Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e34362e302f32342d3234203d3e203237373534.roa
File:                     3230302e36312e34362e302f32342d3234203d3e203237373534.roa (raw, json)
Hash identifier:          LqtO/qToQMIKSz1We/tPe1rtzIcIFGqhuSTBbi8gnBE=
Subject key identifier:   4E:97:73:90:FC:53:87:E4:C3:0B:62:91:0E:C0:88:C3:84:9D:94:0E
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       4BC2184E47651DF8776E90BC3C43210483683D32
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e34362e302f32342d3234203d3e203237373534.roa
Signing time:             Tue 04 Feb 2025 18:08:47 +0000
ROA not before:           Tue 04 Feb 2025 18:03:47 +0000
ROA not after:            Tue 03 Feb 2026 18:08:47 +0000
asID:                     27754
IP address blocks:        200.61.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c2:18:4e:47:65:1d:f8:77:6e:90:bc:3c:43:21:04:83:68:3d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Feb  4 18:03:47 2025 GMT
            Not After : Feb  3 18:08:47 2026 GMT
        Subject: CN=4E977390FC5387E4C30B62910EC088C3849D940E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:c2:1a:d6:f1:fd:d9:48:c8:23:c2:4a:82:
                    00:dc:7c:c0:bc:13:0d:ba:ec:fe:11:3b:f0:57:e1:
                    57:c7:7e:f7:12:28:99:e7:e3:a3:1d:69:0f:fb:63:
                    30:7c:41:1f:64:51:f7:63:be:98:0e:db:e6:f9:7b:
                    0e:14:0e:c3:61:16:f9:22:23:93:b5:bf:c6:c4:3c:
                    e2:5d:16:34:3d:56:64:9f:28:2c:75:bc:65:79:99:
                    d4:dc:98:49:d8:6c:b5:d2:6b:26:30:19:a2:cd:2a:
                    2d:1a:cf:91:69:52:c2:c3:5d:cb:f8:6b:c9:bc:59:
                    8b:2f:38:15:6d:74:ea:99:8e:aa:00:c9:b4:2d:b4:
                    57:45:16:06:b3:bc:d4:8d:a1:99:5d:22:8d:ba:93:
                    9b:7d:ca:0d:71:fd:56:fb:12:9f:8c:b9:a4:29:b1:
                    5c:0f:63:43:f6:c4:02:17:11:f8:6a:87:73:3b:ee:
                    f4:db:57:a0:51:ae:c3:c5:15:b3:0a:a0:a0:29:fe:
                    42:58:a1:9d:3a:4d:35:74:c8:2d:f9:bc:cb:c7:a1:
                    f8:81:29:0a:43:6c:61:8d:12:75:c9:ad:8e:7f:9b:
                    19:fb:07:c5:26:2c:e3:18:97:0b:00:b1:88:81:42:
                    24:98:82:1e:32:00:2f:f1:31:66:6b:03:62:f7:ea:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:97:73:90:FC:53:87:E4:C3:0B:62:91:0E:C0:88:C3:84:9D:94:0E
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e34362e302f32342d3234203d3e203237373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:8d:10:db:26:d9:66:18:40:7d:02:80:5d:35:15:9f:bf:a5:
         8c:8c:8b:98:58:99:8b:d9:f9:5c:49:4f:88:24:66:3c:90:5a:
         00:24:72:e0:6c:50:c0:bb:85:42:2c:e5:36:1b:6c:52:a8:f9:
         f0:57:ab:bf:12:d5:e8:df:a7:dc:28:66:d4:6c:74:1f:1a:e1:
         94:16:69:3f:9b:0f:7c:6d:48:45:f9:94:c7:6a:59:3b:e4:a4:
         50:7a:2e:4e:b0:4d:e8:1c:b3:01:57:be:56:7b:91:77:24:70:
         95:f0:78:75:f0:1b:ae:25:6a:ca:73:b5:f5:58:85:5b:45:84:
         18:98:dc:c2:c1:6f:7e:90:d1:3d:91:95:e4:da:fa:c8:69:e3:
         a1:c8:70:33:e0:6c:bf:98:43:4a:23:3b:c2:a6:b6:b4:70:b0:
         aa:08:07:13:78:6a:ee:d2:9d:0c:d5:35:b2:3b:10:17:d3:c1:
         e9:8b:11:1b:5c:62:94:8b:c2:8a:2e:07:fc:2c:51:ba:86:c5:
         0e:ce:db:8e:82:80:f9:e6:26:23:0d:d4:ac:f7:b7:34:09:82:
         7a:61:16:c1:31:36:58:2a:39:c0:5c:6e:cd:db:cb:95:4e:36:
         83:58:28:ea:2a:37:ef:01:8a:55:5b:7a:1f:b1:dd:5c:62:83:
         da:bc:e2:d3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUS8IYTkdlHfh3bpC8PEMhBINoPTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIxMEI2OUI3QTE2RTJDQjIyOTBBMzNFRUI3NERFMjc0
RjgzNzU3NTAeFw0yNTAyMDQxODAzNDdaFw0yNjAyMDMxODA4NDdaMDMxMTAvBgNV
BAMTKDRFOTc3MzkwRkM1Mzg3RTRDMzBCNjI5MTBFQzA4OEMzODQ5RDk0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA98Ia1vH92UjII8JKggDcfMC8
Ew267P4RO/BX4VfHfvcSKJnn46MdaQ/7YzB8QR9kUfdjvpgO2+b5ew4UDsNhFvki
I5O1v8bEPOJdFjQ9VmSfKCx1vGV5mdTcmEnYbLXSayYwGaLNKi0az5FpUsLDXcv4
a8m8WYsvOBVtdOqZjqoAybQttFdFFgazvNSNoZldIo26k5t9yg1x/Vb7Ep+MuaQp
sVwPY0P2xAIXEfhqh3M77vTbV6BRrsPFFbMKoKAp/kJYoZ06TTV0yC35vMvHofiB
KQpDbGGNEnXJrY5/mxn7B8UmLOMYlwsAsYiBQiSYgh4yAC/xMWZrA2L36j9nAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUTpdzkPxTh+TDC2KRDsCIw4SdlA4wHwYDVR0j
BBgwFoAUuxC2m3oW4ssikKM+63TeJ0+DdXUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOTAzNzRFQURDQTUxNzBBMzdGNkI0NzM1QTg1Q0UwODNF
QURBRkRGQjk2QUE5M0M5Q0EwNEZCNkUxNzEwQUVELzAvQkIxMEI2OUI3QTE2RTJD
QjIyOTBBMzNFRUI3NERFMjc0RjgzNzU3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQjEwQjY5QjdBMTZFMkNCMjI5
MEEzM0VFQjc0REUyNzRGODM3NTc1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzkwMzc0RUFEQ0E1MTcwQTM3RjZCNDczNUE4NUNFMDgzRUFEQUZERkI5
NkFBOTNDOUNBMDRGQjZFMTcxMEFFRC8wLzMyMzAzMDJlMzYzMTJlMzQzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNzM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIPS4wDQYJ
KoZIhvcNAQELBQADggEBAKiNENsm2WYYQH0CgF01FZ+/pYyMi5hYmYvZ+VxJT4gk
ZjyQWgAkcuBsUMC7hUIs5TYbbFKo+fBXq78S1ejfp9woZtRsdB8a4ZQWaT+bD3xt
SEX5lMdqWTvkpFB6Lk6wTegcswFXvlZ7kXckcJXweHXwG64laspztfVYhVtFhBiY
3MLBb36Q0T2RleTa+shp46HIcDPgbL+YQ0ojO8KmtrRwsKoIBxN4au7SnQzVNbI7
EBfTwemLERtcYpSLwoouB/wsUbqGxQ7O246CgPnmJiMN1Kz3tzQJgnphFsExNlgq
OcBcbs3by5VONoNYKOoqN+8BilVbeh+x3Vxig9q84tM=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:06:25 2025 by rpki-client