Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230342e302f32342d3234203d3e203230303135.roa
File:                     3230302e322e3230342e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          VQmVLZ49Nkmzw/3fE7qkmt5bZbketvbEFTCEI6pCRIQ=
Subject key identifier:   FD:17:64:50:39:B1:C1:EC:ED:6A:DE:19:DB:0C:FA:2D:19:27:BC:F2
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       2731A4313CE5E91204458D5CA69BC813F387952B
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230342e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 20:03:32 +0000
ROA not before:           Tue 04 Feb 2025 19:58:32 +0000
ROA not after:            Tue 03 Feb 2026 20:03:32 +0000
asID:                     20015
IP address blocks:        200.2.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:31:a4:31:3c:e5:e9:12:04:45:8d:5c:a6:9b:c8:13:f3:87:95:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:32 2025 GMT
            Not After : Feb  3 20:03:32 2026 GMT
        Subject: CN=FD17645039B1C1ECED6ADE19DB0CFA2D1927BCF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:3c:81:a8:f5:6b:80:cc:64:05:b9:af:90:
                    9e:94:63:62:ba:92:40:7b:d6:ac:ee:39:63:f0:08:
                    28:61:b8:a3:f3:ed:7c:b8:5a:5c:26:ec:04:e9:c8:
                    8b:5c:6d:95:60:ba:1a:a1:7c:cb:f1:ba:bf:d8:0c:
                    91:9a:0e:e2:4b:af:8b:21:08:0d:e4:ff:f9:7d:31:
                    43:23:f0:8e:ee:74:a4:10:78:4f:4f:24:d7:93:f7:
                    b2:9b:53:b5:03:e9:75:91:6a:83:cd:49:8b:b2:f9:
                    bd:46:37:2d:97:f8:c4:53:5b:8a:68:36:61:f7:3e:
                    48:30:6f:11:32:99:bf:4e:3c:6d:a4:bf:d9:60:90:
                    18:9c:5d:9b:a1:b7:2f:e5:d7:f2:65:80:40:17:35:
                    b1:8c:8e:f7:85:1e:b8:58:9f:53:fc:d9:91:95:4d:
                    9a:af:7e:be:e7:03:91:a1:c7:ff:83:5d:aa:de:63:
                    f4:ee:50:9c:55:1a:b9:16:97:a7:21:ad:45:dd:46:
                    fb:5c:6d:18:24:69:ad:ba:a3:49:a3:82:ff:33:af:
                    f0:6b:78:f7:a5:0c:a0:4e:c8:24:00:d2:74:fd:ad:
                    9f:6e:e6:e1:0b:f7:63:c2:e9:78:26:d3:61:c0:41:
                    45:a4:b1:3e:8c:8c:81:08:c4:0e:91:50:b4:91:e2:
                    bb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:17:64:50:39:B1:C1:EC:ED:6A:DE:19:DB:0C:FA:2D:19:27:BC:F2
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230342e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:f0:ff:fd:b4:f4:cb:ba:57:cb:f0:7b:66:52:4a:fc:ab:c1:
         2c:59:6e:50:93:38:79:d5:cd:46:74:66:ec:94:08:84:9d:e0:
         7f:ef:a7:18:a7:f9:bc:33:b7:1b:09:2b:a3:9d:dc:f9:37:fa:
         b8:e3:c8:68:e8:f7:ff:89:4c:ef:2e:e2:8a:fa:2b:da:7d:97:
         6e:6b:f7:c9:e3:ab:6d:88:ea:97:69:e0:9e:d3:a1:28:25:9c:
         6e:1f:99:7f:96:57:d2:4d:3f:6e:13:d8:5d:89:45:98:c2:a9:
         98:fb:53:40:6b:65:b5:23:c3:73:f3:f7:33:e5:51:41:b9:20:
         74:d1:c4:83:85:c3:a0:b6:f3:b6:0d:18:5f:cc:04:07:89:3c:
         cc:11:9d:5f:2e:6e:4a:a1:54:4f:5a:52:27:b0:22:e2:a0:b9:
         6f:d0:e3:8d:c5:c6:f0:28:68:eb:85:66:7c:e2:c8:33:d7:73:
         56:12:fe:12:95:d8:01:b0:59:07:e6:8b:57:9f:2a:07:16:a0:
         28:81:41:31:12:6e:9b:9e:fb:cb:a8:b8:40:6d:d0:d2:24:77:
         21:51:18:b8:cf:20:4a:09:4d:3f:cf:b8:a2:82:ef:e3:a2:c6:
         29:29:9f:94:93:5e:5f:4f:39:08:81:80:7a:ec:27:d3:eb:9f:
         27:00:fd:26
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJzGkMTzl6RIERY1cppvIE/OHlSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNTAyMDQxOTU4MzJaFw0yNjAyMDMyMDAzMzJaMDMxMTAvBgNV
BAMTKEZEMTc2NDUwMzlCMUMxRUNFRDZBREUxOURCMENGQTJEMTkyN0JDRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbDyBqPVrgMxkBbmvkJ6UY2K6
kkB71qzuOWPwCChhuKPz7Xy4Wlwm7ATpyItcbZVguhqhfMvxur/YDJGaDuJLr4sh
CA3k//l9MUMj8I7udKQQeE9PJNeT97KbU7UD6XWRaoPNSYuy+b1GNy2X+MRTW4po
NmH3PkgwbxEymb9OPG2kv9lgkBicXZuhty/l1/JlgEAXNbGMjveFHrhYn1P82ZGV
TZqvfr7nA5Ghx/+DXareY/TuUJxVGrkWl6chrUXdRvtcbRgkaa26o0mjgv8zr/Br
ePelDKBOyCQA0nT9rZ9u5uEL92PC6Xgm02HAQUWksT6MjIEIxA6RULSR4rtBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU/RdkUDmxweztat4Z2wz6LRknvPIwHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzAzMDJlMzIyZTMyMzAzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMDMxMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIAswwDQYJ
KoZIhvcNAQELBQADggEBALvw//209Mu6V8vwe2ZSSvyrwSxZblCTOHnVzUZ0ZuyU
CISd4H/vpxin+bwztxsJK6Od3Pk3+rjjyGjo9/+JTO8u4or6K9p9l25r98njq22I
6pdp4J7ToSglnG4fmX+WV9JNP24T2F2JRZjCqZj7U0BrZbUjw3Pz9zPlUUG5IHTR
xIOFw6C287YNGF/MBAeJPMwRnV8ubkqhVE9aUiewIuKguW/Q443FxvAoaOuFZnzi
yDPXc1YS/hKV2AGwWQfmi1efKgcWoCiBQTESbpue+8uouEBt0NIkdyFRGLjPIEoJ
TT/PuKKC7+Oixikpn5STXl9POQiBgHrsJ9PrnycA/SY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:09 2025 by rpki-client