:39:f3:
                    65:c2:1f:02:82:36:1c:7c:1d:dd:82:f6:96:2f:b7:
                    4a:ff:3f:4d:43:c9:2c:97:ed:7e:d8:e7:8a:a4:5d:
                    4f:bc:01:4d:b8:f2:f9:7a:18:d2:20:62:47:6b:b5:
                    5c:9a:f2:8c:e7:75:e8:64:71:fa:b4:38:13:12:a9:
                    dc:be:a7:6b:d0:c4:d9:6e:96:1f:f6:09:f7:f4:2b:
                    60:cc:67:6b:d6:28:ed:a1:04:f0:58:76:31:48:ea:
                    c6:99:66:fe:48:fb:cd:18:87:4f:92:42:ed:3c:0d:
                    73:48:24:ff:1b:f9:d4:9a:80:69:3d:87:19:e2:65:
                    29:fc:f9:2b:1e:68:ff:c8:f1:df:57:c6:df:b3:0f:
                    89:d6:45:f8:d3:23:ca:89:c4:2c:72:8e:76:44:a2:
                    17:48:d7:72:ca:8c:ac:ed:7c:8d:23:f2:1d:e5:49:
                    4b:45:88:37:a0:41:ae:ce:c4:31:9d:a2:c7:90:83:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:08:66:C6:78:7D:F3:7D:D4:95:D9:D1:46:56:23:60:96:C7:AF:90
            X509v3 Authority Key Identifier:
                keyid:97:9E:B6:F4:62:97:D1:85:0B:9D:57:62:A6:C4:1C:E6:DC:D9:77:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979EB6F46297D1850B9D5762A6C41CE6DCD9773E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF5D727D5C283FFE4055BBDF2A0F15CE07FFE8BE211386EEE2AC29811B57757B/0/3230302e31302e322e302f32342d3234203d3e203237383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:30:d5:ac:8c:ad:e5:12:23:40:0a:b0:81:22:66:a5:25:3b:
         72:c2:0e:5f:34:7f:63:e0:50:32:37:e7:d6:37:7b:ce:69:fc:
         85:8c:b5:fa:15:92:0a:f3:5a:cb:76:e3:00:a5:2f:44:9a:fe:
         c1:0d:5b:06:c5:45:a5:fb:f2:c8:28:6c:8d:dc:3f:f8:51:cd:
         83:2a:d7:91:70:02:90:f4:63:d4:0f:ef:a7:90:87:b2:03:87:
         b4:e5:df:98:57:dc:85:53:ed:97:d1:ed:0a:23:92:01:9e:ac:
         fa:cd:ba:43:27:59:b5:06:32:45:22:0d:95:c4:b2:fd:4f:4a:
         79:81:3e:61:b0:42:d6:61:75:13:b0:b7:f5:a9:83:18:9b:45:
         35:ac:b6:83:84:f5:48:f7:88:02:49:89:ac:13:c5:f3:57:7f:
         cb:ba:44:de:78:63:aa:84:be:f2:f3:a9:a2:bd:53:bc:1f:24:
         eb:60:a8:96:4e:4b:7f:2c:1f:6c:7b:c8:5b:a7:9c:76:54:e5:
         f7:91:57:3a:0e:01:d7:29:d6:09:00:30:dc:3e:03:05:5e:92:
         d7:91:82:16:47:8c:3e:ce:97:4d:a8:99:5f:e1:91:d6:8a:b3:
         5d:19:90:bb:83:32:b1:14:a8:f0:06:1c:58:6b:ac:ea:78:5f:
         ca:ec:b0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:12:19 2025 by rpki-client