Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e33312e34362e302f32342d3234203d3e20323634383036.roa
File:                     3230302e33312e34362e302f32342d3234203d3e20323634383036.roa (raw, json)
Hash identifier:          cwfJvNdyGcQEpKvqbi2Ac1qsvFJiYkEdwromq9obr0M=
Subject key identifier:   9F:96:0C:60:E6:82:E9:3B:98:AF:E6:57:E2:35:F8:4D:BA:99:F0:0A
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       27C73E737C04939FADB995CEC35B65BCB26CB181
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e33312e34362e302f32342d3234203d3e20323634383036.roa
Signing time:             Tue 04 Feb 2025 20:03:22 +0000
ROA not before:           Tue 04 Feb 2025 19:58:22 +0000
ROA not after:            Tue 03 Feb 2026 20:03:22 +0000
asID:                     264806
IP address blocks:        200.31.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c7:3e:73:7c:04:93:9f:ad:b9:95:ce:c3:5b:65:bc:b2:6c:b1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:22 2025 GMT
            Not After : Feb  3 20:03:22 2026 GMT
        Subject: CN=9F960C60E682E93B98AFE657E235F84DBA99F00A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:e8:d6:1d:b7:bb:65:7e:11:79:07:cc:2f:
                    15:57:3d:02:83:1d:b1:d6:5e:b3:62:78:2f:22:d2:
                    f9:3d:3e:c8:2b:ca:c7:b8:4a:82:24:92:cc:de:5f:
                    6f:16:b4:23:3e:db:33:44:75:29:51:01:f9:be:a4:
                    01:7d:a9:a6:98:29:b8:d2:88:b4:48:d6:63:bc:72:
                    5c:8f:db:ed:2a:14:9a:73:54:fa:3c:dc:f8:bb:de:
                    f9:91:fb:a4:ce:39:bf:d9:4c:c3:db:38:4d:8b:e7:
                    cf:5a:ec:6a:c7:69:32:13:8d:f4:04:15:90:04:07:
                    bc:09:8a:d5:d6:fb:ab:cd:52:28:40:79:b7:d7:df:
                    f1:48:ef:50:b2:dd:1a:ac:d0:c7:e6:a1:74:5f:00:
                    92:b7:0b:c5:a1:77:27:07:26:a7:27:1e:c5:a3:45:
                    b9:cd:7b:62:11:01:9d:f2:03:db:63:8e:f2:30:09:
                    4b:0d:0a:92:78:77:c3:31:9d:6f:6e:95:4c:3e:50:
                    52:a1:e4:d4:6a:04:c4:19:fd:93:2b:fb:ce:e7:84:
                    95:cd:d1:ae:11:e3:8c:07:1b:3e:63:a7:9d:9d:d0:
                    0e:33:4b:a2:ed:64:83:9a:9c:13:18:e2:e0:31:00:
                    70:de:b6:d5:43:af:ea:d8:ed:58:ca:06:92:e7:8e:
                    48:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:96:0C:60:E6:82:E9:3B:98:AF:E6:57:E2:35:F8:4D:BA:99:F0:0A
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e33312e34362e302f32342d3234203d3e20323634383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:51:25:43:b8:48:8c:fd:63:ed:be:9a:53:03:19:68:e2:88:
         20:18:bf:07:9d:d1:8e:66:2e:2d:51:84:1d:fe:51:32:38:08:
         a4:46:b9:e0:fd:88:aa:a6:8c:85:3d:c8:ec:92:2b:e9:2b:81:
         94:b3:1a:df:a9:a6:91:29:a5:98:9c:ff:2b:9d:fa:a3:56:07:
         b6:2e:9c:71:37:44:07:92:21:07:af:f2:b2:fd:5e:7f:6a:7c:
         66:18:62:42:3f:c2:a4:a1:a2:30:6a:9a:e6:63:a2:e4:a7:13:
         d3:b7:71:2e:8c:75:ec:0a:be:8e:ac:97:f8:59:1c:53:b6:56:
         b4:59:13:3d:0e:95:a2:93:e1:a7:1f:f9:fa:95:61:e6:1b:d8:
         e0:6c:c1:35:25:38:34:1c:fd:b2:29:ba:72:a4:4f:44:78:32:
         0e:23:b0:91:ff:d9:48:6d:38:e0:ad:a7:c5:ff:13:b2:34:70:
         4d:cb:af:b2:a0:d9:20:e2:1e:66:0e:40:2f:fb:3c:67:4c:01:
         8c:5d:34:8b:e6:91:a8:ab:61:77:59:47:03:91:f5:ba:81:d2:
         77:ce:ad:9a:52:47:4e:c6:28:19:a0:af:f1:77:46:4e:19:c3:
         fa:37:02:a6:5e:f6:26:49:53:3b:1e:38:bb:27:1d:4f:71:79:
         e8:ce:20:14
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJ8c+c3wEk5+tuZXOw1tlvLJssYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC
NUI0M0U4QjAeFw0yNTAyMDQxOTU4MjJaFw0yNjAyMDMyMDAzMjJaMDMxMTAvBgNV
BAMTKDlGOTYwQzYwRTY4MkU5M0I5OEFGRTY1N0UyMzVGODREQkE5OUYwMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qejWHbe7ZX4ReQfMLxVXPQKD
HbHWXrNieC8i0vk9Psgryse4SoIkkszeX28WtCM+2zNEdSlRAfm+pAF9qaaYKbjS
iLRI1mO8clyP2+0qFJpzVPo83Pi73vmR+6TOOb/ZTMPbOE2L589a7GrHaTITjfQE
FZAEB7wJitXW+6vNUihAebfX3/FI71Cy3Rqs0MfmoXRfAJK3C8WhdycHJqcnHsWj
RbnNe2IRAZ3yA9tjjvIwCUsNCpJ4d8MxnW9ulUw+UFKh5NRqBMQZ/ZMr+87nhJXN
0a4R44wHGz5jp52d0A4zS6LtZIOanBMY4uAxAHDettVDr+rY7VjKBpLnjkhHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUn5YMYOaC6TuYr+ZX4jX4TbqZ8AowHwYDVR0j
BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx
QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy
RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz
MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz
ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMyMzAzMDJlMzMzMTJlMzQzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM4MzAzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgfLjAN
BgkqhkiG9w0BAQsFAAOCAQEALFElQ7hIjP1j7b6aUwMZaOKIIBi/B53RjmYuLVGE
Hf5RMjgIpEa54P2IqqaMhT3I7JIr6SuBlLMa36mmkSmlmJz/K536o1YHti6ccTdE
B5IhB6/ysv1ef2p8ZhhiQj/CpKGiMGqa5mOi5KcT07dxLox17Aq+jqyX+FkcU7ZW
tFkTPQ6VopPhpx/5+pVh5hvY4GzBNSU4NBz9sim6cqRPRHgyDiOwkf/ZSG044K2n
xf8TsjRwTcuvsqDZIOIeZg5AL/s8Z0wBjF00i+aRqKthd1lHA5H1uoHSd86tmlJH
TsYoGaCv8XdGThnD+jcCpl72JklTOx44uycdT3F56M4gFA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:53 2025 by rpki-client