Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e3132312e302f32342d3234203d3e203532343434.roa
File:                     3230302e34312e3132312e302f32342d3234203d3e203532343434.roa (raw, json)
Hash identifier:          jPgCSPcSJhOX/cbpezzu769eXUuR8uY8D+45Wd3gl7Y=
Subject key identifier:   48:BD:58:0F:F4:25:F7:BE:C0:1A:08:F1:CA:1E:5D:EE:04:2A:65:11
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       0E91D7DE2A1EB5A272E490139B3944B4F72C0504
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e3132312e302f32342d3234203d3e203532343434.roa
Signing time:             Tue 04 Feb 2025 18:41:49 +0000
ROA not before:           Tue 04 Feb 2025 18:36:49 +0000
ROA not after:            Tue 03 Feb 2026 18:41:49 +0000
asID:                     52444
IP address blocks:        200.41.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 10 Feb 2025 12:15:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:91:d7:de:2a:1e:b5:a2:72:e4:90:13:9b:39:44:b4:f7:2c:05:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:49 2025 GMT
            Not After : Feb  3 18:41:49 2026 GMT
        Subject: CN=48BD580FF425F7BEC01A08F1CA1E5DEE042A6511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:ad:15:02:b7:47:0d:16:08:62:09:98:14:
                    3a:13:54:e8:dc:ef:68:31:ad:3d:25:f0:ab:c9:e5:
                    ac:0a:de:fc:8e:da:79:9a:87:3d:25:bf:5f:70:c4:
                    02:0a:30:a8:9f:3c:a7:cb:25:40:c1:59:69:e0:9c:
                    10:9f:8b:1b:c0:12:9d:fc:11:15:30:88:5b:21:b1:
                    9e:91:94:1c:c6:84:55:5d:bd:07:2e:53:5f:4a:89:
                    4f:51:3a:f3:97:f4:4d:13:8d:0b:89:fe:1d:8c:16:
                    f5:3c:04:6a:39:9d:6c:c2:0d:f8:07:8d:c3:64:78:
                    03:cc:d0:ab:0d:80:0a:d3:39:94:97:7b:a2:fc:b6:
                    a7:01:a9:48:d3:fa:2e:c2:86:a6:a1:c5:93:8f:42:
                    89:fb:f0:90:08:4b:74:2a:09:56:b9:69:1a:22:d0:
                    54:44:ae:d1:8b:6c:1e:f6:a2:48:11:ea:ec:c7:46:
                    81:81:15:b7:ab:c6:89:52:d9:26:f1:27:e5:86:c6:
                    7e:9e:af:b1:05:5c:1f:07:d5:45:76:d0:60:79:ee:
                    b6:d0:e1:bd:cf:cb:bd:13:62:8d:c7:04:12:63:c9:
                    e9:8d:49:f1:c6:e1:c7:82:7b:f9:e4:9e:24:b8:8e:
                    15:8f:1a:6a:8b:41:bc:da:e6:26:e3:eb:00:bb:3d:
                    33:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BD:58:0F:F4:25:F7:BE:C0:1A:08:F1:CA:1E:5D:EE:04:2A:65:11
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e3132312e302f32342d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.41.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:c6:ae:49:49:2c:3e:5a:b8:7b:49:07:f6:f3:9b:cb:fd:fd:
         c2:31:62:1e:40:6b:87:95:6d:2d:5f:2e:36:26:38:33:6e:d7:
         1f:94:02:54:88:bb:b1:78:9b:35:72:51:14:27:01:ab:6b:5b:
         a8:78:48:6e:06:30:8a:ed:8c:f4:37:4f:8c:d5:dd:dd:3b:49:
         c1:d4:3c:85:95:31:33:49:67:ce:3a:31:e4:72:6a:33:51:2e:
         a0:a5:c4:13:4c:2c:9f:03:75:f7:c3:f7:8e:92:02:a3:b1:7e:
         84:51:fd:cb:34:c3:85:df:6b:5b:33:ac:ca:e1:0d:f5:3f:2d:
         cb:8c:33:8c:d0:18:c5:74:30:8d:94:06:87:4e:d6:ad:93:c0:
         7e:ca:68:ef:71:bc:2c:4e:f0:88:e8:9a:e9:f0:d4:84:d5:26:
         37:6b:5b:98:d6:5a:0d:41:74:3e:e5:67:81:50:bb:e3:a6:e6:
         f6:79:90:25:3c:85:e0:3d:d6:85:73:bc:1c:d2:5e:a8:06:b7:
         50:58:67:fa:05:25:cf:09:83:e7:40:65:8c:84:ae:45:f6:ef:
         ba:cf:38:ed:6d:1e:1b:af:da:c5:b1:b3:0a:11:70:78:58:f7:
         1b:a5:f8:31:18:51:5f:b4:8b:bb:c1:c2:2c:ed:68:91:b9:a7:
         f6:0d:f0:cc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDpHX3ioetaJy5JATmzlEtPcsBQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNTAyMDQxODM2NDlaFw0yNjAyMDMxODQxNDlaMDMxMTAvBgNV
BAMTKDQ4QkQ1ODBGRjQyNUY3QkVDMDFBMDhGMUNBMUU1REVFMDQyQTY1MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WK0VArdHDRYIYgmYFDoTVOjc
72gxrT0l8KvJ5awK3vyO2nmahz0lv19wxAIKMKifPKfLJUDBWWngnBCfixvAEp38
ERUwiFshsZ6RlBzGhFVdvQcuU19KiU9ROvOX9E0TjQuJ/h2MFvU8BGo5nWzCDfgH
jcNkeAPM0KsNgArTOZSXe6L8tqcBqUjT+i7ChqahxZOPQon78JAIS3QqCVa5aRoi
0FRErtGLbB72okgR6uzHRoGBFberxolS2SbxJ+WGxn6er7EFXB8H1UV20GB57rbQ
4b3Py70TYo3HBBJjyemNSfHG4ceCe/nkniS4jhWPGmqLQbza5ibj6wC7PTOdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUSL1YD/Ql977AGgjxyh5d7gQqZREwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDJlMzQzMTJlMzEzMjMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgpeTAN
BgkqhkiG9w0BAQsFAAOCAQEAbsauSUksPlq4e0kH9vOby/39wjFiHkBrh5VtLV8u
NiY4M27XH5QCVIi7sXibNXJRFCcBq2tbqHhIbgYwiu2M9DdPjNXd3TtJwdQ8hZUx
M0lnzjox5HJqM1EuoKXEE0wsnwN198P3jpICo7F+hFH9yzTDhd9rWzOsyuEN9T8t
y4wzjNAYxXQwjZQGh07WrZPAfspo73G8LE7wiOia6fDUhNUmN2tbmNZaDUF0PuVn
gVC746bm9nmQJTyF4D3WhXO8HNJeqAa3UFhn+gUlzwmD50BljISuRfbvus847W0e
G6/axbGzChFweFj3G6X4MRhRX7SLu8HCLO1okbmn9g3wzA==
-----END CERTIFICATE-----
Generated at Sun Feb 9 14:09:30 2025 by rpki-client