Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133322e302f32342d3234203d3e203237393634.roa
File:                     3230312e34392e3133322e302f32342d3234203d3e203237393634.roa (raw, json)
Hash identifier:          1yQGZQsjO4zP4zOe+obq/7dSTPNbeMxI5KXDAySrfL4=
Subject key identifier:   C8:07:5A:76:9F:F5:F3:F8:5D:33:D9:FC:56:C1:5C:ED:95:B4:3B:C7
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       35DA135FF6EB45802AE3D6B2BEAC967CBCBA06EC
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133322e302f32342d3234203d3e203237393634.roa
Signing time:             Mon 19 May 2025 16:19:36 +0000
ROA not before:           Mon 19 May 2025 16:14:36 +0000
ROA not after:            Mon 18 May 2026 16:19:36 +0000
asID:                     27964
IP address blocks:        201.49.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 03:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:da:13:5f:f6:eb:45:80:2a:e3:d6:b2:be:ac:96:7c:bc:ba:06:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: May 19 16:14:36 2025 GMT
            Not After : May 18 16:19:36 2026 GMT
        Subject: CN=C8075A769FF5F3F85D33D9FC56C15CED95B43BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:81:45:83:cd:bc:cf:f5:94:4d:20:e7:f7:
                    e6:43:5a:4d:e6:7c:b3:3a:34:b7:b6:c7:a3:67:ee:
                    e6:7a:2a:8f:60:8b:c2:cb:90:9d:e8:61:1f:5f:a5:
                    8a:f2:40:c5:b1:97:2b:97:07:07:f0:de:c6:9b:ee:
                    ba:37:65:54:4e:75:ea:4b:14:8f:d9:fe:8b:50:81:
                    c3:ee:1c:16:3e:c0:53:28:02:64:b7:65:03:1b:f8:
                    d0:de:cd:14:da:84:69:b4:3a:66:e6:02:2f:b7:cd:
                    19:0e:47:c5:a8:4e:75:3d:f9:f5:32:09:04:1c:d7:
                    41:e6:27:f7:71:6a:23:3c:18:d1:f5:64:ea:bc:dc:
                    a2:47:e6:3f:17:f1:63:80:80:12:91:db:ac:34:23:
                    fa:dd:c0:7b:66:06:d7:6e:67:8d:11:30:07:60:d2:
                    d4:d1:8f:79:0a:2d:d5:52:30:35:ee:53:7e:77:57:
                    70:18:39:d7:3b:14:4c:93:be:47:00:82:68:e1:b6:
                    06:dd:89:e8:cc:5a:c3:58:bd:72:c6:c4:24:41:84:
                    b7:4d:1a:a4:75:a8:fb:a2:2b:25:fb:50:3b:61:23:
                    08:82:dd:f8:15:ad:37:75:85:df:aa:be:bd:e4:0b:
                    ba:8c:4d:a0:39:1d:5c:a6:ec:cf:2a:75:40:e4:bf:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:07:5A:76:9F:F5:F3:F8:5D:33:D9:FC:56:C1:5C:ED:95:B4:3B:C7
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133322e302f32342d3234203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:90:af:90:7d:42:63:ec:ff:92:a2:2c:3a:0c:1d:ab:aa:41:
         a3:f1:66:b1:72:6e:69:8c:08:f4:76:0d:c0:cb:16:b8:f8:49:
         52:20:b0:e1:0e:57:2f:21:03:40:1a:14:74:9d:73:a1:b9:09:
         6d:44:f0:c3:0a:fa:10:06:e0:10:83:15:5a:e1:fc:12:55:c5:
         8b:6f:11:ef:80:b2:d7:20:d4:75:b8:51:a0:b2:ae:be:78:99:
         af:80:d8:1e:0f:d0:3b:11:f0:42:5c:73:43:79:9a:cd:ef:7f:
         df:3c:a6:5c:5c:1f:c7:db:ee:a8:4c:df:a1:2b:1a:c6:57:72:
         66:b1:c9:6b:c0:ad:ea:8e:9d:da:2f:88:6b:76:69:5c:74:b7:
         32:ac:31:4b:f3:46:11:1c:bb:31:7d:c3:fe:e1:38:21:44:7a:
         82:1f:74:a8:79:b7:1a:89:c7:3f:3c:d4:8b:aa:d6:ba:99:1c:
         7d:1c:24:4c:fe:10:5f:51:dd:34:ff:61:53:84:12:26:24:e9:
         5c:a0:bb:90:67:2d:b6:21:fa:5b:a5:3a:29:22:4d:cf:41:03:
         1e:7b:66:ea:03:53:26:bf:bb:64:99:86:f6:38:c7:eb:69:56:
         55:b5:f9:fa:cd:51:02:38:46:4a:bc:4f:bf:e7:4b:2d:31:07:
         1d:b0:3d:f0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNdoTX/brRYAq49ayvqyWfLy6BuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2NTYwRkM5RjM0MEIyQTdFRjM5NTU5OUQ5RjdGQzVE
OTYxOUM1ODAeFw0yNTA1MTkxNjE0MzZaFw0yNjA1MTgxNjE5MzZaMDMxMTAvBgNV
BAMTKEM4MDc1QTc2OUZGNUYzRjg1RDMzRDlGQzU2QzE1Q0VEOTVCNDNCQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjgYFFg828z/WUTSDn9+ZDWk3m
fLM6NLe2x6Nn7uZ6Ko9gi8LLkJ3oYR9fpYryQMWxlyuXBwfw3sab7ro3ZVROdepL
FI/Z/otQgcPuHBY+wFMoAmS3ZQMb+NDezRTahGm0OmbmAi+3zRkOR8WoTnU9+fUy
CQQc10HmJ/dxaiM8GNH1ZOq83KJH5j8X8WOAgBKR26w0I/rdwHtmBtduZ40RMAdg
0tTRj3kKLdVSMDXuU353V3AYOdc7FEyTvkcAgmjhtgbdiejMWsNYvXLGxCRBhLdN
GqR1qPuiKyX7UDthIwiC3fgVrTd1hd+qvr3kC7qMTaA5HVym7M8qdUDkv5e/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUyAdadp/18/hdM9n8VsFc7ZW0O8cwHwYDVR0j
BBgwFoAUaWVg/J80Cyp+85VZnZ9/xdlhnFgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMjI0RTgyMEJFRjc4QjNCMEIzNUI4OUI0OTFDRUJGMkQ4
RkQ2NzQwMzRDNjQ3OENGNTNCRjU2NDdGNkZDQUQ5LzAvNjk2NTYwRkM5RjM0MEIy
QTdFRjM5NTU5OUQ5RjdGQzVEOTYxOUM1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTY1NjBGQzlGMzQwQjJBN0VG
Mzk1NTk5RDlGN0ZDNUQ5NjE5QzU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDIyNEU4MjBCRUY3OEIzQjBCMzVCODlCNDkxQ0VCRjJEOEZENjc0MDM0
QzY0NzhDRjUzQkY1NjQ3RjZGQ0FEOS8wLzMyMzAzMTJlMzQzOTJlMzEzMzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzYzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMkxhDAN
BgkqhkiG9w0BAQsFAAOCAQEAjpCvkH1CY+z/kqIsOgwdq6pBo/FmsXJuaYwI9HYN
wMsWuPhJUiCw4Q5XLyEDQBoUdJ1zobkJbUTwwwr6EAbgEIMVWuH8ElXFi28R74Cy
1yDUdbhRoLKuvniZr4DYHg/QOxHwQlxzQ3maze9/3zymXFwfx9vuqEzfoSsaxldy
ZrHJa8Ct6o6d2i+Ia3ZpXHS3MqwxS/NGERy7MX3D/uE4IUR6gh90qHm3GonHPzzU
i6rWupkcfRwkTP4QX1HdNP9hU4QSJiTpXKC7kGcttiH6W6U6KSJNz0EDHntm6gNT
Jr+7ZJmG9jjH62lWVbX5+s1RAjhGSrxPv+dLLTEHHbA98A==
-----END CERTIFICATE-----
Generated at Tue Jun 3 14:14:23 2025 by rpki-client