Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3230302e3132352e3138342e302f32312d3234203d3e20333934363834.roa
File:                     3230302e3132352e3138342e302f32312d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          jIjR6XDHBPg/8NT/yl3uMu2FTMGYK2NMgWJTfD/bk8M=
Subject key identifier:   CF:FD:20:48:76:14:5B:12:4C:7C:B5:3F:24:8D:9F:44:E3:2B:D0:14
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       67DB7491A21B785F9FCF5BC8B52614E892E2D9D5
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3230302e3132352e3138342e302f32312d3234203d3e20333934363834.roa
Signing time:             Tue 04 Feb 2025 18:38:19 +0000
ROA not before:           Tue 04 Feb 2025 18:33:19 +0000
ROA not after:            Tue 03 Feb 2026 18:38:19 +0000
asID:                     394684
IP address blocks:        200.125.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:db:74:91:a2:1b:78:5f:9f:cf:5b:c8:b5:26:14:e8:92:e2:d9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Feb  4 18:33:19 2025 GMT
            Not After : Feb  3 18:38:19 2026 GMT
        Subject: CN=CFFD204876145B124C7CB53F248D9F44E32BD014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:42:f7:e7:6f:00:77:35:ba:db:25:72:34:
                    e6:94:44:9f:98:c4:03:3f:59:6a:fa:ca:1a:c8:e5:
                    06:aa:99:8d:23:5c:ba:0e:5d:42:16:b8:3c:df:a1:
                    04:bb:07:e1:dd:3b:6f:b4:e6:d3:fc:8c:91:be:f2:
                    7c:e7:fe:b9:81:00:87:55:c2:36:51:53:43:24:6a:
                    7a:6b:d9:1c:93:c4:5b:6b:b7:20:17:66:df:ce:7d:
                    be:ad:b8:ea:ed:22:62:aa:20:0b:6f:51:c2:61:47:
                    70:66:c8:73:a8:f9:eb:65:21:98:4d:d7:e7:e1:00:
                    fd:2a:88:14:44:80:e5:03:a9:bb:48:76:fe:58:1e:
                    21:7f:3e:4a:43:ef:86:42:ac:69:ff:65:21:d9:15:
                    b9:6d:8c:57:0d:2d:80:b0:49:2e:28:43:92:06:ba:
                    43:77:9a:76:30:96:bd:e7:c3:83:51:b4:82:70:c0:
                    ad:20:20:fb:f7:e6:41:32:a7:21:f1:ca:f7:76:21:
                    29:c5:30:49:52:7a:88:87:0c:de:f0:70:2e:ac:7a:
                    6d:e4:2b:98:4c:e9:cd:ca:54:b5:68:78:95:66:56:
                    d6:fb:13:80:27:6d:dc:a5:a4:89:99:c6:42:03:53:
                    6c:ee:43:73:43:55:dc:84:00:89:f7:2a:be:0a:c2:
                    23:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FD:20:48:76:14:5B:12:4C:7C:B5:3F:24:8D:9F:44:E3:2B:D0:14
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3230302e3132352e3138342e302f32312d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:02:97:84:cd:e0:43:d9:4e:88:76:0f:29:cf:e6:27:8f:42:
         8a:98:81:8b:92:19:7b:85:4a:15:3b:08:fc:ff:44:37:0c:2c:
