Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/3230302e3131352e32352e302f32342d3234203d3e20323633363834.roa
File:                     3230302e3131352e32352e302f32342d3234203d3e20323633363834.roa (raw, json)
Hash identifier:          4oWErsC81F1irlRtc2Vf9e3MNTJ2BAz3FWVOb1utPVc=
Subject key identifier:   C6:47:3B:1E:2F:65:81:8C:63:14:E3:63:31:46:F3:77:F2:51:81:98
Certificate issuer:       /CN=B610C094D1EAED0BBD5D9529079557E5356CB598
Certificate serial:       2C7183D79EF5B1CFC26FF0BCA62D58B36E44FC6A
Authority key identifier: B6:10:C0:94:D1:EA:ED:0B:BD:5D:95:29:07:95:57:E5:35:6C:B5:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B610C094D1EAED0BBD5D9529079557E5356CB598.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/3230302e3131352e32352e302f32342d3234203d3e20323633363834.roa
Signing time:             Tue 04 Feb 2025 18:16:01 +0000
ROA not before:           Tue 04 Feb 2025 18:11:01 +0000
ROA not after:            Tue 03 Feb 2026 18:16:01 +0000
asID:                     263684
IP address blocks:        200.115.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/B610C094D1EAED0BBD5D9529079557E5356CB598.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/B610C094D1EAED0BBD5D9529079557E5356CB598.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B610C094D1EAED0BBD5D9529079557E5356CB598.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:71:83:d7:9e:f5:b1:cf:c2:6f:f0:bc:a6:2d:58:b3:6e:44:fc:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B610C094D1EAED0BBD5D9529079557E5356CB598
        Validity
            Not Before: Feb  4 18:11:01 2025 GMT
            Not After : Feb  3 18:16:01 2026 GMT
        Subject: CN=C6473B1E2F65818C6314E3633146F377F2518198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:45:1f:ec:e9:1c:53:b1:95:42:3d:6b:33:
                    34:53:b6:a4:39:d6:bd:6e:73:4a:8d:00:3b:ae:12:
                    85:1e:ff:e1:47:76:41:e7:1f:3d:f8:75:c9:d2:8b:
                    4e:5c:dd:4f:af:e8:b9:ef:9b:61:02:55:05:6b:f9:
                    92:f0:f0:6d:10:6f:ae:4f:d6:08:74:12:5a:c4:5f:
                    58:38:66:5f:72:71:45:a0:29:e3:0a:6f:27:5e:24:
                    2b:ca:3d:1b:cf:e0:f9:7c:07:78:7b:e7:48:c8:dd:
                    2a:38:28:93:11:02:74:cc:c2:fa:53:2e:10:12:12:
                    eb:55:78:92:be:ac:67:83:d6:36:fa:b5:4a:83:8c:
                    3b:e2:e1:cd:46:e2:8b:df:08:6a:2a:f3:9b:47:5e:
                    b5:98:36:aa:10:ad:c9:93:90:92:6c:55:57:43:86:
                    f8:ed:a1:33:49:cc:63:39:33:93:e8:07:f9:7d:c4:
                    2d:a4:ee:74:9b:81:2e:0f:c5:2b:25:22:e9:b7:3c:
                    88:31:8b:8b:84:3f:f6:c8:16:6e:9e:bb:b7:13:d6:
                    ff:73:e2:32:06:69:a9:df:17:ae:bb:0f:b3:cf:69:
                    55:2d:11:39:e8:e8:70:cb:f3:2f:1f:f5:74:4a:5b:
                    47:ad:0f:31:ee:54:b5:ba:76:01:9c:39:4d:ee:24:
                    13:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:47:3B:1E:2F:65:81:8C:63:14:E3:63:31:46:F3:77:F2:51:81:98
            X509v3 Authority Key Identifier:
