Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/3230302e3233332e34342e302f32322d3234203d3e203238303332.roa
File:                     3230302e3233332e34342e302f32322d3234203d3e203238303332.roa (raw, json)
Hash identifier:          aEUhxTrqqqMLX8BigagBbEEO/rejgmB47skYmRyfqtk=
Subject key identifier:   7D:ED:2F:CB:F8:96:4F:9A:6B:A9:25:DC:DF:A4:98:5C:50:6F:B9:29
Certificate issuer:       /CN=25E2A43494D13C6F2ABA675D1A57C4D00A108B2B
Certificate serial:       5E8552EE7A25AD024C8CA3B234BCCB2FFCD4633C
Authority key identifier: 25:E2:A4:34:94:D1:3C:6F:2A:BA:67:5D:1A:57:C4:D0:0A:10:8B:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/3230302e3233332e34342e302f32322d3234203d3e203238303332.roa
Signing time:             Tue 05 Mar 2024 18:09:44 +0000
ROA not before:           Tue 05 Mar 2024 18:04:44 +0000
ROA not after:            Tue 04 Mar 2025 18:09:44 +0000
asID:                     28032
IP address blocks:        200.233.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:85:52:ee:7a:25:ad:02:4c:8c:a3:b2:34:bc:cb:2f:fc:d4:63:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25E2A43494D13C6F2ABA675D1A57C4D00A108B2B
        Validity
            Not Before: Mar  5 18:04:44 2024 GMT
            Not After : Mar  4 18:09:44 2025 GMT
        Subject: CN=7DED2FCBF8964F9A6BA925DCDFA4985C506FB929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:47:19:3b:4c:eb:7a:c5:3f:e4:3a:f1:44:6a:
                    bb:f7:f1:4c:9d:3a:b1:52:61:ac:20:fe:2c:be:f3:
                    34:c3:aa:bd:7d:9e:7c:81:bc:9b:22:ef:48:40:bb:
                    62:cd:b2:97:be:96:e3:e9:48:e7:50:f8:c1:cc:be:
                    53:86:23:2a:77:46:a3:8d:3e:66:76:25:0f:ce:5f:
                    36:61:0d:bc:cd:b0:89:b3:97:7d:a8:21:ed:2d:e0:
                    de:fc:5b:fd:a3:f9:e3:6f:1f:e2:64:2d:23:f7:00:
                    66:a6:ed:c9:e2:81:fb:09:2e:06:f8:e7:63:46:5d:
                    c8:c5:de:a2:53:d6:69:0f:c7:00:c9:a1:0b:2f:c7:
                    74:11:09:62:db:d4:d9:9d:39:4a:4e:16:fb:d6:6c:
                    53:8d:fc:be:69:43:5c:2f:32:34:fc:c3:55:95:89:
                    67:85:73:e8:f3:dc:7d:e5:00:bb:94:b1:65:d1:04:
                    12:94:03:88:a4:85:74:a8:2b:f1:11:49:37:07:73:
                    fa:b0:a0:db:19:ba:7f:fa:91:77:5c:c7:1e:ab:bc:
                    ff:92:78:e4:7d:a8:11:80:5f:f7:18:88:ad:42:cc:
                    9c:bf:09:fa:0c:0d:51:46:5a:8f:d9:b7:5a:c4:c6:
                    0d:89:5b:8f:0c:78:cd:71:be:9d:3d:50:2f:5d:5c:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:ED:2F:CB:F8:96:4F:9A:6B:A9:25:DC:DF:A4:98:5C:50:6F:B9:29
            X509v3 Authority Key Identifier:
                keyid:25:E2:A4:34:94:D1:3C:6F:2A:BA:67:5D:1A:57:C4:D0:0A:10:8B:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/3230302e3233332e34342e302f32322d3234203d3e203238303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:47:d5:f9:9c:8d:63:cc:40:03:ca:24:f1:3b:d0:4d:82:8c:
         37:e5:68:05:89:3e:52:b8:33:8d:3e:1c:98:79:ce:55:9f:76:
         8f:8f:f3:d0:46:08:ba:73:ae:c1:0e:be:59:32:b7:d8:27:7c:
         80:45:33:d4:30:71:96:c9:28:21:f3:a2:77:2f:0e:00:43:43:
         62:b1:6f:1b:a4:38:1b:45:1e:f7:5e:4e:9f:b1:58:20:61:e0:
         dd:bf:30:95:d7:6d:4e:68:94:c6:0c:a9:1f:b7:f0:92:c1:d8:
         9b:87:e8:34:14:ea:fb:71:16:e8:54:11:00:eb:a9:93:92:09:
         86:0a:3d:ff:6d:ce:6e:c0:52:b2:03:41:db:25:62:b9:2c:21:
         e3:d5:68:b4:fb:4b:66:1f:e6:f5:24:28:6d:b5:26:57:03:eb:
         30:67:79:9d:5c:13:f9:0f:d6:82:2e:d9:06:89:59:50:ee:cc:
         0a:65:4f:c6:1a:48:2f:42:1c:f4:b7:4c:a1:22:99:91:c9:bb:
         95:3d:70:d8:e9:2b:b0:30:e5:9e:ca:47:7f:c5:0b:9a:c7:8a:
         9a:d6:1b:e6:51:6c:40:94:98:24:d6:59:c7:6d:c9:ea:9b:a8:
         15:06:f8:e5:9a:01:5c:18:8d:ae:90:a1:4c:60:9e:a5:9b:0c:
         00:cf:22:b0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXoVS7nolrQJMjKOyNLzLL/zUYzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVFMkE0MzQ5NEQxM0M2RjJBQkE2NzVEMUE1N0M0RDAw
QTEwOEIyQjAeFw0yNDAzMDUxODA0NDRaFw0yNTAzMDQxODA5NDRaMDMxMTAvBgNV
BAMTKDdERUQyRkNCRjg5NjRGOUE2QkE5MjVEQ0RGQTQ5ODVDNTA2RkI5MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCERxk7TOt6xT/kOvFEarv38Uyd
OrFSYawg/iy+8zTDqr19nnyBvJsi70hAu2LNspe+luPpSOdQ+MHMvlOGIyp3RqON
PmZ2JQ/OXzZhDbzNsImzl32oIe0t4N78W/2j+eNvH+JkLSP3AGam7cnigfsJLgb4
52NGXcjF3qJT1mkPxwDJoQsvx3QRCWLb1NmdOUpOFvvWbFON/L5pQ1wvMjT8w1WV
iWeFc+jz3H3lALuUsWXRBBKUA4ikhXSoK/ERSTcHc/qwoNsZun/6kXdcxx6rvP+S
eOR9qBGAX/cYiK1CzJy/CfoMDVFGWo/Zt1rExg2JW48MeM1xvp09UC9dXANBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUfe0vy/iWT5prqSXc36SYXFBvuSkwHwYDVR0j
BBgwFoAUJeKkNJTRPG8qumddGlfE0AoQiyswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEVEREVFNkI2Rjg4RUExN0U2QzJDRDU2QzU1RjI5QTE5
MzdFQjg3NDVERDU2RjNFNzFCMzQwQTlGRjgzMEE2LzAvMjVFMkE0MzQ5NEQxM0M2
RjJBQkE2NzVEMUE1N0M0RDAwQTEwOEIyQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUUyQTQzNDk0RDEzQzZGMkFC
QTY3NUQxQTU3QzREMDBBMTA4QjJCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRFRERFRTZCNkY4OEVBMTdFNkMyQ0Q1NkM1NUYyOUExOTM3RUI4NzQ1
REQ1NkYzRTcxQjM0MEE5RkY4MzBBNi8wLzMyMzAzMDJlMzIzMzMzMmUzNDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMwMzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsjpLDAN
BgkqhkiG9w0BAQsFAAOCAQEAV0fV+ZyNY8xAA8ok8TvQTYKMN+VoBYk+UrgzjT4c
mHnOVZ92j4/z0EYIunOuwQ6+WTK32Cd8gEUz1DBxlskoIfOidy8OAENDYrFvG6Q4
G0Ue915On7FYIGHg3b8wlddtTmiUxgypH7fwksHYm4foNBTq+3EW6FQRAOupk5IJ
hgo9/23ObsBSsgNB2yViuSwh49VotPtLZh/m9SQobbUmVwPrMGd5nVwT+Q/Wgi7Z
BolZUO7MCmVPxhpIL0Ic9LdMoSKZkcm7lT1w2OkrsDDlnspHf8ULmseKmtYb5lFs
QJSYJNZZx23J6puoFQb45ZoBXBiNrpChTGCepZsMAM8isA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org