Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134382e302f32342d3234203d3e203432.roa
File:                     3230302e3130382e3134382e302f32342d3234203d3e203432.roa (raw, json)
Hash identifier:          SGSMx6QL/FQ2O4IWtmaey7Unuze2luFzGTo3XWzGcZA=
Subject key identifier:   61:0B:B1:8D:A2:FB:48:85:59:75:C9:D0:AC:55:83:EC:AF:F6:0A:79
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       2CA564DB8FE30E90955CFA02FEE0A4BA7982E407
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134382e302f32342d3234203d3e203432.roa
Signing time:             Mon 16 Dec 2024 11:45:00 +0000
ROA not before:           Mon 16 Dec 2024 11:40:00 +0000
ROA not after:            Mon 15 Dec 2025 11:45:00 +0000
asID:                     42
IP address blocks:        200.108.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 17:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a5:64:db:8f:e3:0e:90:95:5c:fa:02:fe:e0:a4:ba:79:82:e4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Dec 16 11:40:00 2024 GMT
            Not After : Dec 15 11:45:00 2025 GMT
        Subject: CN=610BB18DA2FB48855975C9D0AC5583ECAFF60A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:84:77:4b:4e:cc:91:5c:d1:3e:14:50:28:
                    94:dc:07:8e:b7:c7:06:12:74:ae:bc:12:83:b8:1b:
                    87:ec:ce:3d:a4:9e:63:7a:fc:b6:83:c9:68:98:71:
                    f2:12:ae:09:c2:a3:01:f2:f8:34:24:d1:71:83:49:
                    bf:99:78:3a:a9:4d:78:35:8a:56:bd:6a:ae:c2:cc:
                    8f:96:ee:5e:61:bc:46:6f:ff:68:55:72:4b:c1:54:
                    29:ab:88:c6:d8:80:7d:1d:0b:24:b5:c4:43:47:fa:
                    7b:3f:cd:5e:2d:48:48:b9:53:75:b4:bf:4a:45:31:
                    5a:8e:48:c2:7a:51:ba:3e:c2:25:38:83:a9:41:08:
                    bb:df:63:c5:f7:aa:da:35:3f:fb:58:17:cf:9f:b7:
                    1a:03:59:76:cd:84:ce:18:8d:72:2b:b1:75:3f:b0:
                    32:29:ca:ca:af:40:0a:28:54:1a:3d:3a:58:50:71:
                    58:20:af:d0:4e:42:96:b7:d3:3a:58:e2:c4:43:d1:
                    7f:e0:95:23:5d:d8:64:37:ca:28:6c:8d:36:b4:5b:
                    bd:cf:42:89:c3:b9:87:0f:4a:0d:bb:15:34:83:a9:
                    b4:89:36:37:25:00:5f:e9:94:3e:9c:47:71:26:5f:
                    e0:7b:04:95:76:ad:06:7d:cf:a6:0b:42:a9:83:dc:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0B:B1:8D:A2:FB:48:85:59:75:C9:D0:AC:55:83:EC:AF:F6:0A:79
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134382e302f32342d3234203d3e203432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:09:03:3b:13:9b:04:51:ab:4e:a2:e7:9d:dc:56:e9:a7:a6:
         50:31:0b:7c:81:dd:23:03:89:e7:7c:bc:d6:da:b8:aa:e8:0f:
