Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3230302e37332e3132302e302f32312d3234203d3e203237393031.roa
File:                     3230302e37332e3132302e302f32312d3234203d3e203237393031.roa (raw, json)
Hash identifier:          Mc8n8RHF6psRybuPNN511o3UqMW3fKciIu1ktFkaeww=
Subject key identifier:   C1:83:46:3F:11:05:5B:2C:86:2B:BB:99:3D:C6:49:14:4D:0D:A1:1E
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       260045AD6DC660AFBBB562A9CE60DCA5B4310F31
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3230302e37332e3132302e302f32312d3234203d3e203237393031.roa
Signing time:             Tue 04 Feb 2025 18:54:16 +0000
ROA not before:           Tue 04 Feb 2025 18:49:16 +0000
ROA not after:            Tue 03 Feb 2026 18:54:16 +0000
asID:                     27901
IP address blocks:        200.73.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:00:45:ad:6d:c6:60:af:bb:b5:62:a9:ce:60:dc:a5:b4:31:0f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Feb  4 18:49:16 2025 GMT
            Not After : Feb  3 18:54:16 2026 GMT
        Subject: CN=C183463F11055B2C862BBB993DC649144D0DA11E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:cb:02:cd:11:ae:fc:28:9f:fc:c4:45:30:
                    a1:c4:a2:8b:4b:b2:0b:74:4c:28:7a:d6:3f:47:1a:
                    32:65:3c:95:e4:2b:5c:71:b8:f1:5b:87:dd:8d:1a:
                    02:da:c9:45:24:5e:5f:b4:23:e2:06:04:21:34:df:
                    c2:15:87:4b:6b:3c:5b:cf:42:e8:82:d7:dd:bc:c0:
                    f9:f6:db:1f:0c:93:1b:dc:96:79:1b:f5:69:6d:88:
                    6e:19:85:ca:4a:dc:0e:32:32:d9:0a:19:6d:a0:f1:
                    a0:cd:f6:38:7f:3e:58:c1:ce:2e:7b:fc:b8:76:35:
                    a2:89:74:ca:af:42:5b:a2:ef:a9:73:41:d3:92:81:
                    29:8b:71:0c:c3:e1:70:e2:0a:4a:ef:a6:5e:7f:e7:
                    12:82:2f:99:6a:c7:f3:3e:a8:e7:9e:93:65:cb:8c:
                    67:84:a4:d9:84:c4:59:c2:e2:66:b6:5c:40:9d:b4:
                    a2:d9:37:6a:d8:46:34:2a:a9:aa:1d:d7:0c:26:fc:
                    0d:9f:53:7d:40:7b:b5:cd:68:75:a1:55:16:9b:10:
                    4e:09:fe:42:7d:56:77:a2:4d:d4:74:4f:1e:e1:e2:
                    ed:00:6c:28:6e:00:16:47:f9:07:4c:bc:6d:31:61:
                    87:a0:64:23:04:44:26:58:f5:c2:a9:da:67:b6:c8:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:83:46:3F:11:05:5B:2C:86:2B:BB:99:3D:C6:49:14:4D:0D:A1:1E
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3230302e37332e3132302e302f32312d3234203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:1b:3d:8d:7e:70:76:d7:18:37:72:76:f4:0c:f9:3a:58:57:
         39:ad:af:8a:16:b8:fa:e6:df:ac:8c:d1:5a:05:82:12:19:4d:
