Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3231322e302f32322d3234203d3e203237373437.roa
File:                     3230302e3131352e3231322e302f32322d3234203d3e203237373437.roa (raw, json)
Hash identifier:          T2yBIlAmz+4MsUtco2xIMyHNCMhfDPyeD/ET8Kd5+VA=
Subject key identifier:   96:7A:9D:72:12:E3:54:46:16:30:14:56:E7:B6:57:B1:31:B0:3A:E1
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       77C8FE54F4FFD019A09526423B754C3BB7F196F2
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3231322e302f32322d3234203d3e203237373437.roa
Signing time:             Fri 30 May 2025 18:20:38 +0000
ROA not before:           Fri 30 May 2025 18:15:38 +0000
ROA not after:            Fri 29 May 2026 18:20:38 +0000
asID:                     27747
IP address blocks:        200.115.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 20:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c8:fe:54:f4:ff:d0:19:a0:95:26:42:3b:75:4c:3b:b7:f1:96:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: May 30 18:15:38 2025 GMT
            Not After : May 29 18:20:38 2026 GMT
        Subject: CN=967A9D7212E3544616301456E7B657B131B03AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:7a:01:11:2a:bf:87:51:fa:dd:26:39:00:
                    52:66:15:1e:1c:94:27:e2:1c:7e:9b:45:c0:55:b2:
                    cf:21:b4:c5:94:37:56:e4:ab:aa:d0:13:36:1c:45:
                    99:b9:55:9a:df:02:f3:64:ad:73:e2:5d:2d:20:99:
                    f7:3c:f8:41:bf:2e:56:72:0b:75:1a:4f:6a:6d:33:
                    60:f1:b7:c2:29:b3:f1:e5:eb:65:04:cd:32:1f:0d:
                    53:a8:5a:59:63:b6:ab:4f:64:90:a6:7d:f4:df:42:
                    c4:d0:d8:73:98:81:22:90:e8:73:4d:a1:de:30:96:
                    4f:39:b6:d2:aa:25:6d:0b:2c:ad:97:28:be:99:00:
                    37:a3:53:f8:81:ab:38:e2:9d:3e:53:31:b4:85:f5:
                    03:0e:76:2b:03:0c:88:52:fc:72:dd:2e:4d:15:4b:
                    7a:ee:60:7b:6e:eb:4a:c6:1a:ea:52:1a:e8:e1:8a:
                    f9:18:03:71:1b:b8:52:a1:54:e2:3f:f9:66:75:7a:
                    24:d3:a4:46:15:ce:95:57:54:53:ea:85:b5:9b:40:
                    24:b7:b8:89:2b:02:e7:93:fb:be:00:83:a2:3c:9c:
                    01:65:6f:1a:9a:8f:1a:e1:b4:6a:73:e7:4e:72:e0:
                    43:c1:ec:d3:30:10:52:a5:95:27:a1:05:72:e1:a8:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7A:9D:72:12:E3:54:46:16:30:14:56:E7:B6:57:B1:31:B0:3A:E1
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3231322e302f32322d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:10:07:f0:ff:cc:02:dc:44:50:20:53:f4:4c:78:80:02:
         cd:fa:77:22:2c:e8:8f:29:ef:c5:58:0d:10:82:57:e8:0f:ff:
         d0:60:e4:c5:98:24:bb:98:c7:08:11:0a:86:b0:b2:76:2c:06:
         55:04:42:e6:0b:63:2a:14:fe:9b:25:c0:ce:18:be:31:2d:36:
         23:ad:0f:03:9a:47:81:5f:01:6b:d1:2a:b0:de:98:96:f1:05:
         9d:f6:b7:5a:ef:a9:8e:fe:ac:48:2d:eb:d5:e6:2d:3a:7f:ad:
         d6:b0:67:fb:37:fe:b6:a7:14:66:d7:4e:89:5c:16:be:02:7c:
         ec:68:5a:d4:ba:76:8e:01:5a:a7:d1:03:09:64:4a:b6:af:f4:
         ff:1e:72:39:38:42:d7:61:58:2f:87:e0:84:0e:71:eb:23:b4:
         cc:1f:c5:a1:3e:dd:55:7d:ef:ef:fd:1d:64:9e:9f:57:fb:f8:
         44:a8:52:ca:12:80:e4:26:b6:60:ad:da:a1:c1:b2:53:bf:d7:
         6f:d6:b7:2f:95:b0:64:07:e8:50:6b:8c:28:4e:be:df:22:75:
         74:bf:78:1b:8e:78:71:7f:0f:e4:e6:b5:a0:d9:66:ee:fa:ca:
         15:0c:f6:c2:c8:52:56:25:78:aa:4a:2a:f5:09:8f:46:81:17:
         21:96:cc:61
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUd8j+VPT/0BmglSZCO3VMO7fxlvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMwOTk2QjJDQTUxNjlDRUEyQ0U1Qjk5RUFFMjREQkVD
REEzN0M4OTAeFw0yNTA1MzAxODE1MzhaFw0yNjA1MjkxODIwMzhaMDMxMTAvBgNV
BAMTKDk2N0E5RDcyMTJFMzU0NDYxNjMwMTQ1NkU3QjY1N0IxMzFCMDNBRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiwXoBESq/h1H63SY5AFJmFR4c
lCfiHH6bRcBVss8htMWUN1bkq6rQEzYcRZm5VZrfAvNkrXPiXS0gmfc8+EG/LlZy
C3UaT2ptM2Dxt8Ips/Hl62UEzTIfDVOoWlljtqtPZJCmffTfQsTQ2HOYgSKQ6HNN
od4wlk85ttKqJW0LLK2XKL6ZADejU/iBqzjinT5TMbSF9QMOdisDDIhS/HLdLk0V
S3ruYHtu60rGGupSGujhivkYA3EbuFKhVOI/+WZ1eiTTpEYVzpVXVFPqhbWbQCS3
uIkrAueT+74Ag6I8nAFlbxqajxrhtGpz505y4EPB7NMwEFKllSehBXLhqIOtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlnqdchLjVEYWMBRW57ZXsTGwOuEwHwYDVR0j
BBgwFoAULAmWsspRac6izluZ6uJNvs2jfIkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNURFMTAxOTNFQTY5ODI1QTgwRDY2RkY2Q0RBNkEwNzUx
NUU4NjI5MzUwNkRBQTlCNTU5Q0Y3NDJFOEFEODQ3LzAvMkMwOTk2QjJDQTUxNjlD
RUEyQ0U1Qjk5RUFFMjREQkVDREEzN0M4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzA5OTZCMkNBNTE2OUNFQTJD
RTVCOTlFQUUyNERCRUNEQTM3Qzg5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVERTEwMTkzRUE2OTgyNUE4MEQ2NkZGNkNEQTZBMDc1MTVFODYyOTM1
MDZEQUE5QjU1OUNGNzQyRThBRDg0Ny8wLzMyMzAzMDJlMzEzMTM1MmUzMjMxMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzczNDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyHPU
MA0GCSqGSIb3DQEBCwUAA4IBAQBAvRAH8P/MAtxEUCBT9Ex4gALN+nciLOiPKe/F
WA0QglfoD//QYOTFmCS7mMcIEQqGsLJ2LAZVBELmC2MqFP6bJcDOGL4xLTYjrQ8D
mkeBXwFr0Sqw3piW8QWd9rda76mO/qxILevV5i06f63WsGf7N/62pxRm106JXBa+
AnzsaFrUunaOAVqn0QMJZEq2r/T/HnI5OELXYVgvh+CEDnHrI7TMH8WhPt1Vfe/v
/R1knp9X+/hEqFLKEoDkJrZgrdqhwbJTv9dv1rcvlbBkB+hQa4woTr7fInV0v3gb
jnhxfw/k5rWg2Wbu+soVDPbCyFJWJXiqSir1CY9GgRchlsxh
-----END CERTIFICATE-----
Generated at Fri Jun 6 21:52:34 2025 by rpki-client