Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134342e302f32322d3234203d3e203133363832.roa
File:                     3230302e3131392e3134342e302f32322d3234203d3e203133363832.roa (raw, json)
Hash identifier:          GpusjyNeVuWqP+E6jKVtSZhiBhCIiHUF2NqfmNVf10I=
Subject key identifier:   90:18:D7:31:06:1E:B9:E2:37:AE:2D:E9:1A:88:02:DA:9B:82:B3:27
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       19826A209C9EF25E5E1366B13296B3D9D6DFE492
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134342e302f32322d3234203d3e203133363832.roa
Signing time:             Tue 04 Feb 2025 18:55:11 +0000
ROA not before:           Tue 04 Feb 2025 18:50:11 +0000
ROA not after:            Tue 03 Feb 2026 18:55:11 +0000
asID:                     13682
IP address blocks:        200.119.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 07:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:82:6a:20:9c:9e:f2:5e:5e:13:66:b1:32:96:b3:d9:d6:df:e4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:11 2025 GMT
            Not After : Feb  3 18:55:11 2026 GMT
        Subject: CN=9018D731061EB9E237AE2DE91A8802DA9B82B327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c2:63:f6:67:97:2c:96:6c:57:46:98:ee:71:
                    93:2e:95:23:24:79:3e:64:0e:fe:0c:9c:44:de:c5:
                    0a:37:c5:9b:ef:30:51:25:c8:ae:16:0c:94:bf:15:
                    09:fc:2a:b9:4a:eb:24:bb:06:81:ae:1d:3a:b7:db:
                    33:e8:f0:bb:c7:b1:1f:30:9b:59:94:87:22:9c:2e:
                    8f:5a:9d:de:0d:85:75:62:63:62:b5:d7:bb:f7:4d:
                    02:78:73:0b:7f:39:4e:99:0e:f0:a4:ea:7d:f4:17:
                    1b:cd:06:bc:cc:a3:00:49:a2:e9:91:6a:2f:3f:b4:
                    c0:6b:92:a9:69:94:c6:fd:8d:9f:61:37:af:80:0a:
                    b9:42:50:47:f3:25:c7:88:d5:6f:bc:d8:09:2a:32:
                    e6:a3:12:45:d1:30:50:f9:02:d6:09:b6:36:06:b1:
                    ad:52:d7:1d:ae:9e:13:8a:d9:15:63:a1:84:0a:25:
                    ec:21:ad:f6:58:48:c2:c4:42:5c:ee:c6:e0:1f:11:
                    13:33:4e:b8:2c:6b:d4:03:a7:2c:88:29:df:9e:33:
                    c6:0a:f0:85:70:04:5c:8c:d1:29:7a:15:17:27:98:
                    65:a4:a1:8e:e2:61:93:36:81:78:a8:50:aa:4f:35:
                    4a:ca:e3:70:91:cd:3a:74:09:14:a1:7c:41:db:73:
                    3a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:18:D7:31:06:1E:B9:E2:37:AE:2D:E9:1A:88:02:DA:9B:82:B3:27
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134342e302f32322d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:37:0c:29:8c:69:d2:c6:df:5c:56:77:55:35:e5:76:9c:01:
         0e:9f:2e:d2:1e:0f:86:1a:aa:5a:73:90:2d:0f:17:8d:c0:14:
         f4:4e:08:e5:08:50:c8:01:7e:12:15:38:8d:18:0e:9c:f6:a8:
         05:c1:62:d3:7e:16:5a:dc:13:28:5c:e9:33:3d:9e:15:fe:41:
         cb:cb:17:50:87:10:f9:e2:fa:40:27:c8:d8:c9:fb:fe:6a:b5:
         6a:cb:d9:a4:bc:96:19:00:b5:85:62:a6:8e:a2:e4:2d:eb:ee:
         3b:14:b0:ff:77:ff:fa:05:29:b4:2c:ca:c8:81:fe:25:bc:3e:
         18:fa:b9:9d:4b:4c:99:ae:b9:78:f0:3b:33:46:20:bd:cb:81:
         c2:43:d3:cf:d3:a7:61:20:ad:65:48:53:ad:ea:b6:cf:14:00:
         c5:5e:43:13:2a:9b:4a:1e:71:af:ab:df:92:bf:a0:0d:ad:53:
         15:c6:9e:da:4c:01:be:15:1b:76:1f:aa:da:4f:f7:80:14:46:
         f6:0a:7f:1c:da:20:eb:5e:ad:b4:e2:e0:9f:ed:24:3d:60:47:
         37:4f:c8:94:64:a2:d1:3c:3d:2f:9b:12:8d:ba:3c:3c:db:02:
         63:97:29:54:7c:25:d1:35:42:df:bf:4e:55:3b:73:14:58:7d:
         04:6d:5f:4f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGYJqIJye8l5eE2axMpaz2dbf5JIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNTAyMDQxODUwMTFaFw0yNjAyMDMxODU1MTFaMDMxMTAvBgNV
BAMTKDkwMThENzMxMDYxRUI5RTIzN0FFMkRFOTFBODgwMkRBOUI4MkIzMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSwmP2Z5cslmxXRpjucZMulSMk
eT5kDv4MnETexQo3xZvvMFElyK4WDJS/FQn8KrlK6yS7BoGuHTq32zPo8LvHsR8w
m1mUhyKcLo9and4NhXViY2K117v3TQJ4cwt/OU6ZDvCk6n30FxvNBrzMowBJoumR
ai8/tMBrkqlplMb9jZ9hN6+ACrlCUEfzJceI1W+82AkqMuajEkXRMFD5AtYJtjYG
sa1S1x2unhOK2RVjoYQKJewhrfZYSMLEQlzuxuAfERMzTrgsa9QDpyyIKd+eM8YK
8IVwBFyM0Sl6FRcnmGWkoY7iYZM2gXioUKpPNUrK43CRzTp0CRShfEHbczrBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkBjXMQYeueI3ri3pGogC2puCsycwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMyMzAzMDJlMzEzMTM5MmUzMTM0MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMzMzYzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyHeQ
MA0GCSqGSIb3DQEBCwUAA4IBAQChNwwpjGnSxt9cVndVNeV2nAEOny7SHg+GGqpa
c5AtDxeNwBT0TgjlCFDIAX4SFTiNGA6c9qgFwWLTfhZa3BMoXOkzPZ4V/kHLyxdQ
hxD54vpAJ8jYyfv+arVqy9mkvJYZALWFYqaOouQt6+47FLD/d//6BSm0LMrIgf4l
vD4Y+rmdS0yZrrl48DszRiC9y4HCQ9PP06dhIK1lSFOt6rbPFADFXkMTKptKHnGv
q9+Sv6ANrVMVxp7aTAG+FRt2H6raT/eAFEb2Cn8c2iDrXq204uCf7SQ9YEc3T8iU
ZKLRPD0vmxKNujw82wJjlylUfCXRNULfv05VO3MUWH0EbV9P
-----END CERTIFICATE-----
Generated at Mon Apr 14 15:12:47 2025 by rpki-client