Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30C292C64C48F887F41ECCAB47037C13BDEE7E08BFF69FD2BB0192246251AFFE/0/3139322e3230372e36372e302f32342d3234203d3e203233303331.roa
File:                     3139322e3230372e36372e302f32342d3234203d3e203233303331.roa (raw, json)
Hash identifier:          lLSccuErY84G+9ZdpgmWb6hY7MEgHgjmbJF0lHciwe4=
Subject key identifier:   B8:64:84:30:37:E9:66:99:0B:47:95:F8:9D:CB:DF:E3:FA:59:83:6A
Certificate issuer:       /CN=83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3
Certificate serial:       6DE6B02A81AEBFD5F69FF9AAB7C30AA30A46CDCC
Authority key identifier: 83:E2:3D:1C:F3:7B:B1:A7:4B:E6:25:B6:B2:9E:4B:3F:27:E2:94:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30C292C64C48F887F41ECCAB47037C13BDEE7E08BFF69FD2BB0192246251AFFE/0/3139322e3230372e36372e302f32342d3234203d3e203233303331.roa
Signing time:             Tue 04 Feb 2025 18:46:10 +0000
ROA not before:           Tue 04 Feb 2025 18:41:10 +0000
ROA not after:            Tue 03 Feb 2026 18:46:10 +0000
asID:                     23031
IP address blocks:        192.207.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30C292C64C48F887F41ECCAB47037C13BDEE7E08BFF69FD2BB0192246251AFFE/0/83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30C292C64C48F887F41ECCAB47037C13BDEE7E08BFF69FD2BB0192246251AFFE/0/83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e6:b0:2a:81:ae:bf:d5:f6:9f:f9:aa:b7:c3:0a:a3:0a:46:cd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3
        Validity
            Not Before: Feb  4 18:41:10 2025 GMT
            Not After : Feb  3 18:46:10 2026 GMT
        Subject: CN=B864843037E966990B4795F89DCBDFE3FA59836A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ca:17:24:43:43:08:24:47:a5:15:5b:19:0b:
                    6a:f2:59:35:a1:ca:5b:0e:f5:2c:49:b8:d8:de:38:
                    61:6e:33:e5:99:76:73:d1:67:4d:25:77:c3:2e:e1:
                    50:de:71:46:11:3e:50:38:59:bc:8e:80:3b:7b:67:
                    52:cd:b9:b2:c8:27:33:f9:4a:a6:ac:59:fd:e0:8a:
                    a9:05:0b:82:2d:f0:5f:7d:60:fa:be:5c:3f:44:be:
                    2f:55:cd:b0:44:46:9a:17:c4:cc:a2:2d:c3:93:87:
                    4e:62:42:3c:a1:86:c6:3b:bf:a8:11:84:ad:77:20:
                    67:13:61:55:18:10:d6:14:9e:93:b8:b7:ae:97:cd:
                    a5:0b:44:58:e7:98:66:51:2f:0a:80:a6:ca:62:cd:
                    30:9d:61:ad:8f:a7:fe:28:b5:0e:dc:61:29:9f:ea:
                    37:2d:57:98:72:71:93:5b:4a:d1:0f:ef:67:98:57:
                    b7:8e:c0:5b:4d:cd:92:a8:75:e7:4d:e8:2d:7a:1f:
                    99:f4:a8:d6:65:bc:59:3b:de:12:27:d9:54:8e:44:
                    bb:e1:14:ff:f2:2c:82:be:f5:cd:e5:d6:bf:3c:4e:
                    6f:fb:f5:b9:95:3b:80:d4:35:b2:e4:a3:31:0f:1d:
                    5f:42:0e:e2:60:a0:0d:90:38:7e:99:09:1b:5b:ee:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:64:84:30:37:E9:66:99:0B:47:95:F8:9D:CB:DF:E3:FA:59:83:6A
            X509v3 Authority Key Identifier:
                keyid:83:E2:3D:1C:F3:7B:B1:A7:4B:E6:25:B6:B2:9E:4B:3F:27:E2:94:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30C292C64C48F887F41ECCAB47037C13BDEE7E08BFF69FD2BB0192246251AFFE/0/83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83E23D1CF37BB1A74BE625B6B29E4B3F27E294F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30C292C64C48F887F41ECCAB47037C13BDEE7E08BFF69FD2BB0192246251AFFE/0/3139322e3230372e36372e302f32342d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:6c:b2:c2:c9:bf:79:5a:e7:aa:45:e3:05:70:22:6e:11:2c:
         2d:89:4d:df:d6:41:16:ac:55:67:9e:6e:d6:3a:86:90:15:e0:
         fe:57:ee:a4:31:be:36:a8:bb:b1:f8:fe:19:ab:79:d8:d7:f5:
         59:43:b7:fd:99:ba:cd:e4:3c:d9:20:d8:39:25:96:cb:e1:41:
         32:98:9e:e3:6a:9a:05:c4:03:d4:58:06:2c:17:9e:dc:3b:06:
         83:32:a6:69:26:61:db:bc:c7:65:5a:fb:fb:da:3e:4d:3f:3b:
         5e:a0:f2:35:7e:71:a6:74:68:16:b9:8d:67:69:e5:fd:ed:13:
         0f:dc:fa:72:03:20:df:13:15:18:32:dd:29:3f:a6:07:24:07:
         f0:b4:8a:9f:15:54:fa:d6:ef:8b:d3:12:6f:24:3f:0a:95:57:
         2d:22:a2:25:35:05:d0:08:25:06:b1:59:8f:2a:17:b6:4d:17:
         31:64:4e:79:a5:f3:2d:43:a4:1a:85:d9:59:20:5d:60:b4:b5:
         15:fd:40:35:b5:50:fb:ea:58:cc:95:c3:a1:34:3f:61:1f:63:
         ee:b4:27:64:fb:bd:9a:95:32:c3:21:b3:bd:22:97:01:cd:fc:
         99:85:02:bf:6f:31:6a:8f:63:0a:62:d6:91:01:f7:f3:f6:38:
         d6:35:a1:45
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbeawKoGuv9X2n/mqt8MKowpGzcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNFMjNEMUNGMzdCQjFBNzRCRTYyNUI2QjI5RTRCM0Yy
N0UyOTRGMzAeFw0yNTAyMDQxODQxMTBaFw0yNjAyMDMxODQ2MTBaMDMxMTAvBgNV
BAMTKEI4NjQ4NDMwMzdFOTY2OTkwQjQ3OTVGODlEQ0JERkUzRkE1OTgzNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWyhckQ0MIJEelFVsZC2ryWTWh
ylsO9SxJuNjeOGFuM+WZdnPRZ00ld8Mu4VDecUYRPlA4WbyOgDt7Z1LNubLIJzP5
SqasWf3giqkFC4It8F99YPq+XD9Evi9VzbBERpoXxMyiLcOTh05iQjyhhsY7v6gR
hK13IGcTYVUYENYUnpO4t66XzaULRFjnmGZRLwqApspizTCdYa2Pp/4otQ7cYSmf
6jctV5hycZNbStEP72eYV7eOwFtNzZKodedN6C16H5n0qNZlvFk73hIn2VSORLvh
FP/yLIK+9c3l1r88Tm/79bmVO4DUNbLkozEPHV9CDuJgoA2QOH6ZCRtb7tefAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUuGSEMDfpZpkLR5X4ncvf4/pZg2owHwYDVR0j
BBgwFoAUg+I9HPN7sadL5iW2sp5LPyfilPMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMEMyOTJDNjRDNDhGODg3RjQxRUNDQUI0NzAzN0MxM0JE
RUU3RTA4QkZGNjlGRDJCQjAxOTIyNDYyNTFBRkZFLzAvODNFMjNEMUNGMzdCQjFB
NzRCRTYyNUI2QjI5RTRCM0YyN0UyOTRGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84M0UyM0QxQ0YzN0JCMUE3NEJF
NjI1QjZCMjlFNEIzRjI3RTI5NEYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzBDMjkyQzY0QzQ4Rjg4N0Y0MUVDQ0FCNDcwMzdDMTNCREVFN0UwOEJG
RjY5RkQyQkIwMTkyMjQ2MjUxQUZGRS8wLzMxMzkzMjJlMzIzMDM3MmUzNjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzMwMzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMDPQzAN
BgkqhkiG9w0BAQsFAAOCAQEATWyywsm/eVrnqkXjBXAibhEsLYlN39ZBFqxVZ55u
1jqGkBXg/lfupDG+Nqi7sfj+Gat52Nf1WUO3/Zm6zeQ82SDYOSWWy+FBMpie42qa
BcQD1FgGLBee3DsGgzKmaSZh27zHZVr7+9o+TT87XqDyNX5xpnRoFrmNZ2nl/e0T
D9z6cgMg3xMVGDLdKT+mByQH8LSKnxVU+tbvi9MSbyQ/CpVXLSKiJTUF0AglBrFZ
jyoXtk0XMWROeaXzLUOkGoXZWSBdYLS1Ff1ANbVQ++pYzJXDoTQ/YR9j7rQnZPu9
mpUywyGzvSKXAc38mYUCv28xao9jCmLWkQH38/Y41jWhRQ==
-----END CERTIFICATE-----
Generated at Tue Apr 15 15:29:53 2025 by rpki-client