         0f:a5:bf:e3:97:64:df:6e:75:bd:08:01:e4:1d:84:ec:b3:90:
         2d:2d:c7:2a:d9:a9:39:76:3c:a2:6c:bb:e5:cf:3d:13:cf:7d:
         94:4c:5c:9e:17:ac:0d:17:62:62:6c:fe:bd:78:b8:fe:20:50:
         ac:22:06:51:5b:84:0b:ea:a9:28:e7:7c:ff:bd:6f:ad:01:2f:
         d4:cb:8d:fa:b2:93:51:19:8b:aa:94:8e:cf:96:e3:96:f1:ef:
         d3:ec:c9:a9:8f:a5:f2:39:f1:76:0a:1a:b8:37:e9:95:54:3a:
         8b:09:1c:80:5c:fb:af:ad:29:c0:d1:50:e2:d7:c3:ce:68:4a:
         17:de:ff:0a:77:4b:81:b5:d4:ba:30:f2:c4:4c:68:55:71:bc:
         15:5d:e4:46:a2:c7:bd:72:cb:6d:43:94:a2:45:bd:6f:ef:08:
         bc:38:f1:ca:75:bc:1e:de:c1:57:70:e0:5e:f0:1d:59:67:26:
         f4:69:ad:cc:c2:ab:93:61:67:81:9d:0b:12:fe:2c:c5:c9:25:
         1b:33:be:7d:b7:33:b6:72:cb:d4:a8:33:b6:86:0a:08:d4:83:
         59:f8:83:1f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJgBFrW3GYK+7tWKpzmDcpbQxDzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkxREU1MTlGMjVGREY2OTJDQkRDMTBBMDk2NEE0QjNE
OUNEQTkxRjAeFw0yNTAyMDQxODQ5MTZaFw0yNjAyMDMxODU0MTZaMDMxMTAvBgNV
BAMTKEMxODM0NjNGMTEwNTVCMkM4NjJCQkI5OTNEQzY0OTE0NEQwREExMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ2MsCzRGu/Cif/MRFMKHEootL
sgt0TCh61j9HGjJlPJXkK1xxuPFbh92NGgLayUUkXl+0I+IGBCE038IVh0trPFvP
QuiC1928wPn22x8Mkxvclnkb9WltiG4ZhcpK3A4yMtkKGW2g8aDN9jh/PljBzi57
/Lh2NaKJdMqvQlui76lzQdOSgSmLcQzD4XDiCkrvpl5/5xKCL5lqx/M+qOeek2XL
jGeEpNmExFnC4ma2XECdtKLZN2rYRjQqqaod1wwm/A2fU31Ae7XNaHWhVRabEE4J
/kJ9VneiTdR0Tx7h4u0AbChuABZH+QdMvG0xYYegZCMERCZY9cKp2me2yOdhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUwYNGPxEFWyyGK7uZPcZJFE0NoR4wHwYDVR0j
BBgwFoAUGR3lGfJf32ksvcEKCWSks9nNqR8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQTI2MzBFRkYxNjFFMzQ5MUE4NEE1QjRGNkZCNjhDRjA0
MzlBQ0M0MDQ0OTRCN0JGMUMzOTE5MjlGQTc2QzNFLzAvMTkxREU1MTlGMjVGREY2
OTJDQkRDMTBBMDk2NEE0QjNEOUNEQTkxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOTFERTUxOUYyNUZERjY5MkNC
REMxMEEwOTY0QTRCM0Q5Q0RBOTFGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkEyNjMwRUZGMTYxRTM0OTFBODRBNUI0RjZGQjY4Q0YwNDM5QUNDNDA0
NDk0QjdCRjFDMzkxOTI5RkE3NkMzRS8wLzMyMzAzMDJlMzczMzJlMzEzMjMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM5MzAzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8hJeDAN
BgkqhkiG9w0BAQsFAAOCAQEAZxs9jX5wdtcYN3J29Az5OlhXOa2viha4+ubfrIzR
WgWCEhlND6W/45dk3251vQgB5B2E7LOQLS3HKtmpOXY8omy75c89E899lExcnhes
DRdiYmz+vXi4/iBQrCIGUVuEC+qpKOd8/71vrQEv1MuN+rKTURmLqpSOz5bjlvHv
0+zJqY+l8jnxdgoauDfplVQ6iwkcgFz7r60pwNFQ4tfDzmhKF97/CndLgbXUujDy
xExoVXG8FV3kRqLHvXLLbUOUokW9b+8IvDjxynW8Ht7BV3DgXvAdWWcm9GmtzMKr
k2FngZ0LEv4sxcklGzO+fbcztnLL1KgztoYKCNSDWfiDHw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:40 2025 by rpki-client