Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233382e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3233382e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          snm2OySsCiGWGW6uNxo5cNNdsXyjnWhROe42vr44d+I=
Subject key identifier:   5A:69:78:8B:E2:3A:18:03:E5:C8:B3:81:84:06:72:B9:EB:A4:EF:0A
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       138F22471372420091189828774029B254657609
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233382e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 04 Feb 2025 20:07:52 +0000
ROA not before:           Tue 04 Feb 2025 20:02:52 +0000
ROA not after:            Tue 03 Feb 2026 20:07:52 +0000
asID:                     13381
IP address blocks:        200.112.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8f:22:47:13:72:42:00:91:18:98:28:77:40:29:b2:54:65:76:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Feb  4 20:02:52 2025 GMT
            Not After : Feb  3 20:07:52 2026 GMT
        Subject: CN=5A69788BE23A1803E5C8B381840672B9EBA4EF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:9b:d1:d2:6a:39:6a:b1:e6:08:8e:17:9d:
                    d7:e6:74:fd:03:30:17:66:cf:fe:38:fd:25:bc:90:
                    07:69:39:69:e3:c6:3c:7f:d7:a4:8a:95:f9:b2:80:
                    66:2a:15:04:e5:f1:0f:94:11:29:c4:66:1a:3b:3d:
                    8e:a9:44:71:00:07:0c:55:9e:58:02:b3:ab:30:ad:
                    ac:9b:10:69:9f:77:86:9e:b8:b2:ac:fb:45:17:a3:
                    05:e3:d8:7a:97:b3:82:65:84:81:1e:f2:e9:60:35:
                    5f:a0:0f:d4:bd:5f:67:f6:ac:dd:80:51:4c:73:6f:
                    3e:b4:f6:be:7a:23:08:cf:67:67:0e:bf:d7:f3:54:
                    f3:a0:2b:35:08:49:fb:5a:12:c2:11:93:91:4a:f4:
                    71:30:41:6d:81:33:d7:c4:9a:83:95:82:52:97:e8:
                    77:f8:73:7b:e0:28:60:f2:7c:0a:74:0e:2f:2b:cb:
                    f2:8d:62:07:2a:cd:cd:17:da:7a:4f:06:ec:24:c9:
                    21:fb:50:e4:75:4e:f6:0e:b6:45:16:72:dd:5f:14:
                    00:a3:13:00:c9:47:bc:7a:b8:63:92:05:9c:ba:76:
                    c0:77:f5:0a:09:35:05:bd:47:c9:5b:82:40:47:e6:
                    be:59:f7:4f:d6:1a:fa:6a:cb:d5:70:a2:9d:34:38:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:69:78:8B:E2:3A:18:03:E5:C8:B3:81:84:06:72:B9:EB:A4:EF:0A
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233382e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:2e:77:ca:b2:35:9e:96:63:94:6a:bc:c4:55:59:22:32:dd:
         e6:f5:ce:f8:0f:e5:6e:b4:dd:a2:a2:02:50:c1:28:45:63:62:
         0f:ee:7f:46:57:a1:2b:ac:02:8c:87:2e:f5:3b:24:e6:c0:a0:
         d9:eb:85:8d:9a:b5:60:60:c6:8b:bb:a6:97:31:24:01:4e:11:
         2f:9e:1a:9d:e7:b0:bd:94:9f:60:04:09:a8:27:96:c3:12:35:
         71:a8:b7:17:ef:6a:7b:c4:a2:70:12:89:ec:73:b1:2a:a2:5b:
         e4:24:14:a4:62:45:24:1c:9c:79:76:bc:e5:53:ba:15:c4:72:
         fe:fc:30:ab:47:4c:3d:e3:a8:29:07:80:37:9f:64:50:4b:7c:
         2f:63:e0:59:c8:52:b3:ef:b6:cb:96:81:51:c1:e5:6f:74:ff:
         19:f0:b3:80:40:03:61:07:5e:0e:ac:f7:5c:4d:f7:6e:33:96:
         46:a9:43:13:2a:a5:1d:7f:31:01:20:4e:e0:2a:4a:4f:81:d7:
         0b:80:57:f9:d4:57:eb:ed:25:ea:6f:5f:5e:64:81:13:d3:d6:
         04:c0:7f:96:60:98:cb:b5:2c:cc:b1:70:83:59:61:85:16:ba:
         19:6d:4e:fa:14:f7:64:0f:c5:ef:f9:7f:6d:49:52:ba:aa:21:
         0a:cc:a0:be
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUE48iRxNyQgCRGJgod0ApslRldgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNTAyMDQyMDAyNTJaFw0yNjAyMDMyMDA3NTJaMDMxMTAvBgNV
BAMTKDVBNjk3ODhCRTIzQTE4MDNFNUM4QjM4MTg0MDY3MkI5RUJBNEVGMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Q5vR0mo5arHmCI4XndfmdP0D
MBdmz/44/SW8kAdpOWnjxjx/16SKlfmygGYqFQTl8Q+UESnEZho7PY6pRHEABwxV
nlgCs6swraybEGmfd4aeuLKs+0UXowXj2HqXs4JlhIEe8ulgNV+gD9S9X2f2rN2A
UUxzbz609r56IwjPZ2cOv9fzVPOgKzUISftaEsIRk5FK9HEwQW2BM9fEmoOVglKX
6Hf4c3vgKGDyfAp0Di8ry/KNYgcqzc0X2npPBuwkySH7UOR1TvYOtkUWct1fFACj
EwDJR7x6uGOSBZy6dsB39QoJNQW9R8lbgkBH5r5Z90/WGvpqy9Vwop00OPuXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWml4i+I6GAPlyLOBhAZyueuk7wowHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjMzMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHDu
MA0GCSqGSIb3DQEBCwUAA4IBAQAyLnfKsjWelmOUarzEVVkiMt3m9c74D+VutN2i
ogJQwShFY2IP7n9GV6ErrAKMhy71OyTmwKDZ64WNmrVgYMaLu6aXMSQBThEvnhqd
57C9lJ9gBAmoJ5bDEjVxqLcX72p7xKJwEonsc7EqolvkJBSkYkUkHJx5drzlU7oV
xHL+/DCrR0w946gpB4A3n2RQS3wvY+BZyFKz77bLloFRweVvdP8Z8LOAQANhB14O
rPdcTfduM5ZGqUMTKqUdfzEBIE7gKkpPgdcLgFf51Ffr7SXqb19eZIET09YEwH+W
YJjLtSzMsXCDWWGFFroZbU76FPdkD8Xv+X9tSVK6qiEKzKC+
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:06 2025 by rpki-client