Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3138382e302f32342d3234203d3e203232363938.roa
File:                     3230312e3233342e3138382e302f32342d3234203d3e203232363938.roa (raw, json)
Hash identifier:          i+v8DnigAQwV9CY0+8C1SuGrpocExk4fylgyOb+W4QA=
Subject key identifier:   71:B2:4E:67:C5:01:BB:91:B7:4C:7A:6D:78:DC:FA:8F:B2:B1:AF:62
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       684A4D68DABE24D0DFFD3ED0213047A75CB6C5A5
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3138382e302f32342d3234203d3e203232363938.roa
Signing time:             Tue 04 Feb 2025 18:41:26 +0000
ROA not before:           Tue 04 Feb 2025 18:36:26 +0000
ROA not after:            Tue 03 Feb 2026 18:41:26 +0000
asID:                     22698
IP address blocks:        201.234.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4a:4d:68:da:be:24:d0:df:fd:3e:d0:21:30:47:a7:5c:b6:c5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:26 2025 GMT
            Not After : Feb  3 18:41:26 2026 GMT
        Subject: CN=71B24E67C501BB91B74C7A6D78DCFA8FB2B1AF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:ef:fa:96:11:c4:53:3f:52:fd:81:89:bf:
                    be:5b:f7:8b:5b:ed:fd:6a:7f:aa:34:54:d8:5a:34:
                    b8:db:7c:c9:a6:ee:36:54:84:6d:18:b5:b8:17:3b:
                    f5:fa:68:0c:4c:86:4d:b0:1a:2c:89:4d:91:11:0b:
                    11:8d:80:0d:b6:4f:a9:ee:36:42:a9:84:3b:1f:fd:
                    27:7f:bd:7e:81:25:4d:89:f1:89:60:9e:30:b0:f0:
                    78:a5:18:a3:43:b0:90:7d:cd:5b:c8:a9:a6:b6:4d:
                    b7:53:b7:eb:53:5a:14:a1:e3:12:fa:f3:1e:d9:dd:
                    13:8b:8a:6a:6f:e2:c3:e4:ca:b8:84:0b:d9:e3:da:
                    c2:5e:3c:48:b5:51:83:c8:19:c0:c7:97:01:f5:85:
                    9f:a1:39:0e:d4:d2:a1:82:de:b3:35:5c:0c:7a:b8:
                    d2:73:c5:87:88:07:2b:29:af:e3:4a:99:4f:03:59:
                    a0:b2:97:4f:0c:6f:cc:bd:4c:3d:29:82:bf:98:c9:
                    52:1a:78:68:51:ce:56:89:4c:e4:45:5c:af:81:5b:
                    72:4e:2e:b6:22:fe:f8:e2:f1:5c:a0:3f:e4:3a:98:
                    fe:7f:86:5a:96:14:f0:a2:47:86:57:93:e4:2d:81:
                    50:9e:0a:53:4d:b6:18:21:10:78:52:90:42:63:16:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B2:4E:67:C5:01:BB:91:B7:4C:7A:6D:78:DC:FA:8F:B2:B1:AF:62
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3138382e302f32342d3234203d3e203232363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:63:72:0e:75:34:cb:fe:8e:09:fe:e5:22:0b:ff:4b:54:73:
         1f:32:4d:32:dd:af:e4:5c:26:a0:08:9d:eb:7c:82:20:2a:de:
         c4:08:fa:07:db:d4:1e:4c:5b:ae:a9:9b:c1:05:43:ec:bb:71:
         f0:f6:10:00:36:86:13:44:6f:61:03:5c:32:e4:8f:ac:c9:5b:
         22:aa:46:fa:fe:bf:56:54:3a:10:30:37:4e:3d:80:f2:2e:03:
         7a:3f:44:28:2a:00:37:f9:86:2f:7a:9c:c1:45:7f:da:4c:38:
         47:05:51:eb:50:18:cb:e2:7e:d2:82:e4:02:74:7c:87:ff:50:
         9a:fc:1f:3b:a2:ce:4d:8c:39:0d:78:f8:af:4e:c2:de:56:94:
         7e:00:73:6b:b8:c9:64:ea:6d:ab:41:4d:b4:e5:68:39:c3:4d:
         01:df:f8:25:55:22:c3:d8:43:89:9a:c0:a5:06:ee:4e:66:98:
         48:29:fc:4d:81:f7:29:e5:31:ca:1a:21:4b:15:66:2d:27:5a:
         13:ef:f1:dc:0a:f6:50:2e:7d:f2:84:ad:b2:26:af:2f:a3:6a:
         7c:6a:e8:a3:d8:63:6f:8b:de:26:a2:fc:f7:6d:d9:ed:b4:52:
         6f:aa:a3:ee:69:0d:f7:09:de:a2:aa:ec:90:9b:d4:ed:28:2c:
         c3:30:e3:c9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaEpNaNq+JNDf/T7QITBHp1y2xaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNTAyMDQxODM2MjZaFw0yNjAyMDMxODQxMjZaMDMxMTAvBgNV
BAMTKDcxQjI0RTY3QzUwMUJCOTFCNzRDN0E2RDc4RENGQThGQjJCMUFGNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4G+/6lhHEUz9S/YGJv75b94tb
7f1qf6o0VNhaNLjbfMmm7jZUhG0YtbgXO/X6aAxMhk2wGiyJTZERCxGNgA22T6nu
NkKphDsf/Sd/vX6BJU2J8YlgnjCw8HilGKNDsJB9zVvIqaa2TbdTt+tTWhSh4xL6
8x7Z3ROLimpv4sPkyriEC9nj2sJePEi1UYPIGcDHlwH1hZ+hOQ7U0qGC3rM1XAx6
uNJzxYeIByspr+NKmU8DWaCyl08Mb8y9TD0pgr+YyVIaeGhRzlaJTORFXK+BW3JO
LrYi/vji8VygP+Q6mP5/hlqWFPCiR4ZXk+QtgVCeClNNthghEHhSkEJjFg1nAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcbJOZ8UBu5G3THpteNz6j7Kxr2IwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMTJlMzIzMzM0MmUzMTM4Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzYzOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyeq8
MA0GCSqGSIb3DQEBCwUAA4IBAQAvY3IOdTTL/o4J/uUiC/9LVHMfMk0y3a/kXCag
CJ3rfIIgKt7ECPoH29QeTFuuqZvBBUPsu3Hw9hAANoYTRG9hA1wy5I+syVsiqkb6
/r9WVDoQMDdOPYDyLgN6P0QoKgA3+YYvepzBRX/aTDhHBVHrUBjL4n7SguQCdHyH
/1Ca/B87os5NjDkNePivTsLeVpR+AHNruMlk6m2rQU205Wg5w00B3/glVSLD2EOJ
msClBu5OZphIKfxNgfcp5THKGiFLFWYtJ1oT7/HcCvZQLn3yhK2yJq8vo2p8auij
2GNvi94movz3bdnttFJvqqPuaQ33Cd6iquyQm9TtKCzDMOPJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:51 2025 by rpki-client