Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e36312e302f32342d3234203d3e203233323433.roa
File:                     3230302e31322e36312e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          VHEL2PWSIYVDv+XXNBL04ALBnFqezYITuWyH+FbtUfE=
Subject key identifier:   E5:F0:66:81:C5:51:D4:BA:E5:59:2D:AE:74:C0:42:33:19:B8:E3:C8
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       361E8C244DC6A5B52C72ED26C49AB6106F5C68B6
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e36312e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:06:40 +0000
ROA not before:           Tue 04 Feb 2025 18:01:40 +0000
ROA not after:            Tue 03 Feb 2026 18:06:40 +0000
asID:                     23243
IP address blocks:        200.12.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1e:8c:24:4d:c6:a5:b5:2c:72:ed:26:c4:9a:b6:10:6f:5c:68:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:40 2025 GMT
            Not After : Feb  3 18:06:40 2026 GMT
        Subject: CN=E5F06681C551D4BAE5592DAE74C0423319B8E3C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:74:1a:48:57:e9:57:fb:0b:9b:53:ef:11:b1:
                    79:f5:dc:be:0c:33:55:f3:32:f4:d3:6f:d7:94:47:
                    a5:fc:b0:56:26:b8:79:6e:c6:65:8f:3d:7b:0a:51:
                    cd:16:d8:b0:cb:9e:0f:81:b5:ec:7a:09:a5:c1:77:
                    ec:a8:1c:4d:d2:c7:e7:bf:70:fe:64:e5:e8:a5:d9:
                    58:e0:1c:ad:89:c3:3e:20:6e:f0:18:bd:ea:8a:98:
                    90:d3:e5:76:22:df:e2:92:99:83:47:d9:ad:f5:f2:
                    2d:1f:92:ec:71:9e:b3:e7:15:92:39:60:e1:1b:53:
                    77:2f:b9:cf:31:07:29:17:00:d9:c8:b9:11:56:00:
                    2b:36:89:c2:d0:d9:97:9a:c5:ff:19:4d:7a:f1:99:
                    48:1f:07:95:e4:f9:23:3b:18:b6:a0:10:c6:fb:75:
                    b3:23:45:31:56:2d:0a:63:11:09:e3:4e:ec:b3:91:
                    d9:ad:57:e3:87:97:ed:9f:06:5a:6b:d4:2c:21:f1:
                    7e:5a:a2:07:8f:c4:3a:83:aa:bf:b1:16:e5:ea:bf:
                    78:4d:85:c6:13:b2:bf:65:77:d5:9d:ac:14:3f:28:
                    54:1d:b3:d7:09:5a:9f:1b:da:cc:c5:1c:dd:dd:8d:
                    46:33:2b:73:ef:9c:c2:0c:0d:50:ac:fd:c0:4d:e9:
                    ba:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F0:66:81:C5:51:D4:BA:E5:59:2D:AE:74:C0:42:33:19:B8:E3:C8
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e36312e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:55:90:9f:75:4c:72:f6:2e:4d:a2:1b:21:1d:1b:7e:da:eb:
         7b:46:39:71:48:e1:59:37:54:7d:1d:06:de:4f:37:95:61:96:
         12:2e:6c:49:9d:05:95:6f:24:1a:30:f3:f5:5c:e6:6d:9f:90:
         ab:9f:9a:56:92:5b:9c:20:fc:3d:2b:f0:59:24:08:05:a5:23:
         ba:d0:63:5e:4a:f3:6f:83:2c:fb:3b:51:e9:0c:44:d2:ca:97:
         7c:6b:b1:3d:96:b3:aa:8b:2f:79:d2:dd:17:d6:d6:f5:de:ff:
         91:3b:8a:7d:80:5b:0a:ca:f4:b4:4a:28:fa:19:ca:b9:76:20:
         f0:ec:f8:f3:66:c8:b0:5a:bf:6e:94:cc:23:f9:ba:30:f9:de:
         ad:fc:df:cd:9f:0a:a9:e5:f0:f3:ef:7d:ea:b3:c9:55:03:70:
         2b:da:9b:01:20:8c:b2:72:60:ff:9b:08:22:1e:20:c0:35:f6:
         92:3c:b0:a1:3b:56:76:cc:2c:8f:4b:94:10:50:06:d8:73:41:
         82:82:30:05:64:39:58:52:1a:7c:24:56:8f:da:42:75:21:70:
         14:d1:84:df:c1:63:de:5b:8d:3e:19:b8:09:e7:a6:23:d0:0c:
         1f:75:72:3d:e8:0e:91:f4:c0:2c:b0:ea:38:90:a8:b5:53:7a:
         c2:a5:2c:2f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNh6MJE3GpbUscu0mxJq2EG9caLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRFNDFDMERBREIxMjQ2NUFGRjVDRjdBMzg5MzA1ODJF
NDQ5OTA4MzAeFw0yNTAyMDQxODAxNDBaFw0yNjAyMDMxODA2NDBaMDMxMTAvBgNV
BAMTKEU1RjA2NjgxQzU1MUQ0QkFFNTU5MkRBRTc0QzA0MjMzMTlCOEUzQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdBpIV+lX+wubU+8RsXn13L4M
M1XzMvTTb9eUR6X8sFYmuHluxmWPPXsKUc0W2LDLng+Btex6CaXBd+yoHE3Sx+e/
cP5k5eil2VjgHK2Jwz4gbvAYveqKmJDT5XYi3+KSmYNH2a318i0fkuxxnrPnFZI5
YOEbU3cvuc8xBykXANnIuRFWACs2icLQ2Zeaxf8ZTXrxmUgfB5Xk+SM7GLagEMb7
dbMjRTFWLQpjEQnjTuyzkdmtV+OHl+2fBlpr1Cwh8X5aogePxDqDqr+xFuXqv3hN
hcYTsr9ld9WdrBQ/KFQds9cJWp8b2szFHN3djUYzK3PvnMIMDVCs/cBN6brlAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU5fBmgcVR1LrlWS2udMBCMxm448gwHwYDVR0j
BBgwFoAUVOQcDa2xJGWv9c96OJMFguRJkIMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NTZFMkQ2OUE5NDJCMzNDN0M0ODFGMDhGRDBFN0FFQTVE
RkFFNDRGNDg1RDA3RUQwQTc0MDY0RERFQ0E2MzMzLzAvNTRFNDFDMERBREIxMjQ2
NUFGRjVDRjdBMzg5MzA1ODJFNDQ5OTA4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEU0MUMwREFEQjEyNDY1QUZG
NUNGN0EzODkzMDU4MkU0NDk5MDgzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDU2RTJENjlBOTQyQjMzQzdDNDgxRjA4RkQwRTdBRUE1REZBRTQ0RjQ4
NUQwN0VEMEE3NDA2NERERUNBNjMzMy8wLzMyMzAzMDJlMzEzMjJlMzYzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzMjM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIDD0wDQYJ
KoZIhvcNAQELBQADggEBAElVkJ91THL2Lk2iGyEdG37a63tGOXFI4Vk3VH0dBt5P
N5VhlhIubEmdBZVvJBow8/Vc5m2fkKufmlaSW5wg/D0r8FkkCAWlI7rQY15K82+D
LPs7UekMRNLKl3xrsT2Ws6qLL3nS3RfW1vXe/5E7in2AWwrK9LRKKPoZyrl2IPDs
+PNmyLBav26UzCP5ujD53q38382fCqnl8PPvfeqzyVUDcCvamwEgjLJyYP+bCCIe
IMA19pI8sKE7VnbMLI9LlBBQBthzQYKCMAVkOVhSGnwkVo/aQnUhcBTRhN/BY95b
jT4ZuAnnpiPQDB91cj3oDpH0wCyw6jiQqLVTesKlLC8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:04 2025 by rpki-client