Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139342e302f32342d3234203d3e20323633373831.roa
File:                     3230302e3132332e3139342e302f32342d3234203d3e20323633373831.roa (raw, json)
Hash identifier:          cM2mazsJ6H535teGN8sOiOSA+wIVs0I3eHGY2yIcIeQ=
Subject key identifier:   5C:02:A3:8F:A2:DC:CB:78:A3:88:B5:DA:07:B5:C1:35:8D:61:A7:04
Certificate issuer:       /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial:       140095062A72F7D1EF03580C058D3AC8F6AB4663
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139342e302f32342d3234203d3e20323633373831.roa
Signing time:             Tue 04 Feb 2025 18:18:22 +0000
ROA not before:           Tue 04 Feb 2025 18:13:22 +0000
ROA not after:            Tue 03 Feb 2026 18:18:22 +0000
asID:                     263781
IP address blocks:        200.123.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 14:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:00:95:06:2a:72:f7:d1:ef:03:58:0c:05:8d:3a:c8:f6:ab:46:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
        Validity
            Not Before: Feb  4 18:13:22 2025 GMT
            Not After : Feb  3 18:18:22 2026 GMT
        Subject: CN=5C02A38FA2DCCB78A388B5DA07B5C1358D61A704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:05:ec:92:31:c6:86:87:97:1c:0e:86:00:
                    35:b8:59:bb:53:54:14:cc:e2:1d:76:cc:8b:45:ab:
                    6a:0f:ca:b1:9f:4d:96:8e:1a:16:67:90:aa:f5:c5:
                    df:7f:68:3c:0e:92:28:20:df:92:f3:5e:ac:be:8e:
                    ac:1b:78:4b:a9:98:15:4c:2a:97:df:4d:28:6e:dd:
                    9e:5c:9b:8c:c1:49:16:06:4c:60:88:a2:2e:d0:c5:
                    4f:99:6b:9c:e7:a0:1b:1a:c8:cc:d3:28:7f:06:fe:
                    3d:30:e6:2d:39:d8:21:cb:12:84:e1:94:65:92:5a:
                    32:8d:bb:2a:41:4e:f5:db:0e:bf:e3:58:6c:45:a6:
                    86:4c:28:14:8f:b6:9c:f1:13:e1:0d:7b:cf:9a:5e:
                    66:3c:95:64:ad:01:68:1f:85:a9:27:11:2a:82:45:
                    71:68:3a:6f:a2:bd:34:da:f6:cc:34:9b:e7:c3:80:
                    d6:41:0f:7b:12:e7:40:a1:2c:a3:3b:51:b7:f0:12:
                    8a:bd:7b:15:63:e5:19:1c:53:12:fe:67:9e:d6:c5:
                    3d:20:0d:bf:ed:f1:bc:e3:49:ee:9a:4f:6d:c5:e1:
                    f9:13:ce:56:38:3c:74:ec:1d:9f:ad:83:31:65:39:
                    62:7f:4c:2a:2d:1c:aa:d2:df:8e:b3:bb:b3:48:6d:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:02:A3:8F:A2:DC:CB:78:A3:88:B5:DA:07:B5:C1:35:8D:61:A7:04
            X509v3 Authority Key Identifier:
                keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139342e302f32342d3234203d3e20323633373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:78:f3:38:3d:c6:4d:9f:72:84:bb:4d:b1:06:e6:5e:e1:d6:
         6c:98:d4:29:17:52:54:c5:e5:7d:cb:5c:8d:35:27:3d:4d:bb:
         d5:1b:b2:3d:9a:98:88:98:59:05:32:d5:13:ea:83:c8:ab:49:
         cd:10:99:ab:2c:a9:68:10:10:19:8b:84:ea:7d:b8:64:30:32:
         f1:00:66:2f:13:16:66:bb:a2:97:e1:5c:80:35:d5:ee:b5:32:
         dc:43:28:4a:25:c9:4e:af:dd:37:ca:18:7b:86:15:87:8c:09:
         e1:ea:17:27:eb:eb:61:2a:dd:af:fb:0a:b6:5a:6d:67:f8:39:
         07:0a:4f:2f:4d:f3:6d:65:ab:ba:a1:7b:2d:5c:d8:73:1c:9c:
         28:44:88:45:06:23:ea:35:85:ae:e9:d2:24:cd:44:69:a4:8b:
         3c:e8:40:a0:b8:31:7d:ce:d4:a6:0d:f2:08:50:88:f7:a1:7f:
         0f:7f:71:53:2c:72:85:30:85:ed:91:4d:7d:b4:ef:13:f2:a1:
         22:bf:a0:50:c9:fc:b3:f5:b2:8e:49:91:29:8d:0c:ab:e6:b3:
         02:5c:ef:52:8f:82:5e:f6:ea:2b:f2:62:3d:5b:e8:6b:97:00:
         bc:83:3d:b6:42:3e:b4:62:fe:0e:8e:e9:ba:52:ab:73:5a:29:
         a9:72:2b:69
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUFACVBipy99HvA1gMBY06yParRmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2NDA2RjJBOURCQjA4QTlFRTNBQzJCNEY3OEVDMjVG
MkRGRDcyRDAeFw0yNTAyMDQxODEzMjJaFw0yNjAyMDMxODE4MjJaMDMxMTAvBgNV
BAMTKDVDMDJBMzhGQTJEQ0NCNzhBMzg4QjVEQTA3QjVDMTM1OEQ2MUE3MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAwXskjHGhoeXHA6GADW4WbtT
VBTM4h12zItFq2oPyrGfTZaOGhZnkKr1xd9/aDwOkigg35LzXqy+jqwbeEupmBVM
KpffTShu3Z5cm4zBSRYGTGCIoi7QxU+Za5znoBsayMzTKH8G/j0w5i052CHLEoTh
lGWSWjKNuypBTvXbDr/jWGxFpoZMKBSPtpzxE+ENe8+aXmY8lWStAWgfhaknESqC
RXFoOm+ivTTa9sw0m+fDgNZBD3sS50ChLKM7UbfwEoq9exVj5RkcUxL+Z57WxT0g
Db/t8bzjSe6aT23F4fkTzlY4PHTsHZ+tgzFlOWJ/TCotHKrS346zu7NIbU41AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUXAKjj6Lcy3ijiLXaB7XBNY1hpwQwHwYDVR0j
BBgwFoAU72QG8qnbsIqe46wrT3jsJfLf1y0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNDkwOUNFMEZERUU3Q0RENjdCQUVBRDdCNzg5QTE4MTQ1
MDY1RjcyRjkzRjFFMTgwNDRCNEExQTQ4NUM2NEExLzAvRUY2NDA2RjJBOURCQjA4
QTlFRTNBQzJCNEY3OEVDMjVGMkRGRDcyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjY0MDZGMkE5REJCMDhBOUVF
M0FDMkI0Rjc4RUMyNUYyREZENzJELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzQ5MDlDRTBGREVFN0NERDY3QkFFQUQ3Qjc4OUExODE0NTA2NUY3MkY5
M0YxRTE4MDQ0QjRBMUE0ODVDNjRBMS8wLzMyMzAzMDJlMzEzMjMzMmUzMTM5MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNzM4MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADI
e8IwDQYJKoZIhvcNAQELBQADggEBAIh48zg9xk2fcoS7TbEG5l7h1myY1CkXUlTF
5X3LXI01Jz1Nu9Ubsj2amIiYWQUy1RPqg8irSc0QmassqWgQEBmLhOp9uGQwMvEA
Zi8TFma7opfhXIA11e61MtxDKEolyU6v3TfKGHuGFYeMCeHqFyfr62Eq3a/7CrZa
bWf4OQcKTy9N821lq7qhey1c2HMcnChEiEUGI+o1ha7p0iTNRGmkizzoQKC4MX3O
1KYN8ghQiPehfw9/cVMscoUwhe2RTX207xPyoSK/oFDJ/LP1so5JkSmNDKvmswJc
71KPgl726ivyYj1b6GuXALyDPbZCPrRi/g6O6bpSq3NaKalyK2k=
-----END CERTIFICATE-----
Generated at Mon Apr 14 15:05:43 2025 by rpki-client