         3e:4a:47:10:56:c1:7c:83:0c:ff:40:04:68:60:1a:13:ba:07:
         ae:a9:b4:5b:d5:e8:29:93:eb:36:d2:69:b6:ff:5e:11:73:c8:
         97:15:8d:3b:86:33:6d:17:7c:4e:76:40:52:ea:25:66:ac:4c:
         60:a2:94:91:f0:b4:62:b5:c8:e8:3a:8b:31:40:a8:04:35:96:
         f0:f6:b0:d1:db:3e:2b:10:49:47:ee:f9:8d:fe:75:d7:c2:0c:
         d4:3a:fe:4c:fe:8f:52:d4:bb:fe:4d:52:24:bb:16:ee:c9:05:
         12:49:bf:32:2e:75:3e:f9:29:d7:64:80:08:dc:43:4d:28:6c:
         7d:71:0e:97:c2:d1:76:8b:fc:d0:94:86:19:98:dd:e4:63:c6:
         1e:bc:b6:92:f1:3e:36:ad:e3:95:9b:a2:ea:e7:61:fd:a0:1a:
         9f:b9:eb:46:6e:0c:3b:86:d7:7f:72:e3:49:5f:12:37:2f:55:
         d8:04:c8:83:0b:1d:e3:ec:49:02:85:41:03:a5:b3:71:12:5b:
         d0:22:73:9c:2b:2b:cf:93:0a:79:5e:21:42:a4:b1:66:ad:28:
         1c:ae:2b:dd
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIULKVk24/jDpCVXPoC/uCkunmC5AcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhFNkQ5QzA2RTREOEZGQ0RDQzIyQUZGNEI0Q0EzOTJD
MUE3RDYwMDAeFw0yNDEyMTYxMTQwMDBaFw0yNTEyMTUxMTQ1MDBaMDMxMTAvBgNV
BAMTKDYxMEJCMThEQTJGQjQ4ODU1OTc1QzlEMEFDNTU4M0VDQUZGNjBBNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5YR3S07MkVzRPhRQKJTcB463
xwYSdK68EoO4G4fszj2knmN6/LaDyWiYcfISrgnCowHy+DQk0XGDSb+ZeDqpTXg1
ila9aq7CzI+W7l5hvEZv/2hVckvBVCmriMbYgH0dCyS1xENH+ns/zV4tSEi5U3W0
v0pFMVqOSMJ6Ubo+wiU4g6lBCLvfY8X3qto1P/tYF8+ftxoDWXbNhM4YjXIrsXU/
sDIpysqvQAooVBo9OlhQcVggr9BOQpa30zpY4sRD0X/glSNd2GQ3yihsjTa0W73P
QonDuYcPSg27FTSDqbSJNjclAF/plD6cR3EmX+B7BJV2rQZ9z6YLQqmD3KQtAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUYQuxjaL7SIVZdcnQrFWD7K/2CnkwHwYDVR0j
BBgwFoAU2ObZwG5Nj/zcwir/S0yjksGn1gAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRjY4MzYwQzQzNUVFMTQ2MTJDMTk0NEREOEI3QTY1RUI5
MDkzN0VDMkMxRDY4RkE0MkNCMDZDQTdFMzAwRjNDLzAvRDhFNkQ5QzA2RTREOEZG
Q0RDQzIyQUZGNEI0Q0EzOTJDMUE3RDYwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEU2RDlDMDZFNEQ4RkZDREND
MjJBRkY0QjRDQTM5MkMxQTdENjAwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkY2ODM2MEM0MzVFRTE0NjEyQzE5NDRERDhCN0E2NUVCOTA5MzdFQzJD
MUQ2OEZBNDJDQjA2Q0E3RTMwMEYzQy8wLzMyMzAzMDJlMzEzMDM4MmUzMTM0Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGyUMA0GCSqG
SIb3DQEBCwUAA4IBAQAjCQM7E5sEUatOoued3Fbpp6ZQMQt8gd0jA4nnfLzW2riq
6A8+SkcQVsF8gwz/QARoYBoTugeuqbRb1egpk+s20mm2/14Rc8iXFY07hjNtF3xO
dkBS6iVmrExgopSR8LRitcjoOosxQKgENZbw9rDR2z4rEElH7vmN/nXXwgzUOv5M
/o9S1Lv+TVIkuxbuyQUSSb8yLnU++SnXZIAI3ENNKGx9cQ6XwtF2i/zQlIYZmN3k
Y8YevLaS8T42reOVm6Lq52H9oBqfuetGbgw7htd/cuNJXxI3L1XYBMiDCx3j7EkC
hUEDpbNxElvQInOcKyvPkwp5XiFCpLFmrSgcrivd
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:45:15 2025 by rpki-client