         c2:c4:5a:67:83:cd:e0:1c:0f:fd:10:1d:34:0f:24:85:af:5c:
         ac:7d:57:ce:88:4e:dc:11:77:c5:05:f0:d9:8b:64:a0:59:96:
         fc:9a:f4:a0:3a:5a:3d:de:0f:cf:38:00:77:1e:b6:09:a7:06:
         35:95:c4:f3:f0:61:1a:66:83:a6:99:3b:a1:80:42:c0:15:44:
         da:0e:07:0b:7a:db:72:3a:af:b0:7d:d8:f6:d3:8f:21:c2:41:
         9e:fa:b7:14:13:60:0f:cd:a4:41:5c:ff:0d:2f:1f:6c:05:65:
         be:fb:25:96:35:99:76:e7:14:a8:54:8a:8f:02:c2:a7:e5:9a:
         b1:9d:c3:8c:90:f7:68:df:6b:72:4b:a2:d4:27:21:40:c8:38:
         18:b2:b9:2b:f5:7c:21:08:9f:3c:fa:39:33:bc:21:df:94:84:
         b7:10:68:74:ab:a2:a0:39:e6:e8:00:a1:9e:1a:8e:c1:4c:31:
         cd:03:91:41:80:22:52:3d:ec:d0:07:e3:ae:d5:08:3b:71:0a:
         8f:f1:f3:21:25:a6:01:68:c0:75:9b:20:06:e6:75:07:03:22:
         2b:8c:9e:67
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUZ9t0kaIbeF+fz1vItSYU6JLi2dUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBDMEFDRDg2RjMzMUE5NUQyNjE5NTkxODBGNTBDQkND
ODJGNTJBQjAeFw0yNTAyMDQxODMzMTlaFw0yNjAyMDMxODM4MTlaMDMxMTAvBgNV
BAMTKENGRkQyMDQ4NzYxNDVCMTI0QzdDQjUzRjI0OEQ5RjQ0RTMyQkQwMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmR0L3528AdzW62yVyNOaURJ+Y
xAM/WWr6yhrI5QaqmY0jXLoOXUIWuDzfoQS7B+HdO2+05tP8jJG+8nzn/rmBAIdV
wjZRU0Mkanpr2RyTxFtrtyAXZt/Ofb6tuOrtImKqIAtvUcJhR3BmyHOo+etlIZhN
1+fhAP0qiBREgOUDqbtIdv5YHiF/PkpD74ZCrGn/ZSHZFbltjFcNLYCwSS4oQ5IG
ukN3mnYwlr3nw4NRtIJwwK0gIPv35kEypyHxyvd2ISnFMElSeoiHDN7wcC6sem3k
K5hM6c3KVLVoeJVmVtb7E4AnbdylpImZxkIDU2zuQ3NDVdyEAIn3Kr4KwiN/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUz/0gSHYUWxJMfLU/JI2fROMr0BQwHwYDVR0j
BBgwFoAUAMCs2G8zGpXSYZWRgPUMvMgvUqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODVFMTZGMjJCM0E1MTNCQjY5NzU3NjlDRjgxNUFBQjg1
M0E5MTEyN0Q0NDZEM0EwRTRDQzExNTYyRjhCQ0M5LzAvMDBDMEFDRDg2RjMzMUE5
NUQyNjE5NTkxODBGNTBDQkNDODJGNTJBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEMwQUNEODZGMzMxQTk1RDI2
MTk1OTE4MEY1MENCQ0M4MkY1MkFCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTg1RTE2RjIyQjNBNTEzQkI2OTc1NzY5Q0Y4MTVBQUI4NTNBOTExMjdE
NDQ2RDNBMEU0Q0MxMTU2MkY4QkNDOS8wLzMyMzAzMDJlMzEzMjM1MmUzMTM4MzQy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMzM5MzQzNjM4MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPI
fbgwDQYJKoZIhvcNAQELBQADggEBAHsCl4TN4EPZToh2DynP5iePQoqYgYuSGXuF
ShU7CPz/RDcMLMLEWmeDzeAcD/0QHTQPJIWvXKx9V86ITtwRd8UF8NmLZKBZlvya
9KA6Wj3eD884AHcetgmnBjWVxPPwYRpmg6aZO6GAQsAVRNoOBwt623I6r7B92PbT
jyHCQZ76txQTYA/NpEFc/w0vH2wFZb77JZY1mXbnFKhUio8CwqflmrGdw4yQ92jf
a3JLotQnIUDIOBiyuSv1fCEInzz6OTO8Id+UhLcQaHSroqA55ugAoZ4ajsFMMc0D
kUGAIlI97NAH467VCDtxCo/x8yElpgFowHWbIAbmdQcDIiuMnmc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:27 2025 by rpki-client