                keyid:B6:10:C0:94:D1:EA:ED:0B:BD:5D:95:29:07:95:57:E5:35:6C:B5:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/B610C094D1EAED0BBD5D9529079557E5356CB598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B610C094D1EAED0BBD5D9529079557E5356CB598.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/3230302e3131352e32352e302f32342d3234203d3e20323633363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:7d:8c:8a:5e:d3:18:b9:16:b9:3f:a4:99:e5:0b:65:c8:aa:
         92:59:d0:33:de:d9:7b:92:36:58:b5:97:5e:e0:3f:61:6b:d9:
         cd:7e:ad:d9:5e:7d:92:22:d9:8c:1a:5d:81:f5:a2:e3:04:7d:
         cd:a9:06:71:ef:2d:ea:a3:dd:3e:30:26:d6:18:0a:07:d7:a0:
         7d:e9:bf:54:89:10:de:48:6e:09:f2:25:88:1c:7d:b2:9d:88:
         f3:9f:0b:85:b0:6c:87:0c:6c:63:32:ba:08:15:aa:f3:13:ab:
         b4:87:5a:6a:e9:39:f6:c4:66:1f:86:75:6d:74:dd:4c:14:db:
         86:2a:55:58:ad:62:3c:ec:99:cb:dd:76:f6:40:3e:5c:9d:9c:
         60:eb:2d:f7:64:ae:71:4d:e4:cb:61:d5:d8:18:05:03:aa:00:
         0c:39:3c:d8:0e:a8:3f:0e:d3:f9:c1:67:55:91:9e:fc:f2:d4:
         39:1a:57:1d:00:01:c9:2d:3e:06:cd:36:79:59:99:16:c5:b4:
         d2:90:d9:1e:a4:d9:6b:3d:0c:c9:7b:98:14:01:99:7c:f9:64:
         1f:7d:08:c4:16:6b:e0:0e:27:0d:c6:04:e0:16:c8:6e:ff:0f:
         15:23:c7:1a:6a:45:28:7c:92:c7:b0:53:98:c1:68:56:d5:22:
         dd:80:b9:fa
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULHGD1571sc/Cb/C8pi1Ys25E/GowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYxMEMwOTREMUVBRUQwQkJENUQ5NTI5MDc5NTU3RTUz
NTZDQjU5ODAeFw0yNTAyMDQxODExMDFaFw0yNjAyMDMxODE2MDFaMDMxMTAvBgNV
BAMTKEM2NDczQjFFMkY2NTgxOEM2MzE0RTM2MzMxNDZGMzc3RjI1MTgxOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX2kUf7OkcU7GVQj1rMzRTtqQ5
1r1uc0qNADuuEoUe/+FHdkHnHz34dcnSi05c3U+v6Lnvm2ECVQVr+ZLw8G0Qb65P
1gh0ElrEX1g4Zl9ycUWgKeMKbydeJCvKPRvP4Pl8B3h750jI3So4KJMRAnTMwvpT
LhASEutVeJK+rGeD1jb6tUqDjDvi4c1G4ovfCGoq85tHXrWYNqoQrcmTkJJsVVdD
hvjtoTNJzGM5M5PoB/l9xC2k7nSbgS4PxSslIum3PIgxi4uEP/bIFm6eu7cT1v9z
4jIGaanfF667D7PPaVUtETno6HDL8y8f9XRKW0etDzHuVLW6dgGcOU3uJBMTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUxkc7Hi9lgYxjFONjMUbzd/JRgZgwHwYDVR0j
BBgwFoAUthDAlNHq7Qu9XZUpB5VX5TVstZgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOEYwMTE1MUJCMzQ5RUQxQzQyQ0Y5RUJCRjVEMUVBMjE4
NjhEMjk2RURDRkVCODJFMTUyNjE0OURENzkyMjM3LzAvQjYxMEMwOTREMUVBRUQw
QkJENUQ5NTI5MDc5NTU3RTUzNTZDQjU5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjEwQzA5NEQxRUFFRDBCQkQ1
RDk1MjkwNzk1NTdFNTM1NkNCNTk4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDhGMDExNTFCQjM0OUVEMUM0MkNGOUVCQkY1RDFFQTIxODY4RDI5NkVE
Q0ZFQjgyRTE1MjYxNDlERDc5MjIzNy8wLzMyMzAzMDJlMzEzMTM1MmUzMjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzODM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHMZ
MA0GCSqGSIb3DQEBCwUAA4IBAQAKfYyKXtMYuRa5P6SZ5QtlyKqSWdAz3tl7kjZY
tZde4D9ha9nNfq3ZXn2SItmMGl2B9aLjBH3NqQZx7y3qo90+MCbWGAoH16B96b9U
iRDeSG4J8iWIHH2ynYjznwuFsGyHDGxjMroIFarzE6u0h1pq6Tn2xGYfhnVtdN1M
FNuGKlVYrWI87JnL3Xb2QD5cnZxg6y33ZK5xTeTLYdXYGAUDqgAMOTzYDqg/DtP5
wWdVkZ788tQ5GlcdAAHJLT4GzTZ5WZkWxbTSkNkepNlrPQzJe5gUAZl8+WQffQjE
FmvgDicNxgTgFshu/w8VI8caakUofJLHsFOYwWhW1SLdgLn6
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:21 2025 by rpki-client