Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e35352e32362e302f32342d3234203d3e203230323037.roa
File:                     3230302e35352e32362e302f32342d3234203d3e203230323037.roa (raw, json)
Hash identifier:          mNyKO46EZoAK/uFtHE0BGZ/npwBMdXnZGh23GbFMXA8=
Subject key identifier:   02:F6:83:48:7E:67:6A:06:24:4D:37:C7:EA:5E:88:25:FE:C9:9A:70
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       60165543D888F3C020AE94E0A6299732E267C667
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e35352e32362e302f32342d3234203d3e203230323037.roa
Signing time:             Tue 04 Feb 2025 18:41:47 +0000
ROA not before:           Tue 04 Feb 2025 18:36:47 +0000
ROA not after:            Tue 03 Feb 2026 18:41:47 +0000
asID:                     20207
IP address blocks:        200.55.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:16:55:43:d8:88:f3:c0:20:ae:94:e0:a6:29:97:32:e2:67:c6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:47 2025 GMT
            Not After : Feb  3 18:41:47 2026 GMT
        Subject: CN=02F683487E676A06244D37C7EA5E8825FEC99A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:5c:d4:a4:45:a2:48:3e:1e:c1:11:97:82:
                    3c:e1:dc:da:65:d2:41:52:eb:28:e4:aa:e1:00:08:
                    bb:7f:21:03:10:4a:e1:1a:27:0f:b9:6d:8d:33:4a:
                    67:a2:26:11:93:b8:17:44:1d:b9:50:a5:1a:71:32:
                    0b:70:62:d5:5a:f2:bc:17:8c:2c:ec:67:f1:5a:ed:
                    90:19:b8:ae:3e:5b:89:d0:f2:33:99:24:b2:d1:fc:
                    5d:e1:26:2b:7a:fa:fd:f9:06:4a:81:07:09:36:19:
                    54:3a:a0:f3:fd:81:6a:af:b9:0c:67:1f:24:ed:5d:
                    0c:7c:6f:a1:21:f7:27:fe:3e:9b:b8:5c:4c:fd:74:
                    b6:77:4d:92:eb:5c:e1:21:64:ec:b7:31:c7:2e:f4:
                    78:07:1c:89:93:12:6d:7f:5a:85:91:13:28:ce:c1:
                    73:80:9a:99:5d:a5:4f:31:d8:dd:fd:76:7e:47:a6:
                    a0:5e:57:51:59:48:90:a4:74:d2:05:c5:69:10:ef:
                    b3:b6:13:4b:59:bb:ca:f4:48:4a:29:c3:69:e6:fc:
                    be:bb:92:bf:a1:c6:35:6e:0e:3f:fe:da:ff:cc:7a:
                    a0:8b:ba:9f:59:a0:9c:9c:c1:73:e6:0d:b9:b4:d5:
                    72:60:94:23:c4:8b:d3:72:cf:23:42:2a:0e:bb:9a:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F6:83:48:7E:67:6A:06:24:4D:37:C7:EA:5E:88:25:FE:C9:9A:70
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e35352e32362e302f32342d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:42:e1:8e:16:6e:34:7a:ed:40:4d:bf:4d:7f:a7:b3:30:0f:
         ad:d5:81:b6:5b:65:de:68:cf:54:49:1b:01:38:af:eb:81:4d:
         bb:e5:14:d1:ff:30:eb:c7:29:ef:a6:58:e3:a9:b4:78:0a:ae:
         e0:2a:01:e1:25:74:e6:a9:44:51:db:8d:56:e2:6f:39:d5:28:
         cb:c7:59:41:4a:ee:90:36:d8:f8:41:69:a7:1c:e6:01:26:b1:
         bb:37:11:f6:2f:ab:7c:ca:84:65:d8:45:73:6a:52:3a:38:da:
         a2:d2:14:f5:e3:67:57:c3:ac:4a:e0:0b:cf:87:be:25:5b:bb:
         70:e3:48:b5:ad:13:e9:df:d3:1c:7f:0c:c6:6c:8e:df:9a:c2:
         7c:bf:a2:a0:b8:96:c8:b6:53:56:11:4f:b1:24:87:ff:b7:0d:
         94:a2:fa:2d:a3:51:c1:c3:a0:8a:24:b5:84:e1:f8:fe:49:03:
         a5:88:4a:49:94:76:6a:e3:e6:ae:2e:fe:1e:fa:33:bc:14:2e:
         b8:10:70:67:d0:46:aa:8c:6a:16:5f:8f:08:d8:ec:cb:ba:b3:
         49:fa:15:75:9f:1c:be:3e:b1:87:e4:d6:09:62:89:1f:04:8c:
         10:77:2c:03:fc:61:9d:1a:2c:6e:bc:19:6f:d7:e4:ba:7d:8e:
         c3:f3:1b:e0
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUYBZVQ9iI88AgrpTgpimXMuJnxmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNTAyMDQxODM2NDdaFw0yNjAyMDMxODQxNDdaMDMxMTAvBgNV
BAMTKDAyRjY4MzQ4N0U2NzZBMDYyNDREMzdDN0VBNUU4ODI1RkVDOTlBNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8VzUpEWiSD4ewRGXgjzh3Npl
0kFS6yjkquEACLt/IQMQSuEaJw+5bY0zSmeiJhGTuBdEHblQpRpxMgtwYtVa8rwX
jCzsZ/Fa7ZAZuK4+W4nQ8jOZJLLR/F3hJit6+v35BkqBBwk2GVQ6oPP9gWqvuQxn
HyTtXQx8b6Eh9yf+Ppu4XEz9dLZ3TZLrXOEhZOy3Mccu9HgHHImTEm1/WoWREyjO
wXOAmpldpU8x2N39dn5HpqBeV1FZSJCkdNIFxWkQ77O2E0tZu8r0SEopw2nm/L67
kr+hxjVuDj/+2v/MeqCLup9ZoJycwXPmDbm01XJglCPEi9NyzyNCKg67mpqnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUAvaDSH5nagYkTTfH6l6IJf7JmnAwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDJlMzUzNTJlMzIzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMjMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADINxowDQYJ
KoZIhvcNAQELBQADggEBAHFC4Y4WbjR67UBNv01/p7MwD63VgbZbZd5oz1RJGwE4
r+uBTbvlFNH/MOvHKe+mWOOptHgKruAqAeEldOapRFHbjVbibznVKMvHWUFK7pA2
2PhBaacc5gEmsbs3EfYvq3zKhGXYRXNqUjo42qLSFPXjZ1fDrErgC8+HviVbu3Dj
SLWtE+nf0xx/DMZsjt+awny/oqC4lsi2U1YRT7Ekh/+3DZSi+i2jUcHDoIoktYTh
+P5JA6WISkmUdmrj5q4u/h76M7wULrgQcGfQRqqMahZfjwjY7Mu6s0n6FXWfHL4+
sYfk1gliiR8EjBB3LAP8YZ0aLG68GW/X5Lp9jsPzG+A=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:56 2025 by rpki-client