Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e36302e3139302e302f32342d3234203d3e203230393430.roa
File:                     3230302e36302e3139302e302f32342d3234203d3e203230393430.roa (raw, json)
Hash identifier:          3M0Lb2BqHth5P1fIHoQYPlFpPbLZoPvfhV/EqaJRoUU=
Subject key identifier:   11:CA:D8:AE:B1:84:88:E5:67:17:87:1B:19:BD:84:06:21:3E:DC:1F
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       43618F0DED7C2358105D162ADF2E68220C42CF62
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e36302e3139302e302f32342d3234203d3e203230393430.roa
Signing time:             Tue 04 Feb 2025 20:05:12 +0000
ROA not before:           Tue 04 Feb 2025 20:00:12 +0000
ROA not after:            Tue 03 Feb 2026 20:05:12 +0000
asID:                     20940
IP address blocks:        200.60.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:61:8f:0d:ed:7c:23:58:10:5d:16:2a:df:2e:68:22:0c:42:cf:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Feb  4 20:00:12 2025 GMT
            Not After : Feb  3 20:05:12 2026 GMT
        Subject: CN=11CAD8AEB18488E56717871B19BD8406213EDC1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:c5:80:21:ad:dd:4b:17:5a:78:71:c9:99:
                    85:db:33:ab:21:60:5f:18:11:05:51:52:f2:ac:fa:
                    5d:67:31:e8:67:2e:6c:ad:d1:1b:6f:68:ef:38:0e:
                    cb:e2:5b:5e:5a:66:c8:ff:7a:6f:1f:83:51:3e:2b:
                    8a:93:99:36:14:e6:59:00:41:64:3d:ec:70:aa:e6:
                    c2:3e:27:53:23:15:47:15:86:70:53:d3:61:da:47:
                    2a:09:0e:d2:e3:c9:55:f5:e5:87:f3:0d:a1:7f:c9:
                    c2:b9:08:4d:ef:94:d2:ed:e0:2f:0f:80:d6:08:3c:
                    2a:11:c8:11:79:17:a0:67:76:e8:04:b9:f9:99:09:
                    3d:44:7b:ef:4a:b7:d6:51:31:74:17:c1:79:3f:43:
                    12:71:28:36:ec:07:b7:f9:1e:1d:38:c7:02:e8:df:
                    f9:33:e7:1b:60:77:d3:48:5d:ca:09:8d:09:dc:be:
                    b1:65:8d:f3:d4:b7:84:f2:a3:2d:e3:22:94:72:c9:
                    ea:46:40:ae:1d:b3:9e:7c:5a:81:37:28:7a:6e:97:
                    76:d7:a9:69:cb:a7:35:a6:21:65:3d:21:28:da:17:
                    c9:d0:46:c2:e3:8f:f8:29:a6:09:4d:31:3d:96:9c:
                    7b:f5:14:75:6f:12:66:8e:d5:bd:10:e4:f8:13:aa:
                    06:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CA:D8:AE:B1:84:88:E5:67:17:87:1B:19:BD:84:06:21:3E:DC:1F
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e36302e3139302e302f32342d3234203d3e203230393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.60.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:63:67:6e:84:9c:4e:b3:b2:6a:ec:3d:ae:0c:92:22:71:18:
