Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e32302e302f32342d3234203d3e203230323037.roa
File:                     3230302e34312e32302e302f32342d3234203d3e203230323037.roa (raw, json)
Hash identifier:          puuiXcedFQnYbNDIPGRa64aRsPORu+uFEH6Mc9kkZK0=
Subject key identifier:   5D:E1:60:33:DC:FB:C4:5A:AA:7F:27:A0:10:CA:F3:C0:76:70:73:A2
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       3501E9709672767683E6C21C408528FAF654F6CD
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e32302e302f32342d3234203d3e203230323037.roa
Signing time:             Tue 04 Feb 2025 18:41:45 +0000
ROA not before:           Tue 04 Feb 2025 18:36:45 +0000
ROA not after:            Tue 03 Feb 2026 18:41:45 +0000
asID:                     20207
IP address blocks:        200.41.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:01:e9:70:96:72:76:76:83:e6:c2:1c:40:85:28:fa:f6:54:f6:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:45 2025 GMT
            Not After : Feb  3 18:41:45 2026 GMT
        Subject: CN=5DE16033DCFBC45AAA7F27A010CAF3C0767073A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:25:27:b5:ea:34:40:0d:1d:f9:cb:da:93:
                    14:60:6e:5c:11:f4:4f:6b:a3:b9:52:47:cd:fd:44:
                    90:99:24:1e:5f:f6:de:b9:b1:fd:82:c3:25:a3:fb:
                    e1:49:78:6f:07:7c:53:e0:77:c2:4c:e0:97:63:aa:
                    ce:96:49:b5:2a:1f:c4:e9:00:9d:2a:8e:37:8c:74:
                    b9:44:a7:91:21:f0:7e:25:22:3f:5d:0c:d3:63:f3:
                    40:07:58:d7:8a:4a:2a:79:3e:5e:71:e9:a7:77:0d:
                    f9:f8:f4:1a:21:55:8e:55:39:ef:84:c0:00:37:5e:
                    b4:f5:c6:5a:a6:76:0f:aa:59:d4:20:0e:20:cb:56:
                    32:c4:c3:db:93:0b:92:11:43:91:50:28:73:6e:db:
                    40:7b:b0:4c:8c:cf:26:aa:aa:5e:00:3a:35:06:1c:
                    e2:8f:08:0b:b9:b8:67:71:bf:ca:69:db:ee:ac:44:
                    99:84:b4:63:3d:90:ea:9f:9a:b4:63:99:22:be:e8:
                    4d:db:a5:9e:a5:a5:a4:93:55:9a:b2:c7:99:a8:a7:
                    2b:50:32:99:1c:87:0d:f3:25:a8:59:3b:69:21:bb:
                    0c:b0:f5:ab:da:d9:1e:63:ca:31:54:fa:4d:b6:d9:
                    c2:b6:aa:20:0f:c0:d6:11:f5:d5:0e:f4:37:57:21:
                    a7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E1:60:33:DC:FB:C4:5A:AA:7F:27:A0:10:CA:F3:C0:76:70:73:A2
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e32302e302f32342d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.41.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:81:7b:14:23:e6:c0:fb:bf:58:9e:af:5a:fb:69:fc:38:f4:
         07:ff:b9:ca:41:61:7b:36:c6:ae:39:a3:65:e6:ab:ee:2d:f0:
         9e:13:48:46:4d:80:7a:f2:be:08:db:62:3f:b3:9c:bb:17:b0:
         bf:c9:cc:32:5d:e3:13:e8:18:aa:bd:55:c1:a2:0d:bb:eb:9a:
         af:b0:2a:a7:80:29:ae:52:a1:af:cc:12:46:59:65:aa:4d:61:
         64:c4:dc:d6:a8:fa:10:ac:e2:2c:11:fa:51:dc:31:73:6f:8d:
         1c:47:cc:95:a7:fd:d9:a1:91:0a:54:0c:1b:56:8f:98:a8:d8:
         e4:0d:2a:74:de:0c:7b:d4:58:ed:89:d2:8e:b7:19:77:50:ab:
         ab:75:8d:7b:f3:80:ef:67:9b:b5:df:45:6d:e4:f9:3f:57:18:
         ff:81:6c:26:ae:48:be:16:2e:8e:b1:62:1a:bb:b9:61:bf:5d:
         9e:7f:6d:f2:98:5b:f1:a1:6d:6e:fb:67:17:8e:8c:ff:30:20:
         5c:c3:22:3d:a5:d4:15:0d:75:c3:7b:b6:53:82:c8:18:96:d0:
         a2:ac:9f:72:f8:dd:06:a4:e8:de:39:db:30:65:87:24:6f:1c:
         6d:bc:de:7e:e6:38:d8:78:48:9e:ca:04:aa:89:e2:0b:51:5d:
         74:ad:2b:04
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNQHpcJZydnaD5sIcQIUo+vZU9s0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNTAyMDQxODM2NDVaFw0yNjAyMDMxODQxNDVaMDMxMTAvBgNV
BAMTKDVERTE2MDMzRENGQkM0NUFBQTdGMjdBMDEwQ0FGM0MwNzY3MDczQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqUCUnteo0QA0d+cvakxRgblwR
9E9ro7lSR839RJCZJB5f9t65sf2CwyWj++FJeG8HfFPgd8JM4Jdjqs6WSbUqH8Tp
AJ0qjjeMdLlEp5Eh8H4lIj9dDNNj80AHWNeKSip5Pl5x6ad3Dfn49BohVY5VOe+E
wAA3XrT1xlqmdg+qWdQgDiDLVjLEw9uTC5IRQ5FQKHNu20B7sEyMzyaqql4AOjUG
HOKPCAu5uGdxv8pp2+6sRJmEtGM9kOqfmrRjmSK+6E3bpZ6lpaSTVZqyx5mopytQ
Mpkchw3zJahZO2khuwyw9ava2R5jyjFU+k222cK2qiAPwNYR9dUO9DdXIadRAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUXeFgM9z7xFqqfyegEMrzwHZwc6IwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDJlMzQzMTJlMzIzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMjMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIKRQwDQYJ
KoZIhvcNAQELBQADggEBAC+BexQj5sD7v1ier1r7afw49Af/ucpBYXs2xq45o2Xm
q+4t8J4TSEZNgHryvgjbYj+znLsXsL/JzDJd4xPoGKq9VcGiDbvrmq+wKqeAKa5S
oa/MEkZZZapNYWTE3Nao+hCs4iwR+lHcMXNvjRxHzJWn/dmhkQpUDBtWj5io2OQN
KnTeDHvUWO2J0o63GXdQq6t1jXvzgO9nm7XfRW3k+T9XGP+BbCauSL4WLo6xYhq7
uWG/XZ5/bfKYW/GhbW77ZxeOjP8wIFzDIj2l1BUNdcN7tlOCyBiW0KKsn3L43Qak
6N452zBlhyRvHG283n7mONh4SJ7KBKqJ4gtRXXStKwQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:49 2025 by rpki-client