Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3135342e302f32342d3234203d3e203237393332.roa
File:                     3230302e35322e3135342e302f32342d3234203d3e203237393332.roa (raw, json)
Hash identifier:          J3v3UGY90GqE9RpEau/8wgoMaIfbgVKfQBhpbY/HAr4=
Subject key identifier:   CE:FB:80:BE:BA:09:F8:21:1B:23:71:5E:05:8D:2C:FD:90:D5:01:FF
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       25097E101D3E49CF70C0C824C7D8A1525436BB3D
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3135342e302f32342d3234203d3e203237393332.roa
Signing time:             Tue 04 Feb 2025 18:09:07 +0000
ROA not before:           Tue 04 Feb 2025 18:04:07 +0000
ROA not after:            Tue 03 Feb 2026 18:09:07 +0000
asID:                     27932
IP address blocks:        200.52.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:09:7e:10:1d:3e:49:cf:70:c0:c8:24:c7:d8:a1:52:54:36:bb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Feb  4 18:04:07 2025 GMT
            Not After : Feb  3 18:09:07 2026 GMT
        Subject: CN=CEFB80BEBA09F8211B23715E058D2CFD90D501FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:a6:b5:54:3b:e3:b9:c4:cc:3c:72:9b:e2:
                    05:59:19:ac:66:cf:da:8a:44:3b:fc:17:60:53:fd:
                    ba:0c:10:5e:32:a0:93:ce:29:ad:31:c1:27:77:58:
                    66:73:6d:14:2f:83:fd:a9:1d:75:94:e7:94:52:df:
                    07:78:07:70:ba:42:52:5d:a8:19:b9:42:a9:12:e1:
                    38:6a:7a:46:fc:7e:93:d7:11:de:c6:0e:84:57:39:
                    74:63:69:9e:02:ed:7c:3a:6f:f0:64:b1:98:b3:63:
                    32:90:39:13:cf:3d:20:c8:78:78:b7:78:a0:b7:64:
                    65:7f:37:60:e8:e9:fd:56:bc:7d:a2:d1:8f:6f:4f:
                    98:21:63:84:6e:4c:14:4c:31:35:43:5f:4f:77:55:
                    cb:65:3a:e2:84:e0:a0:2c:60:d8:7a:cb:3f:a7:52:
                    77:70:98:27:08:5f:ee:7f:9b:81:82:8b:e8:04:e1:
                    89:e9:87:b1:5d:6b:64:71:06:46:31:d3:98:57:9b:
                    77:27:2c:3a:b2:b9:7e:09:0f:cb:ae:46:5d:f9:fd:
                    f5:f5:7c:79:f9:25:0d:67:23:eb:89:ee:25:43:ab:
                    d1:ad:01:26:7a:51:e6:7e:3a:22:d8:0e:e5:75:d9:
                    15:d8:69:81:fe:25:32:c6:18:dd:a5:85:66:5f:11:
                    3c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FB:80:BE:BA:09:F8:21:1B:23:71:5E:05:8D:2C:FD:90:D5:01:FF
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3135342e302f32342d3234203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:ec:bf:38:df:ca:ca:e4:ed:70:0a:e6:2f:c6:05:ff:ec:06:
         e9:ba:cd:f1:4b:f8:3e:10:52:be:34:8e:ab:02:e5:14:89:6a:
