Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234342e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3234342e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          6j4Z+tGJgy4bEhR5GhC9D82PNqIMhA6zS08whVkjptY=
Subject key identifier:   0B:16:16:13:B0:C0:67:00:18:3A:90:96:1F:A9:00:D6:83:7C:B6:B5
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       3958F5293A237DC96DD150D21AB1E8FF7E0B9BD7
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234342e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 04 Feb 2025 20:07:55 +0000
ROA not before:           Tue 04 Feb 2025 20:02:55 +0000
ROA not after:            Tue 03 Feb 2026 20:07:55 +0000
asID:                     13381
IP address blocks:        200.112.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:58:f5:29:3a:23:7d:c9:6d:d1:50:d2:1a:b1:e8:ff:7e:0b:9b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Feb  4 20:02:55 2025 GMT
            Not After : Feb  3 20:07:55 2026 GMT
        Subject: CN=0B161613B0C06700183A90961FA900D6837CB6B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:30:e3:52:6f:29:eb:36:89:e6:04:16:b0:61:
                    ee:33:db:2d:35:e3:3a:0e:79:25:3f:15:e6:ef:24:
                    31:d6:6e:59:28:57:cd:a2:d0:39:4d:d0:b6:53:01:
                    79:43:0d:f7:92:de:62:c3:c8:4d:78:23:6d:7f:65:
                    18:49:c2:1b:71:f0:38:a4:fe:07:e3:5a:ad:cd:c5:
                    ed:c8:8b:2a:e7:6d:2d:88:a9:eb:b8:0b:8f:36:d9:
                    e7:27:57:15:b9:86:43:6b:28:c7:90:77:3b:ce:03:
                    95:7c:0f:77:30:4c:0e:bb:e8:f6:6b:9b:c7:fc:af:
                    7f:8c:2a:94:10:81:b0:0b:a4:ac:72:9c:33:83:7a:
                    e0:4f:ff:e6:c0:ed:f4:fc:a0:39:e3:2f:a9:70:81:
                    f8:0f:d6:8f:0b:db:fd:80:68:8e:83:7c:05:73:c8:
                    07:f8:8d:ce:86:19:94:84:8f:92:75:fa:48:5e:17:
                    04:99:69:09:2b:8b:de:99:a3:e3:af:46:83:f1:41:
                    b5:9f:42:bf:00:96:31:a0:8f:3f:d6:fb:fe:f8:75:
                    91:6b:f2:bd:cd:98:fe:72:fe:5c:50:e5:29:95:f3:
                    4e:fc:63:23:b5:c5:df:ed:dd:9a:a5:35:1a:95:60:
                    32:48:ca:0a:79:7d:78:82:5e:e6:d3:79:88:4b:68:
                    0d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:16:16:13:B0:C0:67:00:18:3A:90:96:1F:A9:00:D6:83:7C:B6:B5
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234342e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:bd:83:a8:6f:12:6f:59:9b:15:65:3d:dd:e1:67:25:d7:b7:
         64:37:d4:29:b8:52:ce:23:78:bb:09:de:f7:21:1a:93:ef:1e:
         df:39:41:8a:ce:71:b0:68:04:0a:aa:2b:09:ae:5d:4e:17:b3:
         d8:3e:08:4c:70:c2:60:fc:c4:9f:77:a7:ff:f9:34:cd:a5:c7:
         f5:ba:3c:ac:56:05:8f:3b:0c:d3:20:a2:b1:cd:28:51:98:98:
         e7:b3:a4:d9:78:39:fe:4b:6c:9f:20:f1:55:73:1b:d5:d0:99:
         a8:68:f5:64:c0:c3:ab:70:51:13:2f:38:3e:74:af:2d:62:6c:
         de:bd:4c:b9:1c:cd:42:ef:ed:74:d3:bd:7c:1e:a4:72:46:ec:
         9f:27:05:25:fd:bc:aa:5f:c2:a3:f2:6d:40:20:08:d0:5a:5c:
         b4:8f:3f:56:b8:df:e7:5d:2a:12:9c:a7:76:54:e4:13:36:67:
         e8:dd:b3:ea:9e:e9:f8:13:b0:ec:b1:f9:27:ae:ac:67:f0:a5:
         c4:63:e9:8e:56:ec:e2:e6:c8:a7:99:70:17:68:d2:8d:17:c8:
         41:71:a5:45:9a:df:bd:a5:05:8a:bc:24:e4:dd:cf:ec:50:df:
         b5:dc:5f:d2:e5:23:d4:14:3a:50:8e:84:a3:aa:73:cf:bf:7b:
         f4:2e:6e:1f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOVj1KTojfclt0VDSGrHo/34Lm9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNTAyMDQyMDAyNTVaFw0yNjAyMDMyMDA3NTVaMDMxMTAvBgNV
BAMTKDBCMTYxNjEzQjBDMDY3MDAxODNBOTA5NjFGQTkwMEQ2ODM3Q0I2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1MONSbynrNonmBBawYe4z2y01
4zoOeSU/FebvJDHWblkoV82i0DlN0LZTAXlDDfeS3mLDyE14I21/ZRhJwhtx8Dik
/gfjWq3Nxe3IiyrnbS2Iqeu4C4822ecnVxW5hkNrKMeQdzvOA5V8D3cwTA676PZr
m8f8r3+MKpQQgbALpKxynDODeuBP/+bA7fT8oDnjL6lwgfgP1o8L2/2AaI6DfAVz
yAf4jc6GGZSEj5J1+kheFwSZaQkri96Zo+OvRoPxQbWfQr8AljGgjz/W+/74dZFr
8r3NmP5y/lxQ5SmV8078YyO1xd/t3ZqlNRqVYDJIygp5fXiCXubTeYhLaA2RAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCxYWE7DAZwAYOpCWH6kA1oN8trUwHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjM0MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHD0
MA0GCSqGSIb3DQEBCwUAA4IBAQCdvYOobxJvWZsVZT3d4Wcl17dkN9QpuFLOI3i7
Cd73IRqT7x7fOUGKznGwaAQKqisJrl1OF7PYPghMcMJg/MSfd6f/+TTNpcf1ujys
VgWPOwzTIKKxzShRmJjns6TZeDn+S2yfIPFVcxvV0JmoaPVkwMOrcFETLzg+dK8t
YmzevUy5HM1C7+100718HqRyRuyfJwUl/byqX8Kj8m1AIAjQWly0jz9WuN/nXSoS
nKd2VOQTNmfo3bPqnun4E7Dssfknrqxn8KXEY+mOVuzi5sinmXAXaNKNF8hBcaVF
mt+9pQWKvCTk3c/sUN+13F/S5SPUFDpQjoSjqnPPv3v0Lm4f
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:49 2025 by rpki-client