Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203532323234.roa
File:                     3230302e372e38362e302f32342d3234203d3e203532323234.roa (raw, json)
Hash identifier:          WmVIDgubhYkLmnZ7ojEHg/BKfBdhg9JuP0oTvg21N5U=
Subject key identifier:   49:3E:DC:29:01:AF:59:5E:C1:31:C3:7B:2B:AF:CA:82:C0:65:F2:72
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       5971223827ACF20CCA8468EF89DD816EA914476D
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203532323234.roa
Signing time:             Tue 04 Feb 2025 18:19:40 +0000
ROA not before:           Tue 04 Feb 2025 18:14:40 +0000
ROA not after:            Tue 03 Feb 2026 18:19:40 +0000
asID:                     52224
IP address blocks:        200.7.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:71:22:38:27:ac:f2:0c:ca:84:68:ef:89:dd:81:6e:a9:14:47:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:40 2025 GMT
            Not After : Feb  3 18:19:40 2026 GMT
        Subject: CN=493EDC2901AF595EC131C37B2BAFCA82C065F272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:f6:de:2d:98:3e:a2:56:93:6c:e4:fb:f6:
                    83:3c:86:7b:1b:9c:bd:64:74:75:9a:ac:a1:cd:77:
                    8e:8a:3b:8b:fa:2f:e2:cf:9a:3f:b9:36:bd:0e:be:
                    3f:a9:b7:4a:7b:e2:4d:86:f4:60:df:b0:9e:1b:c7:
                    35:15:73:f1:73:8c:84:da:cf:a5:d9:e9:59:0f:2b:
                    29:95:44:87:51:12:9b:2b:dd:0f:5f:c7:7d:cb:5d:
                    dd:dd:d5:34:2f:01:8d:42:fe:ee:d0:6d:c1:65:20:
                    24:f4:6e:b3:f5:17:10:11:cd:95:4b:71:cb:b3:d6:
                    c9:a8:f0:01:24:95:94:48:2e:a4:6e:e3:29:08:4e:
                    8e:7c:70:ab:04:74:5d:19:20:6c:88:60:d8:f2:a7:
                    4a:94:75:2b:04:5e:75:9a:8b:a5:a4:b5:33:9e:6d:
                    c5:5d:3d:8c:86:4e:a9:28:03:ca:7b:21:d8:11:ab:
                    de:5f:e2:44:d5:aa:99:18:4e:37:1f:95:dc:70:7f:
                    c3:10:76:b3:d0:cf:1e:85:37:67:d0:6b:4a:12:ce:
                    4a:0a:3c:74:48:ab:2f:a4:ac:c3:6c:c1:48:b7:b4:
                    5c:7a:02:68:d1:88:88:7b:e4:c7:87:15:40:a6:1f:
                    a8:f5:36:fc:39:b8:11:a1:18:26:e5:44:41:46:6c:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3E:DC:29:01:AF:59:5E:C1:31:C3:7B:2B:AF:CA:82:C0:65:F2:72
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203532323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:96:0e:42:64:b3:63:a6:0c:bd:46:9d:43:1d:1d:0c:e0:bd:
         d4:04:5f:35:10:7e:48:29:8e:08:dd:2c:cf:38:55:74:c8:a9:
         e5:8f:75:07:52:d7:77:cb:0a:ab:6d:33:4c:c0:51:52:61:5c:
         9e:e9:6e:47:e9:93:81:0c:5f:37:ee:b9:81:de:c0:a8:e3:2f:
         1d:39:46:4b:1e:3d:de:48:3d:9e:87:44:51:db:83:d6:45:3f:
         80:7e:96:78:fd:b5:ca:ac:46:21:80:8e:74:c7:79:c4:4c:e9:
         e6:28:b5:ab:00:7b:eb:25:0b:bc:bd:3f:da:47:ab:d3:a5:c2:
         50:e1:2b:a2:60:9e:ca:9a:b9:96:cc:7a:b4:be:7a:c7:cc:b1:
         c0:24:0f:93:38:9a:02:0a:a4:88:e6:84:f9:48:85:c4:e5:70:
         2a:36:d9:07:df:83:fd:0d:39:f3:f9:c0:72:3c:49:b4:35:c4:
         1f:78:51:0e:32:40:45:21:01:12:42:00:75:a2:e3:ef:b0:10:
         33:1f:45:ab:e8:15:94:13:00:82:b1:37:f6:06:eb:2d:b6:46:
         98:e9:7b:40:23:f5:c6:07:b7:55:0f:fe:28:f1:05:b2:32:fb:
         91:df:85:3d:81:a3:2e:d9:23:bc:e5:8b:2e:db:1d:7d:09:9c:
         ce:bd:92:0a
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUWXEiOCes8gzKhGjvid2BbqkUR20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNTAyMDQxODE0NDBaFw0yNjAyMDMxODE5NDBaMDMxMTAvBgNV
BAMTKDQ5M0VEQzI5MDFBRjU5NUVDMTMxQzM3QjJCQUZDQTgyQzA2NUYyNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFjvbeLZg+olaTbOT79oM8hnsb
nL1kdHWarKHNd46KO4v6L+LPmj+5Nr0Ovj+pt0p74k2G9GDfsJ4bxzUVc/FzjITa
z6XZ6VkPKymVRIdREpsr3Q9fx33LXd3d1TQvAY1C/u7QbcFlICT0brP1FxARzZVL
ccuz1smo8AEklZRILqRu4ykITo58cKsEdF0ZIGyIYNjyp0qUdSsEXnWai6WktTOe
bcVdPYyGTqkoA8p7IdgRq95f4kTVqpkYTjcfldxwf8MQdrPQzx6FN2fQa0oSzkoK
PHRIqy+krMNswUi3tFx6AmjRiIh75MeHFUCmH6j1Nvw5uBGhGCblREFGbGvRAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUST7cKQGvWV7BMcN7K6/KgsBl8nIwHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMyMzAzMDJlMzcyZTM4MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAdWMA0GCSqG
SIb3DQEBCwUAA4IBAQCZlg5CZLNjpgy9Rp1DHR0M4L3UBF81EH5IKY4I3SzPOFV0
yKnlj3UHUtd3ywqrbTNMwFFSYVye6W5H6ZOBDF837rmB3sCo4y8dOUZLHj3eSD2e
h0RR24PWRT+AfpZ4/bXKrEYhgI50x3nETOnmKLWrAHvrJQu8vT/aR6vTpcJQ4Sui
YJ7KmrmWzHq0vnrHzLHAJA+TOJoCCqSI5oT5SIXE5XAqNtkH34P9DTnz+cByPEm0
NcQfeFEOMkBFIQESQgB1ouPvsBAzH0Wr6BWUEwCCsTf2BusttkaY6XtAI/XGB7dV
D/4o8QWyMvuR34U9gaMu2SO85Ysu2x19CZzOvZIK
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:54 2025 by rpki-client