Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/3230302e3131352e3132302e302f32322d3234203d3e20323639393233.roa
File:                     3230302e3131352e3132302e302f32322d3234203d3e20323639393233.roa (raw, json)
Hash identifier:          DcqirCPTUqafhHF04HdR77nmf3LGflyXOax8Yv64bxQ=
Subject key identifier:   E3:A7:20:48:BD:9C:F4:E4:CA:50:00:00:B4:59:F4:B9:01:0F:8E:16
Certificate issuer:       /CN=4D56876B86897911DD0C6CF938CF6E3FEB03C360
Certificate serial:       54E6CD0D6F7BC6D5FED6E70E2FCDEF408F0CD633
Authority key identifier: 4D:56:87:6B:86:89:79:11:DD:0C:6C:F9:38:CF:6E:3F:EB:03:C3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/3230302e3131352e3132302e302f32322d3234203d3e20323639393233.roa
Signing time:             Tue 04 Feb 2025 18:18:19 +0000
ROA not before:           Tue 04 Feb 2025 18:13:19 +0000
ROA not after:            Tue 03 Feb 2026 18:18:19 +0000
asID:                     269923
IP address blocks:        200.115.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.crl
                          rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e6:cd:0d:6f:7b:c6:d5:fe:d6:e7:0e:2f:cd:ef:40:8f:0c:d6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D56876B86897911DD0C6CF938CF6E3FEB03C360
        Validity
            Not Before: Feb  4 18:13:19 2025 GMT
            Not After : Feb  3 18:18:19 2026 GMT
        Subject: CN=E3A72048BD9CF4E4CA500000B459F4B9010F8E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d7:64:d0:1e:47:08:b4:99:13:09:e3:58:46:
                    dc:b4:39:63:ca:e4:c3:12:f8:6b:1c:02:97:c6:54:
                    92:e0:ca:d4:22:54:43:9f:15:e3:bd:54:9b:d7:4b:
                    a0:b1:2a:ac:68:1a:14:65:a7:a2:28:79:de:10:08:
                    7d:2d:75:d8:43:62:91:8d:43:42:de:47:3b:cd:7e:
                    cc:6c:4c:22:3f:07:51:ac:eb:4b:a9:17:50:ad:49:
                    b6:62:61:9a:b5:6d:2a:52:ad:47:f4:a0:b2:78:b3:
                    8d:6e:e1:c6:14:b5:92:49:20:2a:a2:d1:7c:db:e2:
                    90:5b:ec:e3:26:dc:48:51:ce:05:a9:ac:67:28:12:
                    53:bb:6d:5d:16:a3:41:31:99:c1:ca:71:67:42:87:
                    da:91:c1:9d:92:99:03:a5:7a:87:7d:43:83:62:6c:
                    e7:f3:6f:2e:40:0d:b5:ea:63:02:a5:93:b8:82:be:
                    03:08:6d:13:a0:fe:67:79:2d:50:52:f8:a0:92:bb:
                    d8:59:77:e8:7e:e3:f3:46:a2:4a:11:48:19:f1:38:
                    bb:07:6a:63:6a:6c:c9:4b:92:99:d1:8c:08:0a:7f:
                    03:ca:75:0e:30:05:97:a6:30:1e:93:a1:c2:79:72:
                    bb:49:a3:63:f2:af:1a:e9:65:b6:1d:15:bd:74:e6:
                    7d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A7:20:48:BD:9C:F4:E4:CA:50:00:00:B4:59:F4:B9:01:0F:8E:16
            X509v3 Authority Key Identifier:
                keyid:4D:56:87:6B:86:89:79:11:DD:0C:6C:F9:38:CF:6E:3F:EB:03:C3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D56876B86897911DD0C6CF938CF6E3FEB03C360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/597EBC297BBD824DD56B6F5C398686DA66CAC830FA9CBD54BD8F24CE3AA7A50F/0/3230302e3131352e3132302e302f32322d3234203d3e20323639393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:51:f7:c0:d0:d0:6d:fb:1f:1b:48:83:0c:2e:34:d5:34:58:
         60:e6:88:f7:7d:bb:ea:72:91:cb:64:3b:d9:42:82:22:ca:80:
         79:22:29:5c:3a:68:c4:31:d3:8f:63:14:65:e1:f3:63:be:19:
         3d:5f:5c:b3:0a:fc:70:57:12:ed:a0:5a:24:c2:b7:bf:54:26:
         b6:3d:bf:df:bb:fc:7d:49:f6:85:27:d5:55:a0:60:e4:66:8b:
         3e:53:e9:fc:e0:f4:fe:91:6d:dd:ac:ec:bd:f2:10:e4:e0:40:
         05:5b:24:16:56:36:68:72:d3:52:d5:e7:20:bb:34:53:97:fc:
         de:8d:10:27:e0:f2:16:85:a1:42:36:83:39:08:18:32:3e:9c:
         72:ca:55:9f:0b:8f:22:2d:ec:72:75:9a:1f:15:50:4e:30:bf:
         8b:1d:cb:5e:7f:15:dd:5a:5d:0a:c3:dc:92:32:3b:d1:45:10:
         5f:d3:6b:89:91:48:e4:fc:42:23:ab:d6:dd:ed:c6:14:98:16:
         5d:51:ac:27:f0:a1:c4:68:8d:e0:ee:ef:6a:2c:3f:a1:ff:5a:
         87:0e:4c:a1:50:1e:01:d7:48:b5:4f:6e:10:f8:06:48:f6:6e:
         dd:87:7c:13:7e:fd:10:d0:b0:1b:2f:22:45:a8:08:58:3e:b3:
         86:12:ae:40
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUVObNDW97xtX+1ucOL83vQI8M1jMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ1Njg3NkI4Njg5NzkxMUREMEM2Q0Y5MzhDRjZFM0ZF
QjAzQzM2MDAeFw0yNTAyMDQxODEzMTlaFw0yNjAyMDMxODE4MTlaMDMxMTAvBgNV
BAMTKEUzQTcyMDQ4QkQ5Q0Y0RTRDQTUwMDAwMEI0NTlGNEI5MDEwRjhFMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD012TQHkcItJkTCeNYRty0OWPK
5MMS+GscApfGVJLgytQiVEOfFeO9VJvXS6CxKqxoGhRlp6Ioed4QCH0tddhDYpGN
Q0LeRzvNfsxsTCI/B1Gs60upF1CtSbZiYZq1bSpSrUf0oLJ4s41u4cYUtZJJICqi
0Xzb4pBb7OMm3EhRzgWprGcoElO7bV0Wo0ExmcHKcWdCh9qRwZ2SmQOleod9Q4Ni
bOfzby5ADbXqYwKlk7iCvgMIbROg/md5LVBS+KCSu9hZd+h+4/NGokoRSBnxOLsH
amNqbMlLkpnRjAgKfwPKdQ4wBZemMB6TocJ5crtJo2PyrxrpZbYdFb105n3fAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU46cgSL2c9OTKUAAAtFn0uQEPjhYwHwYDVR0j
BBgwFoAUTVaHa4aJeRHdDGz5OM9uP+sDw2AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OTdFQkMyOTdCQkQ4MjRERDU2QjZGNUMzOTg2ODZEQTY2
Q0FDODMwRkE5Q0JENTRCRDhGMjRDRTNBQTdBNTBGLzAvNEQ1Njg3NkI4Njg5Nzkx
MUREMEM2Q0Y5MzhDRjZFM0ZFQjAzQzM2MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RDU2ODc2Qjg2ODk3OTExREQw
QzZDRjkzOENGNkUzRkVCMDNDMzYwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTk3RUJDMjk3QkJEODI0REQ1NkI2RjVDMzk4Njg2REE2NkNBQzgzMEZB
OUNCRDU0QkQ4RjI0Q0UzQUE3QTUwRi8wLzMyMzAzMDJlMzEzMTM1MmUzMTMyMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzkzOTMyMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALI
c3gwDQYJKoZIhvcNAQELBQADggEBAI5R98DQ0G37HxtIgwwuNNU0WGDmiPd9u+py
kctkO9lCgiLKgHkiKVw6aMQx049jFGXh82O+GT1fXLMK/HBXEu2gWiTCt79UJrY9
v9+7/H1J9oUn1VWgYORmiz5T6fzg9P6Rbd2s7L3yEOTgQAVbJBZWNmhy01LV5yC7
NFOX/N6NECfg8haFoUI2gzkIGDI+nHLKVZ8LjyIt7HJ1mh8VUE4wv4sdy15/Fd1a
XQrD3JIyO9FFEF/Ta4mRSOT8QiOr1t3txhSYFl1RrCfwocRojeDu72osP6H/WocO
TKFQHgHXSLVPbhD4Bkj2bt2HfBN+/RDQsBsvIkWoCFg+s4YSrkA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:20:11 2025 by rpki-client