Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e34302e302f32312d3234203d3e20323633363939.roa
File:                     3230302e3132332e34302e302f32312d3234203d3e20323633363939.roa (raw, json)
Hash identifier:          M/fLw1ROt/xfeC5cI3RkmQokeoSpmiDIn3dTdCu+gA0=
Subject key identifier:   CA:37:9C:C5:EA:0C:6C:FD:51:0C:4B:C2:86:43:8A:C8:32:2E:F8:5A
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       3C6E42B1C2C9623CF6329D11FEABADC89B68E8AF
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e34302e302f32312d3234203d3e20323633363939.roa
Signing time:             Tue 04 Feb 2025 20:08:09 +0000
ROA not before:           Tue 04 Feb 2025 20:03:09 +0000
ROA not after:            Tue 03 Feb 2026 20:08:09 +0000
asID:                     263699
IP address blocks:        200.123.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6e:42:b1:c2:c9:62:3c:f6:32:9d:11:fe:ab:ad:c8:9b:68:e8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Feb  4 20:03:09 2025 GMT
            Not After : Feb  3 20:08:09 2026 GMT
        Subject: CN=CA379CC5EA0C6CFD510C4BC286438AC8322EF85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:14:7a:5b:c3:69:aa:af:67:2b:b8:2b:87:
                    50:7e:d0:5b:d0:d6:5c:72:06:ec:3d:c8:e0:2e:2c:
                    6c:31:17:d2:d1:be:dd:e3:f3:1e:74:d5:fe:7f:f1:
                    d1:ff:04:9e:76:82:51:e9:58:85:65:71:81:c1:9f:
                    19:43:30:eb:b3:10:36:88:e5:b1:03:9e:69:af:5e:
                    f9:bb:ff:cd:1c:a3:4a:29:b5:a9:68:95:c7:3e:4e:
                    02:95:e7:8e:a6:3d:61:ef:29:a2:8e:0a:ef:83:fc:
                    0d:99:90:f4:e5:c5:b1:ef:02:da:4e:73:cc:a3:99:
                    8b:20:65:0b:6e:ed:aa:b4:00:ca:e9:9f:35:e5:a4:
                    bf:55:da:49:28:9b:f1:da:ec:55:f1:e0:b6:52:05:
                    49:64:30:4b:ef:57:5e:63:c8:b2:10:90:6c:94:91:
                    49:59:68:2e:ae:b6:ed:a6:87:e6:83:cc:e9:c1:dd:
                    dc:30:19:1c:bc:97:4f:93:9c:b6:09:53:26:5f:0e:
                    8c:b2:b8:12:58:3c:06:79:49:20:82:ef:3d:cc:49:
                    42:20:ca:07:3d:e7:5e:c7:93:9b:35:2a:77:57:ae:
                    de:0d:41:2d:c0:c6:ad:01:55:e8:df:a6:00:0c:a3:
                    fe:ad:3e:ac:ac:41:01:a0:49:98:05:2e:15:a8:3d:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:37:9C:C5:EA:0C:6C:FD:51:0C:4B:C2:86:43:8A:C8:32:2E:F8:5A
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e34302e302f32312d3234203d3e20323633363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:1e:f1:47:f0:08:97:d4:36:e0:69:76:6e:e1:a3:75:b1:cd:
         86:e7:83:78:df:ab:ca:b5:75:fa:f7:92:08:7a:15:aa:4b:e9:
         28:92:93:83:31:78:48:78:22:3e:94:cc:d9:fd:c6:f0:e1:03:
         f4:cc:45:44:b8:eb:fa:5e:2d:82:28:3d:44:de:b0:0a:48:d7:
         61:7e:0f:86:0c:71:a5:3e:a7:21:f1:21:3b:c7:d6:1f:f3:88:
         38:34:bf:49:5f:54:81:12:ec:4a:1b:ee:99:de:ef:a3:e7:56:
         01:04:27:44:23:62:ad:5f:4f:2d:d8:83:e9:70:7c:6a:aa:e1:
         8e:f5:b2:3f:63:73:39:a8:b1:9c:e5:a2:1a:0b:a8:50:39:a8:
         b7:29:e8:57:3e:21:a7:4e:c3:3c:8c:1a:d9:7f:d9:ea:43:82:
         f0:1f:10:1d:93:94:09:03:2a:45:ec:16:5b:de:ee:b9:6b:81:
         8a:ae:10:8f:d3:a2:24:09:43:eb:fb:02:b4:50:ed:ba:fb:7c:
         8c:b3:69:d3:16:64:c5:fb:16:d3:d2:52:12:0f:69:19:c4:cf:
         a4:f4:22:99:dc:30:3f:6e:34:7c:71:1f:9a:f0:23:8a:b9:20:
         c0:f8:87:fb:db:e6:25:fd:5c:cf:ca:9a:ce:ac:be:7c:a8:4b:
         02:f7:a8:da
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPG5CscLJYjz2Mp0R/qutyJto6K8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQwNUZGOTYyQzEyNDBCMkU4Q0M2OEI0RUE0MUQxODdD
NTUwOTU5MTAeFw0yNTAyMDQyMDAzMDlaFw0yNjAyMDMyMDA4MDlaMDMxMTAvBgNV
BAMTKENBMzc5Q0M1RUEwQzZDRkQ1MTBDNEJDMjg2NDM4QUM4MzIyRUY4NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6BR6W8Npqq9nK7grh1B+0FvQ
1lxyBuw9yOAuLGwxF9LRvt3j8x501f5/8dH/BJ52glHpWIVlcYHBnxlDMOuzEDaI
5bEDnmmvXvm7/80co0optalolcc+TgKV546mPWHvKaKOCu+D/A2ZkPTlxbHvAtpO
c8yjmYsgZQtu7aq0AMrpnzXlpL9V2kkom/Ha7FXx4LZSBUlkMEvvV15jyLIQkGyU
kUlZaC6utu2mh+aDzOnB3dwwGRy8l0+TnLYJUyZfDoyyuBJYPAZ5SSCC7z3MSUIg
ygc9517Hk5s1KndXrt4NQS3Axq0BVejfpgAMo/6tPqysQQGgSZgFLhWoPURfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUyjecxeoMbP1RDEvChkOKyDIu+FowHwYDVR0j
BBgwFoAU7QX/liwSQLLozGi06kHRh8VQlZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkM4MUUzQzhCRkMwMjhFRkFDRjA4NjE0OTUxRkQwREI5
QTg2MjMyQ0MyNUNGOEI2MDZCQTcwNzVENjA2M0Y1LzAvRUQwNUZGOTYyQzEyNDBC
MkU4Q0M2OEI0RUE0MUQxODdDNTUwOTU5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDA1RkY5NjJDMTI0MEIyRThD
QzY4QjRFQTQxRDE4N0M1NTA5NTkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJDODFFM0M4QkZDMDI4RUZBQ0YwODYxNDk1MUZEMERCOUE4NjIzMkND
MjVDRjhCNjA2QkE3MDc1RDYwNjNGNS8wLzMyMzAzMDJlMzEzMjMzMmUzNDMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyHso
MA0GCSqGSIb3DQEBCwUAA4IBAQBbHvFH8AiX1DbgaXZu4aN1sc2G54N436vKtXX6
95IIehWqS+kokpODMXhIeCI+lMzZ/cbw4QP0zEVEuOv6Xi2CKD1E3rAKSNdhfg+G
DHGlPqch8SE7x9Yf84g4NL9JX1SBEuxKG+6Z3u+j51YBBCdEI2KtX08t2IPpcHxq
quGO9bI/Y3M5qLGc5aIaC6hQOai3KehXPiGnTsM8jBrZf9nqQ4LwHxAdk5QJAypF
7BZb3u65a4GKrhCP06IkCUPr+wK0UO26+3yMs2nTFmTF+xbT0lISD2kZxM+k9CKZ
3DA/bjR8cR+a8COKuSDA+If72+Yl/VzPyprOrL58qEsC96ja
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:07:37 2025 by rpki-client