Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2183E26BF57351246A34CD802A78C62922AC228501EEA283942208760FD4ABDE/0/3230302e3232392e3235322e302f32322d3234203d3e203532343635.roa
File:                     3230302e3232392e3235322e302f32322d3234203d3e203532343635.roa (raw, json)
Hash identifier:          P9IwzTkUrDz7yuEWn03zH4PXQdAeXxSJspY8FEI5q0Q=
Subject key identifier:   84:74:D5:E0:23:C6:8D:D7:8A:2F:10:52:CD:0B:E6:DA:86:CA:34:DC
Certificate issuer:       /CN=D0060F910CAB2F446C5D976795839526B5590B8C
Certificate serial:       530C7AD449FCADCA5BDEA1FC027DFBFA04BB707A
Authority key identifier: D0:06:0F:91:0C:AB:2F:44:6C:5D:97:67:95:83:95:26:B5:59:0B:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0060F910CAB2F446C5D976795839526B5590B8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2183E26BF57351246A34CD802A78C62922AC228501EEA283942208760FD4ABDE/0/3230302e3232392e3235322e302f32322d3234203d3e203532343635.roa
Signing time:             Mon 02 Jun 2025 12:20:48 +0000
ROA not before:           Mon 02 Jun 2025 12:15:48 +0000
ROA not after:            Mon 01 Jun 2026 12:20:48 +0000
asID:                     52465
IP address blocks:        200.229.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2183E26BF57351246A34CD802A78C62922AC228501EEA283942208760FD4ABDE/0/D0060F910CAB2F446C5D976795839526B5590B8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2183E26BF57351246A34CD802A78C62922AC228501EEA283942208760FD4ABDE/0/D0060F910CAB2F446C5D976795839526B5590B8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0060F910CAB2F446C5D976795839526B5590B8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0c:7a:d4:49:fc:ad:ca:5b:de:a1:fc:02:7d:fb:fa:04:bb:70:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0060F910CAB2F446C5D976795839526B5590B8C
        Validity
            Not Before: Jun  2 12:15:48 2025 GMT
            Not After : Jun  1 12:20:48 2026 GMT
        Subject: CN=8474D5E023C68DD78A2F1052CD0BE6DA86CA34DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:70:2a:da:91:46:14:11:c3:b7:fe:29:d2:
                    22:e9:4c:f3:43:33:e9:54:69:33:ab:54:b9:69:a8:
                    d5:65:d0:0d:4e:e3:70:1c:55:99:d6:9e:b8:e6:87:
                    15:77:a3:fb:64:bc:41:ec:52:47:59:96:28:c8:92:
                    06:80:62:4e:49:89:07:95:3b:64:3f:32:1d:f1:21:
                    92:04:ff:01:89:4b:4e:55:e8:0d:a9:54:9a:25:b7:
                    13:aa:8d:08:09:f3:c4:51:91:4a:81:f8:d8:d7:82:
                    37:0c:d2:2c:09:65:ca:f4:66:64:23:54:e5:ef:98:
                    c2:25:48:fb:46:91:0c:92:de:42:12:ce:c8:62:11:
                    43:08:6f:8d:31:b9:00:0c:b3:d1:0e:3b:10:6d:84:
                    57:ec:d2:10:a1:0e:a1:6b:fc:d7:3e:a4:5c:63:4f:
                    35:f5:9d:33:3f:23:21:ac:54:b0:bb:69:c4:4d:7e:
                    74:b6:9d:89:06:a0:c2:bb:30:f4:0d:3c:3a:1f:ff:
                    c1:df:f8:1b:75:be:69:19:ad:52:d5:52:71:32:b9:
                    5e:a3:17:d7:8a:45:81:ff:ea:b3:5e:60:f2:f2:56:
                    13:0c:50:02:1d:7d:d8:12:b4:e4:0b:79:01:51:f0:
                    6c:1c:68:c5:eb:6f:6e:ab:7e:2a:a0:ee:48:a3:a8:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:74:D5:E0:23:C6:8D:D7:8A:2F:10:52:CD:0B:E6:DA:86:CA:34:DC
            X509v3 Authority Key Identifier:
