Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135342e302f32332d3234203d3e20323632313732.roa
File:                     3230302e3131392e3135342e302f32332d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          Qjl7u8Z/n/VBVwrNNIsLtxKjRYgjoFYYOgHTgvI5RF0=
Subject key identifier:   74:9E:E4:24:D9:F3:49:51:17:79:BA:43:79:0B:65:33:73:C3:16:DC
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       3E7C248EDADEAE2EAE6D03607A101A86B060AE3C
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135342e302f32332d3234203d3e20323632313732.roa
Signing time:             Tue 04 Feb 2025 18:55:11 +0000
ROA not before:           Tue 04 Feb 2025 18:50:11 +0000
ROA not after:            Tue 03 Feb 2026 18:55:11 +0000
asID:                     262172
IP address blocks:        200.119.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7c:24:8e:da:de:ae:2e:ae:6d:03:60:7a:10:1a:86:b0:60:ae:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:11 2025 GMT
            Not After : Feb  3 18:55:11 2026 GMT
        Subject: CN=749EE424D9F349511779BA43790B653373C316DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:f6:57:64:fd:0c:76:5e:db:79:9b:92:4c:
                    ff:29:c6:5b:6d:68:05:d3:37:51:ff:07:49:ec:76:
                    72:53:95:1f:c7:3c:a1:67:9a:e1:24:cf:d9:9b:15:
                    74:9b:87:ef:e2:b2:c5:8f:30:fb:48:77:7e:9f:44:
                    7f:8a:fa:e0:a8:3f:01:9a:db:cf:fb:c1:55:5f:7d:
                    b6:e5:04:ed:0d:47:7d:c7:95:40:1b:fb:e8:5a:c0:
                    91:78:71:05:7c:85:7b:54:84:56:3b:1d:f1:4c:22:
                    fe:fa:eb:e8:2d:e9:b1:c0:30:75:c0:09:3f:e4:8a:
                    2b:7f:96:e5:8c:a8:eb:8e:78:81:53:23:5e:ea:bf:
                    fd:52:73:65:22:a6:6f:79:42:ed:f5:32:8b:ee:b6:
                    cc:f2:6c:d0:61:58:03:7c:b0:d2:80:3e:9e:42:e8:
                    87:a5:59:be:d5:c5:25:b5:cb:a4:b9:f4:f7:bf:5e:
                    6a:b1:df:d6:0b:4f:57:9c:86:73:68:b4:72:a5:3b:
                    87:e2:93:5d:ff:25:76:67:e4:b0:68:9b:43:1a:82:
                    36:a6:46:9a:20:26:0a:dc:43:27:29:12:69:d5:24:
                    df:2a:3c:c1:2c:2e:2c:58:66:7e:47:41:27:73:04:
                    1c:f6:23:8d:31:86:71:c2:ad:c8:76:a4:a8:ca:a2:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9E:E4:24:D9:F3:49:51:17:79:BA:43:79:0B:65:33:73:C3:16:DC
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135342e302f32332d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:36:9d:e3:c6:cc:10:70:e4:82:6e:1e:70:5f:e3:f2:7f:5b:
         82:d1:8a:37:13:cb:b8:a5:dc:f1:63:76:18:c5:db:87:cd:64:
         a3:4b:ac:f9:c5:21:fc:0f:6a:44:3e:be:11:b1:91:bf:49:ab:
         b4:74:a3:33:ec:f1:8a:aa:21:c2:62:1c:8b:b3:36:0c:72:71:
         e8:71:1b:c7:81:46:d3:2d:a5:85:b3:ba:fe:e8:ff:e7:47:9c:
         54:08:de:63:53:9a:1f:5e:9c:43:2e:6a:4d:35:ea:9b:55:6e:
         2e:1f:8d:d9:42:05:03:e0:09:f4:4b:83:8f:e2:46:af:00:fc:
         d5:f4:12:fb:4a:4b:34:62:db:ad:d3:41:e0:6f:55:b4:30:68:
         9d:b6:9b:a7:d4:39:97:7e:8a:06:f7:6a:0a:cd:19:3e:7a:b0:
         04:12:86:ec:8d:de:0c:15:a8:75:09:02:d3:08:42:14:4a:22:
         be:6f:91:ed:83:2a:41:c8:e1:79:5f:de:cb:b2:61:ba:d7:fa:
         a2:98:a6:d2:bf:9a:05:34:3d:6e:97:e5:2f:0c:0b:2f:0c:ff:
         3a:d6:6c:75:b2:25:ed:4f:7b:9b:9d:92:82:7a:97:b7:8c:9e:
         7f:6b:59:66:1f:50:0e:52:37:41:d5:72:e4:7d:fd:05:71:2b:
         eb:f5:22:7c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUPnwkjtreri6ubQNgehAahrBgrjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNTAyMDQxODUwMTFaFw0yNjAyMDMxODU1MTFaMDMxMTAvBgNV
BAMTKDc0OUVFNDI0RDlGMzQ5NTExNzc5QkE0Mzc5MEI2NTMzNzNDMzE2REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaAPZXZP0Mdl7beZuSTP8pxltt
aAXTN1H/B0nsdnJTlR/HPKFnmuEkz9mbFXSbh+/issWPMPtId36fRH+K+uCoPwGa
28/7wVVffbblBO0NR33HlUAb++hawJF4cQV8hXtUhFY7HfFMIv766+gt6bHAMHXA
CT/kiit/luWMqOuOeIFTI17qv/1Sc2Uipm95Qu31MovutszybNBhWAN8sNKAPp5C
6IelWb7VxSW1y6S59Pe/Xmqx39YLT1echnNotHKlO4fik13/JXZn5LBom0Magjam
RpogJgrcQycpEmnVJN8qPMEsLixYZn5HQSdzBBz2I40xhnHCrch2pKjKogH1AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUdJ7kJNnzSVEXebpDeQtlM3PDFtwwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMyMzAzMDJlMzEzMTM5MmUzMTM1MzQy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM3MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHI
d5owDQYJKoZIhvcNAQELBQADggEBAHo2nePGzBBw5IJuHnBf4/J/W4LRijcTy7il
3PFjdhjF24fNZKNLrPnFIfwPakQ+vhGxkb9Jq7R0ozPs8YqqIcJiHIuzNgxycehx
G8eBRtMtpYWzuv7o/+dHnFQI3mNTmh9enEMuak016ptVbi4fjdlCBQPgCfRLg4/i
Rq8A/NX0EvtKSzRi263TQeBvVbQwaJ22m6fUOZd+igb3agrNGT56sAQShuyN3gwV
qHUJAtMIQhRKIr5vke2DKkHI4Xlf3suyYbrX+qKYptK/mgU0PW6X5S8MCy8M/zrW
bHWyJe1Pe5udkoJ6l7eMnn9rWWYfUA5SN0HVcuR9/QVxK+v1Inw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:18:02 2025 by rpki-client