         bf:ab:9a:8f:9a:4f:93:56:e5:24:d9:9b:d8:c4:ca:56:08:1c:
         6c:49:33:d8:dd:4f:e6:11:4f:66:72:56:9f:ba:11:6f:58:cb:
         30:83:6c:0d:c9:6c:07:d5:00:d8:ce:7a:c9:34:b2:06:5d:1c:
         c0:f9:75:84:b1:9e:bc:62:bf:70:1d:6e:59:e8:f8:2e:91:fa:
         da:4c:40:bc:4d:7e:c8:cf:ce:77:cb:b7:a1:b2:ea:08:d0:80:
         15:13:84:1b:66:a3:d7:99:48:75:98:8c:21:66:d9:92:3e:72:
         56:31:d6:34:bb:18:41:de:04:ee:a4:59:d8:b4:63:5f:aa:03:
         f8:79:36:8f:6d:c2:11:f6:be:4f:d4:f1:40:38:96:03:df:83:
         c9:a5:10:5a:46:79:28:f7:58:36:94:ed:38:f6:d3:b5:fe:fb:
         4e:4e:25:12:c6:d0:a4:58:d5:26:98:0a:5b:01:b6:3f:39:c1:
         0c:38:fc:2e:74:60:0b:ff:30:87:34:c3:8e:19:9a:ef:d3:fe:
         46:72:d7:c3:f3:f6:62:66:25:8d:07:ba:df:ff:ef:5d:2d:db:
         6a:73:bd:6b:44:2a:5d:d4:c5:50:a4:57:3b:92:e7:05:7a:dd:
         eb:fd:8a:45
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQ2GPDe18I1gQXRYq3y5oIgxCz2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ3NDk5RUU0OUY2RTQ1RjUwQzQ4NjBCRTc5RDc5Q0JE
N0NCNTdCMTAeFw0yNTAyMDQyMDAwMTJaFw0yNjAyMDMyMDA1MTJaMDMxMTAvBgNV
BAMTKDExQ0FEOEFFQjE4NDg4RTU2NzE3ODcxQjE5QkQ4NDA2MjEzRURDMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1psWAIa3dSxdaeHHJmYXbM6sh
YF8YEQVRUvKs+l1nMehnLmyt0RtvaO84DsviW15aZsj/em8fg1E+K4qTmTYU5lkA
QWQ97HCq5sI+J1MjFUcVhnBT02HaRyoJDtLjyVX15YfzDaF/ycK5CE3vlNLt4C8P
gNYIPCoRyBF5F6BndugEufmZCT1Ee+9Kt9ZRMXQXwXk/QxJxKDbsB7f5Hh04xwLo
3/kz5xtgd9NIXcoJjQncvrFljfPUt4Tyoy3jIpRyyepGQK4ds558WoE3KHpul3bX
qWnLpzWmIWU9ISjaF8nQRsLjj/gppglNMT2WnHv1FHVvEmaO1b0Q5PgTqgbZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUEcrYrrGEiOVnF4cbGb2EBiE+3B8wHwYDVR0j
BBgwFoAUdHSZ7kn25F9QxIYL5515y9fLV7EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NTAyQTIxMjZGRUYzMzhEMzlDOEI3NDM5MjBDMUJBMjI0
MTA3Q0ZEMTI2MzU1MEZDOTJGNEQ1OEVEMUEzQzJCLzAvNzQ3NDk5RUU0OUY2RTQ1
RjUwQzQ4NjBCRTc5RDc5Q0JEN0NCNTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NDc0OTlFRTQ5RjZFNDVGNTBD
NDg2MEJFNzlENzlDQkQ3Q0I1N0IxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTUwMkEyMTI2RkVGMzM4RDM5QzhCNzQzOTIwQzFCQTIyNDEwN0NGRDEy
NjM1NTBGQzkyRjRENThFRDFBM0MyQi8wLzMyMzAzMDJlMzYzMDJlMzEzOTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg8vjAN
BgkqhkiG9w0BAQsFAAOCAQEAfGNnboScTrOyauw9rgySInEYv6uaj5pPk1blJNmb
2MTKVggcbEkz2N1P5hFPZnJWn7oRb1jLMINsDclsB9UA2M56yTSyBl0cwPl1hLGe
vGK/cB1uWej4LpH62kxAvE1+yM/Od8u3obLqCNCAFROEG2aj15lIdZiMIWbZkj5y
VjHWNLsYQd4E7qRZ2LRjX6oD+Hk2j23CEfa+T9TxQDiWA9+DyaUQWkZ5KPdYNpTt
OPbTtf77Tk4lEsbQpFjVJpgKWwG2PznBDDj8LnRgC/8whzTDjhma79P+RnLXw/P2
YmYljQe63//vXS3banO9a0QqXdTFUKRXO5LnBXrd6/2KRQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:09 2025 by rpki-client