                keyid:D0:06:0F:91:0C:AB:2F:44:6C:5D:97:67:95:83:95:26:B5:59:0B:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2183E26BF57351246A34CD802A78C62922AC228501EEA283942208760FD4ABDE/0/D0060F910CAB2F446C5D976795839526B5590B8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0060F910CAB2F446C5D976795839526B5590B8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2183E26BF57351246A34CD802A78C62922AC228501EEA283942208760FD4ABDE/0/3230302e3232392e3235322e302f32322d3234203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:5f:82:33:92:b9:53:42:1b:22:d1:10:f9:15:31:22:80:
         f8:17:29:64:7d:91:e2:13:1c:fa:60:55:6d:dc:c0:ff:a3:a3:
         6f:02:83:1b:dc:ad:d4:63:63:dc:f5:95:27:22:ba:f1:fc:6c:
         bf:61:88:e4:e3:42:dc:27:f0:e9:18:b1:3e:c0:38:12:fe:35:
         5f:ec:07:ff:92:bb:fc:4a:7a:66:2c:26:a5:b8:57:b6:ca:d4:
         24:51:29:10:8e:dd:ae:0d:03:45:b8:5c:75:b1:11:80:46:b0:
         fe:88:76:ac:3e:98:91:60:e1:ca:65:15:61:ab:5f:bc:7d:e5:
         cb:27:9d:f2:57:b6:c8:c7:24:1c:cd:db:b3:31:09:7b:9c:6e:
         9c:ef:23:97:b0:8f:fe:b6:0f:aa:81:71:76:6e:67:c5:49:5c:
         fb:24:9e:0f:4d:b0:08:f8:6b:86:a5:06:c6:ff:3e:2c:30:1e:
         7a:89:ee:5d:4d:a2:64:14:e3:21:8c:6c:c0:93:6d:65:d8:e1:
         0d:53:39:fc:95:d1:22:d3:b1:fd:a0:6a:8e:1e:8b:92:75:85:
         a6:6d:b5:ef:15:35:ee:1f:16:56:86:0e:4c:d4:bb:8f:d8:63:
         3c:0e:3f:e8:63:5c:1f:fd:c8:cf:f0:ad:f4:85:60:d4:97:79:
         3a:50:c8:05
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUwx61En8rcpb3qH8An37+gS7cHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAwNjBGOTEwQ0FCMkY0NDZDNUQ5NzY3OTU4Mzk1MjZC
NTU5MEI4QzAeFw0yNTA2MDIxMjE1NDhaFw0yNjA2MDExMjIwNDhaMDMxMTAvBgNV
BAMTKDg0NzRENUUwMjNDNjhERDc4QTJGMTA1MkNEMEJFNkRBODZDQTM0REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9HAq2pFGFBHDt/4p0iLpTPND
M+lUaTOrVLlpqNVl0A1O43AcVZnWnrjmhxV3o/tkvEHsUkdZlijIkgaAYk5JiQeV
O2Q/Mh3xIZIE/wGJS05V6A2pVJoltxOqjQgJ88RRkUqB+NjXgjcM0iwJZcr0ZmQj
VOXvmMIlSPtGkQyS3kISzshiEUMIb40xuQAMs9EOOxBthFfs0hChDqFr/Nc+pFxj
TzX1nTM/IyGsVLC7acRNfnS2nYkGoMK7MPQNPDof/8Hf+Bt1vmkZrVLVUnEyuV6j
F9eKRYH/6rNeYPLyVhMMUAIdfdgStOQLeQFR8GwcaMXrb26rfiqg7kijqPifAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhHTV4CPGjdeKLxBSzQvm2obKNNwwHwYDVR0j
BBgwFoAU0AYPkQyrL0RsXZdnlYOVJrVZC4wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMTgzRTI2QkY1NzM1MTI0NkEzNENEODAyQTc4QzYyOTIy
QUMyMjg1MDFFRUEyODM5NDIyMDg3NjBGRDRBQkRFLzAvRDAwNjBGOTEwQ0FCMkY0
NDZDNUQ5NzY3OTU4Mzk1MjZCNTU5MEI4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMDA2MEY5MTBDQUIyRjQ0NkM1
RDk3Njc5NTgzOTUyNkI1NTkwQjhDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjE4M0UyNkJGNTczNTEyNDZBMzRDRDgwMkE3OEM2MjkyMkFDMjI4NTAx
RUVBMjgzOTQyMjA4NzYwRkQ0QUJERS8wLzMyMzAzMDJlMzIzMjM5MmUzMjM1MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyOX8
MA0GCSqGSIb3DQEBCwUAA4IBAQAvjF+CM5K5U0IbItEQ+RUxIoD4FylkfZHiExz6
YFVt3MD/o6NvAoMb3K3UY2Pc9ZUnIrrx/Gy/YYjk40LcJ/DpGLE+wDgS/jVf7Af/
krv8SnpmLCaluFe2ytQkUSkQjt2uDQNFuFx1sRGARrD+iHasPpiRYOHKZRVhq1+8
feXLJ53yV7bIxyQczduzMQl7nG6c7yOXsI/+tg+qgXF2bmfFSVz7JJ4PTbAI+GuG
pQbG/z4sMB56ie5dTaJkFOMhjGzAk21l2OENUzn8ldEi07H9oGqOHouSdYWmbbXv
FTXuHxZWhg5M1LuP2GM8Dj/oY1wf/cjP8K30hWDUl3k6UMgF
-----END CERTIFICATE-----
Generated at Fri Jun 6 21:50:29 2025 by rpki-client