         a4:4c:de:88:9d:18:95:ff:51:48:51:c0:b8:7a:10:58:9c:2a:
         45:9a:64:d6:81:0e:6f:0b:64:b6:4b:27:56:4a:06:2b:ea:72:
         09:a5:59:60:c2:7c:96:97:41:41:cd:53:65:64:e9:35:a4:77:
         a3:b2:82:80:b1:9c:16:85:7e:c9:7a:8c:1f:71:be:e5:ad:12:
         79:8f:82:ec:9d:76:ea:84:c6:a1:07:c4:c2:9a:8c:92:b7:57:
         0c:52:aa:0d:7a:0c:c0:a0:13:7e:44:b9:1c:f9:d1:9b:50:c5:
         1f:f8:38:54:53:03:cb:98:0c:44:a4:37:f5:dd:b2:a9:32:58:
         5d:c4:23:6d:cf:2d:32:02:c0:a8:51:12:23:9c:2c:e6:eb:54:
         bd:b0:03:a2:ab:5e:8e:d3:78:76:d3:b0:94:17:7a:d5:8a:dd:
         0a:b3:72:78:a9:5e:63:a0:0a:d6:b8:39:e5:7b:3b:bf:fa:f8:
         4c:d1:24:33:9f:40:b0:b2:09:9a:05:22:ad:59:86:c2:9c:01:
         a3:d0:e1:78:f6:0d:ac:db:e1:4c:12:d6:84:36:dc:d6:c4:23:
         f7:0c:5a:09
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJQl+EB0+Sc9wwMgkx9ihUlQ2uz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI5QUZFODVEQzE5N0Q1MzdCQjk0MjY4NzVBRDdGMTJE
QzQwMjcwMjAeFw0yNTAyMDQxODA0MDdaFw0yNjAyMDMxODA5MDdaMDMxMTAvBgNV
BAMTKENFRkI4MEJFQkEwOUY4MjExQjIzNzE1RTA1OEQyQ0ZEOTBENTAxRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgoaa1VDvjucTMPHKb4gVZGaxm
z9qKRDv8F2BT/boMEF4yoJPOKa0xwSd3WGZzbRQvg/2pHXWU55RS3wd4B3C6QlJd
qBm5QqkS4Thqekb8fpPXEd7GDoRXOXRjaZ4C7Xw6b/BksZizYzKQORPPPSDIeHi3
eKC3ZGV/N2Do6f1WvH2i0Y9vT5ghY4RuTBRMMTVDX093VctlOuKE4KAsYNh6yz+n
UndwmCcIX+5/m4GCi+gE4Ynph7Fda2RxBkYx05hXm3cnLDqyuX4JD8uuRl35/fX1
fHn5JQ1nI+uJ7iVDq9GtASZ6UeZ+OiLYDuV12RXYaYH+JTLGGN2lhWZfETxtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUzvuAvroJ+CEbI3FeBY0s/ZDVAf8wHwYDVR0j
BBgwFoAUspr+hdwZfVN7uUJoda1/EtxAJwIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjRCNThBMDM4MTY2MDgwRTI3RjIzNjk4ODhFQTBFRUVF
QkZENzg4NjI0MTlDMTY1MzlFNzA4NEJGMTIwQzQzLzAvQjI5QUZFODVEQzE5N0Q1
MzdCQjk0MjY4NzVBRDdGMTJEQzQwMjcwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMjlBRkU4NURDMTk3RDUzN0JC
OTQyNjg3NUFEN0YxMkRDNDAyNzAyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY0QjU4QTAzODE2NjA4MEUyN0YyMzY5ODg4RUEwRUVFRUJGRDc4ODYy
NDE5QzE2NTM5RTcwODRCRjEyMEM0My8wLzMyMzAzMDJlMzUzMjJlMzEzNTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg0mjAN
BgkqhkiG9w0BAQsFAAOCAQEADey/ON/KyuTtcArmL8YF/+wG6brN8Uv4PhBSvjSO
qwLlFIlqpEzeiJ0Ylf9RSFHAuHoQWJwqRZpk1oEObwtktksnVkoGK+pyCaVZYMJ8
lpdBQc1TZWTpNaR3o7KCgLGcFoV+yXqMH3G+5a0SeY+C7J126oTGoQfEwpqMkrdX
DFKqDXoMwKATfkS5HPnRm1DFH/g4VFMDy5gMRKQ39d2yqTJYXcQjbc8tMgLAqFES
I5ws5utUvbADoqtejtN4dtOwlBd61YrdCrNyeKleY6AK1rg55Xs7v/r4TNEkM59A
sLIJmgUirVmGwpwBo9DhePYNrNvhTBLWhDbc1sQj9wxaCQ==
-----END CERTIFICATE-----
Generated at Tue Apr 15 00:15:05 2025 by rpki-client