Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3230302e38312e3132302e302f32312d3234203d3e203237383133.roa
File:                     3230302e38312e3132302e302f32312d3234203d3e203237383133.roa (raw, json)
Hash identifier:          kUcy35JkGiycoObrHB0bFmTE4j+r5kjZ+YQN/9R4doU=
Subject key identifier:   4A:7B:51:8E:DA:DB:8A:66:52:F2:83:51:52:C8:7C:A8:E9:60:B6:95
Certificate issuer:       /CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
Certificate serial:       41A129AABFE7CDB2622C3B2E1D172071DCAD5E89
Authority key identifier: 32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3230302e38312e3132302e302f32312d3234203d3e203237383133.roa
Signing time:             Tue 04 Feb 2025 20:04:23 +0000
ROA not before:           Tue 04 Feb 2025 19:59:23 +0000
ROA not after:            Tue 03 Feb 2026 20:04:23 +0000
asID:                     27813
IP address blocks:        200.81.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a1:29:aa:bf:e7:cd:b2:62:2c:3b:2e:1d:17:20:71:dc:ad:5e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ACF58772BC97B9F0D9462619DA1F27850FDDB1
        Validity
            Not Before: Feb  4 19:59:23 2025 GMT
            Not After : Feb  3 20:04:23 2026 GMT
        Subject: CN=4A7B518EDADB8A6652F2835152C87CA8E960B695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:35:75:17:43:12:7d:f6:f7:4e:ae:bb:5d:f6:
                    41:fb:25:77:3b:f8:6d:60:a4:5b:d8:ca:71:85:25:
                    ce:89:32:10:20:f8:f7:db:f8:e6:ca:44:67:89:2f:
                    d4:dc:73:9a:34:2d:67:fc:58:bf:ff:50:7f:75:d4:
                    2e:62:13:f6:f7:e4:c1:b4:64:e5:fd:86:00:f8:65:
                    63:10:2c:15:ed:b8:9d:2e:5c:90:fd:63:f2:e1:a2:
                    ed:01:34:af:08:c9:aa:55:7c:9b:cf:ec:26:ae:d2:
                    f1:81:e4:a0:87:70:a8:65:e7:fd:64:69:1c:80:20:
                    62:6e:42:b6:3b:ab:f0:b6:75:e3:17:90:47:1f:30:
                    70:91:3b:35:21:4d:4c:fe:47:3f:51:fc:d5:18:27:
                    04:90:c7:11:4c:64:84:f9:46:3b:ac:0d:8b:0e:93:
                    26:80:b4:dd:84:42:95:ad:a9:fc:2d:81:31:85:4b:
                    da:f3:53:84:22:a2:3d:9c:33:78:51:9d:92:5c:7a:
                    99:8f:1a:c8:2f:70:0d:36:b4:9a:fc:b7:57:b5:fc:
                    bd:da:0e:1f:c4:b2:90:ac:d9:d7:0a:48:b8:90:99:
                    8a:2b:ec:e4:72:4d:06:02:7d:07:20:3e:9a:6b:a2:
                    11:1e:61:23:0c:90:72:e0:da:19:18:5b:32:e3:51:
                    bc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7B:51:8E:DA:DB:8A:66:52:F2:83:51:52:C8:7C:A8:E9:60:B6:95
            X509v3 Authority Key Identifier:
                keyid:32:AC:F5:87:72:BC:97:B9:F0:D9:46:26:19:DA:1F:27:85:0F:DD:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32ACF58772BC97B9F0D9462619DA1F27850FDDB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/537F02F600231DC6310D94727E3E2B5B3D31D666E29F8A8417F77E64BA229314/0/3230302e38312e3132302e302f32312d3234203d3e203237383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:65:84:2a:0a:ae:03:8a:aa:08:16:7b:65:31:ae:88:f6:be:
         69:d6:c1:aa:b6:54:c6:f5:06:9e:70:86:e6:9c:11:cf:f9:f0:
         26:6a:57:b2:43:7e:27:9a:10:f4:ed:3f:38:a6:29:34:65:f6:
         ff:33:5c:bd:b3:12:c2:36:e1:35:c3:c4:03:02:98:d1:48:fa:
         c5:f0:fb:10:44:32:af:a9:27:f2:7a:95:46:59:07:fb:85:cb:
         67:40:83:42:3a:27:0d:cf:bd:2e:bb:aa:eb:69:b6:42:0c:6b:
         e2:3f:09:a0:86:3e:8d:92:e7:3b:ea:a5:ee:97:0d:cd:76:ec:
         68:f8:b2:9b:56:0f:2e:d0:f7:f4:43:cc:bf:c4:f6:d5:72:20:
         c8:58:8b:73:2b:9c:b0:02:dd:8a:a5:b5:d8:86:97:10:15:90:
         d1:8c:5c:e3:cd:01:d5:03:fe:da:f6:8e:a2:3f:36:0e:6d:db:
         9f:04:6c:c7:d0:5c:d5:82:5d:27:60:7b:12:4c:a8:a4:34:c5:
         2b:0a:62:6e:05:a9:1e:37:3d:bf:30:93:b1:b7:d0:58:e2:a9:
         fc:43:df:6f:41:53:cf:27:47:41:31:34:45:3f:78:1c:79:5e:
         65:0d:f1:7e:7b:97:92:4a:94:11:e1:c2:46:a6:0e:75:7e:09:
         4d:d7:98:36
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQaEpqr/nzbJiLDsuHRcgcdytXokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBQ0Y1ODc3MkJDOTdCOUYwRDk0NjI2MTlEQTFGMjc4
NTBGRERCMTAeFw0yNTAyMDQxOTU5MjNaFw0yNjAyMDMyMDA0MjNaMDMxMTAvBgNV
BAMTKDRBN0I1MThFREFEQjhBNjY1MkYyODM1MTUyQzg3Q0E4RTk2MEI2OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNXUXQxJ99vdOrrtd9kH7JXc7
+G1gpFvYynGFJc6JMhAg+Pfb+ObKRGeJL9Tcc5o0LWf8WL//UH911C5iE/b35MG0
ZOX9hgD4ZWMQLBXtuJ0uXJD9Y/Lhou0BNK8IyapVfJvP7Cau0vGB5KCHcKhl5/1k
aRyAIGJuQrY7q/C2deMXkEcfMHCROzUhTUz+Rz9R/NUYJwSQxxFMZIT5RjusDYsO
kyaAtN2EQpWtqfwtgTGFS9rzU4Qioj2cM3hRnZJcepmPGsgvcA02tJr8t1e1/L3a
Dh/EspCs2dcKSLiQmYor7ORyTQYCfQcgPpprohEeYSMMkHLg2hkYWzLjUbxJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUSntRjtrbimZS8oNRUsh8qOlgtpUwHwYDVR0j
BBgwFoAUMqz1h3K8l7nw2UYmGdofJ4UP3bEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MzdGMDJGNjAwMjMxREM2MzEwRDk0NzI3RTNFMkI1QjNE
MzFENjY2RTI5RjhBODQxN0Y3N0U2NEJBMjI5MzE0LzAvMzJBQ0Y1ODc3MkJDOTdC
OUYwRDk0NjI2MTlEQTFGMjc4NTBGRERCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMkFDRjU4NzcyQkM5N0I5RjBE
OTQ2MjYxOURBMUYyNzg1MEZEREIxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTM3RjAyRjYwMDIzMURDNjMxMEQ5NDcyN0UzRTJCNUIzRDMxRDY2NkUy
OUY4QTg0MTdGNzdFNjRCQTIyOTMxNC8wLzMyMzAzMDJlMzgzMTJlMzEzMjMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM4MzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8hReDAN
BgkqhkiG9w0BAQsFAAOCAQEAEWWEKgquA4qqCBZ7ZTGuiPa+adbBqrZUxvUGnnCG
5pwRz/nwJmpXskN+J5oQ9O0/OKYpNGX2/zNcvbMSwjbhNcPEAwKY0Uj6xfD7EEQy
r6kn8nqVRlkH+4XLZ0CDQjonDc+9Lruq62m2Qgxr4j8JoIY+jZLnO+ql7pcNzXbs
aPiym1YPLtD39EPMv8T21XIgyFiLcyucsALdiqW12IaXEBWQ0Yxc480B1QP+2vaO
oj82Dm3bnwRsx9Bc1YJdJ2B7EkyopDTFKwpibgWpHjc9vzCTsbfQWOKp/EPfb0FT
zydHQTE0RT94HHleZQ3xfnuXkkqUEeHCRqYOdX4JTdeYNg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:55 2025 by rpki-client