Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234322e302f32332d3234203d3e203133333831.roa
File:                     3230302e3131322e3234322e302f32332d3234203d3e203133333831.roa (raw, json)
Hash identifier:          poNf5iSIBR4ETFXYUXJWTxNW24bI+vNTS9IYu/ZeUeM=
Subject key identifier:   4A:4A:90:5F:67:C9:88:0D:63:BB:B5:74:16:34:72:CC:74:AE:51:EB
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       16325F9D827C281B9D1FFF02A88E1462C5CF3264
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234322e302f32332d3234203d3e203133333831.roa
Signing time:             Tue 04 Feb 2025 20:07:57 +0000
ROA not before:           Tue 04 Feb 2025 20:02:57 +0000
ROA not after:            Tue 03 Feb 2026 20:07:57 +0000
asID:                     13381
IP address blocks:        200.112.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:32:5f:9d:82:7c:28:1b:9d:1f:ff:02:a8:8e:14:62:c5:cf:32:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Feb  4 20:02:57 2025 GMT
            Not After : Feb  3 20:07:57 2026 GMT
        Subject: CN=4A4A905F67C9880D63BBB574163472CC74AE51EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4e:fb:30:c2:d4:4c:fc:2f:8e:08:23:70:d5:
                    9c:eb:9e:82:a3:75:94:37:4d:ea:13:28:a5:22:5b:
                    cc:dc:63:1a:2b:d9:46:b3:ed:a5:51:c3:3c:61:4a:
                    37:ca:9e:0c:af:65:62:6f:49:96:0d:ed:fd:33:fa:
                    15:08:a4:f9:a6:c9:ff:16:b5:3f:6f:fb:b4:b4:cc:
                    53:e5:6e:25:a7:fc:d1:a9:84:13:52:e2:e8:c7:05:
                    3a:7d:d0:5d:1f:40:78:14:49:28:07:05:5b:cc:18:
                    de:40:01:7b:1f:f8:f0:66:7d:76:99:44:b5:56:f3:
                    10:2e:62:e7:73:c4:cd:88:a4:82:97:25:59:b3:e4:
                    51:8b:bd:3b:97:0a:07:67:3e:a9:9d:ea:21:ea:d9:
                    53:8f:99:2c:76:bd:a4:1b:08:3c:5a:3b:bf:0c:2b:
                    6c:55:09:78:39:19:be:3e:6a:d6:31:f3:cc:63:72:
                    d8:db:c2:64:79:40:fb:3d:32:e0:18:4a:20:d0:b2:
                    50:d0:46:e0:27:c2:ae:19:ba:d0:4b:54:76:56:bd:
                    90:2c:73:55:cc:a4:94:9a:a0:ee:bb:f1:32:af:35:
                    9f:62:b6:bf:ae:3d:9a:81:1b:3d:18:18:14:50:2f:
                    86:e3:3a:65:0d:38:50:b9:78:14:8c:8a:21:7c:6d:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4A:90:5F:67:C9:88:0D:63:BB:B5:74:16:34:72:CC:74:AE:51:EB
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234322e302f32332d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:df:2c:cc:83:20:4b:a0:1f:7d:56:8c:2a:6e:18:1b:e6:e8:
         c1:e4:e8:97:77:cc:e8:e4:ca:08:e6:3b:51:b0:45:d3:bd:c5:
         43:30:b5:4d:dc:85:86:37:38:98:54:c6:59:ff:e1:1d:ec:76:
         72:3a:59:77:78:8d:21:f0:35:b2:a3:8f:17:bd:72:82:6e:98:
         45:36:c8:1c:71:f1:9e:8e:19:fb:d5:dc:2b:f1:74:d2:c3:86:
         84:de:9a:34:79:45:af:31:13:50:16:e4:38:8d:ab:67:50:38:
         09:b7:1c:4c:68:95:c6:22:4f:b5:8a:a1:bb:6e:d5:65:1a:5e:
         1d:69:9f:1e:5f:81:b6:66:3a:87:da:66:34:83:d4:22:93:30:
         e5:c2:34:47:09:f9:cb:bb:d0:fe:ea:f9:60:97:28:a3:22:ba:
         db:da:6e:6c:14:8e:d8:1e:62:6e:63:6b:f5:bc:dc:f4:52:01:
         00:71:6d:d5:c2:1c:ab:4c:3a:aa:1c:e7:78:1e:fb:f3:be:b5:
         3e:74:d0:71:db:da:ac:b9:a6:e2:be:63:74:cc:4c:62:42:d1:
         58:bd:d2:d9:1f:2b:1e:f3:87:88:9d:21:9e:54:bb:11:d3:2d:
         d7:e3:eb:e3:b1:85:46:1d:67:0b:8d:86:66:52:00:02:8d:11:
         eb:d5:e5:50
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFjJfnYJ8KBudH/8CqI4UYsXPMmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNTAyMDQyMDAyNTdaFw0yNjAyMDMyMDA3NTdaMDMxMTAvBgNV
BAMTKDRBNEE5MDVGNjdDOTg4MEQ2M0JCQjU3NDE2MzQ3MkNDNzRBRTUxRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTvswwtRM/C+OCCNw1ZzrnoKj
dZQ3TeoTKKUiW8zcYxor2Uaz7aVRwzxhSjfKngyvZWJvSZYN7f0z+hUIpPmmyf8W
tT9v+7S0zFPlbiWn/NGphBNS4ujHBTp90F0fQHgUSSgHBVvMGN5AAXsf+PBmfXaZ
RLVW8xAuYudzxM2IpIKXJVmz5FGLvTuXCgdnPqmd6iHq2VOPmSx2vaQbCDxaO78M
K2xVCXg5Gb4+atYx88xjctjbwmR5QPs9MuAYSiDQslDQRuAnwq4ZutBLVHZWvZAs
c1XMpJSaoO678TKvNZ9itr+uPZqBGz0YGBRQL4bjOmUNOFC5eBSMiiF8bZWrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUSkqQX2fJiA1ju7V0FjRyzHSuUeswHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjM0MzIy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByHDy
MA0GCSqGSIb3DQEBCwUAA4IBAQA33yzMgyBLoB99Vowqbhgb5ujB5OiXd8zo5MoI
5jtRsEXTvcVDMLVN3IWGNziYVMZZ/+Ed7HZyOll3eI0h8DWyo48XvXKCbphFNsgc
cfGejhn71dwr8XTSw4aE3po0eUWvMRNQFuQ4jatnUDgJtxxMaJXGIk+1iqG7btVl
Gl4daZ8eX4G2ZjqH2mY0g9QikzDlwjRHCfnLu9D+6vlglyijIrrb2m5sFI7YHmJu
Y2v1vNz0UgEAcW3VwhyrTDqqHOd4HvvzvrU+dNBx29qsuabivmN0zExiQtFYvdLZ
Hyse84eInSGeVLsR0y3X4+vjsYVGHWcLjYZmUgACjRHr1eVQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:36 2025 by rpki-client