Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e36362e302f32332d3234203d3e203133353931.roa
File:                     3230302e33322e36362e302f32332d3234203d3e203133353931.roa (raw, json)
Hash identifier:          C9SCsv3DXo9jVTqithuyKkctYMKUkaVdVdUkTmka5s8=
Subject key identifier:   48:F9:B9:FE:5F:EF:36:A6:93:98:C1:C9:C8:AC:D7:87:73:CE:22:74
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       5AA3822D5CA5F050689BD36CADC8BB2E2B627551
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e36362e302f32332d3234203d3e203133353931.roa
Signing time:             Tue 04 Feb 2025 18:41:39 +0000
ROA not before:           Tue 04 Feb 2025 18:36:39 +0000
ROA not after:            Tue 03 Feb 2026 18:41:39 +0000
asID:                     13591
IP address blocks:        200.32.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a3:82:2d:5c:a5:f0:50:68:9b:d3:6c:ad:c8:bb:2e:2b:62:75:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:39 2025 GMT
            Not After : Feb  3 18:41:39 2026 GMT
        Subject: CN=48F9B9FE5FEF36A69398C1C9C8ACD78773CE2274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:09:3f:d2:da:07:46:35:32:e4:37:80:8e:e2:
                    94:b8:64:89:7d:3e:59:0b:a8:ca:9f:ac:8d:86:bc:
                    6f:4b:d7:db:7c:3a:9f:ba:31:f6:1c:5d:3e:77:77:
                    05:14:18:36:de:35:a8:6b:ab:a6:81:ca:f2:26:98:
                    67:38:76:0c:a1:ae:4d:71:fd:94:13:6b:1f:da:f1:
                    f2:e5:52:8d:56:93:4c:f4:a8:e3:38:0c:e8:00:5e:
                    78:c1:fd:47:b4:d0:20:d3:3d:d6:ed:44:1a:c8:04:
                    ea:cd:d9:aa:85:2c:80:4f:14:2a:27:8b:fc:32:10:
                    7d:96:bc:56:0c:58:e4:df:6f:b6:59:be:7b:c9:07:
                    7b:10:c6:33:1d:1c:11:87:31:0b:e2:8c:3b:3b:0c:
                    a7:08:f4:75:55:f2:81:a6:2a:fd:54:ae:2b:2a:86:
                    4c:73:af:71:08:da:22:e9:f9:da:e0:32:91:92:b0:
                    56:44:51:22:e7:3f:cd:2c:9b:ab:ea:dd:b3:db:80:
                    30:33:d2:a3:a7:c8:0a:11:71:70:73:9b:23:67:1d:
                    d4:be:1c:b3:41:19:e7:e9:4b:fc:b5:59:ec:9b:51:
                    cf:10:32:d2:12:86:25:d0:22:cd:89:68:0d:55:b7:
                    e2:de:b8:ff:75:50:29:00:e3:af:38:47:90:06:d8:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F9:B9:FE:5F:EF:36:A6:93:98:C1:C9:C8:AC:D7:87:73:CE:22:74
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e36362e302f32332d3234203d3e203133353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:a1:ea:44:3d:07:1d:a6:d6:7e:b7:b4:44:bd:de:c6:ef:
         b9:eb:aa:ce:ee:a5:db:6d:8a:14:cb:91:d6:4f:61:53:f0:83:
         38:78:71:95:b1:c5:97:12:9d:56:01:d4:f2:b1:50:be:e2:2e:
         e2:45:77:7c:f9:f3:1d:0a:b3:36:dd:90:c1:a6:86:ee:44:3c:
         82:0d:9e:e4:fb:db:d5:f8:bf:98:5f:3e:96:68:fe:be:1a:4d:
         17:40:27:5f:5e:05:f4:ea:25:43:e2:0b:da:84:81:5d:fc:25:
         62:62:ff:b9:94:8b:32:0a:ba:3a:66:3d:0c:a5:ec:a0:d5:82:
         85:23:13:09:ed:ec:d7:ed:3f:6b:7b:2b:60:2e:a0:8f:70:2a:
         78:94:85:3d:f5:2d:8a:c6:d0:55:94:c4:ba:82:50:55:5c:13:
         a9:34:fb:ee:f8:9f:0f:3d:05:d4:93:54:8c:b3:e6:57:c4:e1:
         cc:ea:be:65:43:1a:fb:a0:df:a4:9f:59:66:81:48:6f:2c:62:
         55:77:83:b9:81:33:0b:e2:03:a7:11:34:b0:82:d6:f9:df:c4:
         f0:ca:b3:fc:c5:b0:25:9c:06:9a:b0:a5:24:65:d1:48:e6:ea:
         e7:f4:d0:dc:f1:8a:99:92:3f:49:ed:28:68:79:3f:c3:44:8c:
         ea:05:88:0c
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUWqOCLVyl8FBom9Nsrci7LitidVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNTAyMDQxODM2MzlaFw0yNjAyMDMxODQxMzlaMDMxMTAvBgNV
BAMTKDQ4RjlCOUZFNUZFRjM2QTY5Mzk4QzFDOUM4QUNENzg3NzNDRTIyNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXCT/S2gdGNTLkN4CO4pS4ZIl9
PlkLqMqfrI2GvG9L19t8Op+6MfYcXT53dwUUGDbeNahrq6aByvImmGc4dgyhrk1x
/ZQTax/a8fLlUo1Wk0z0qOM4DOgAXnjB/Ue00CDTPdbtRBrIBOrN2aqFLIBPFCon
i/wyEH2WvFYMWOTfb7ZZvnvJB3sQxjMdHBGHMQvijDs7DKcI9HVV8oGmKv1Urisq
hkxzr3EI2iLp+drgMpGSsFZEUSLnP80sm6vq3bPbgDAz0qOnyAoRcXBzmyNnHdS+
HLNBGefpS/y1WeybUc8QMtIShiXQIs2JaA1Vt+LeuP91UCkA4684R5AG2Px7AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUSPm5/l/vNqaTmMHJyKzXh3POInQwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDJlMzMzMjJlMzYzNjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzNTM5MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHIIEIwDQYJ
KoZIhvcNAQELBQADggEBAHiOoepEPQcdptZ+t7REvd7G77nrqs7updttihTLkdZP
YVPwgzh4cZWxxZcSnVYB1PKxUL7iLuJFd3z58x0KszbdkMGmhu5EPIINnuT729X4
v5hfPpZo/r4aTRdAJ19eBfTqJUPiC9qEgV38JWJi/7mUizIKujpmPQyl7KDVgoUj
Ewnt7NftP2t7K2AuoI9wKniUhT31LYrG0FWUxLqCUFVcE6k0++74nw89BdSTVIyz
5lfE4czqvmVDGvug36SfWWaBSG8sYlV3g7mBMwviA6cRNLCC1vnfxPDKs/zFsCWc
BpqwpSRl0Ujm6uf00NzxipmSP0ntKGh5P8NEjOoFiAw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:08:58 2025 by rpki-client