Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/3230302e38312e3135322e302f32312d3234203d3e203237383531.roa
File:                     3230302e38312e3135322e302f32312d3234203d3e203237383531.roa (raw, json)
Hash identifier:          4IvVzAT8jYSNCBoMFeXVKwWFNPiAQ2MeXGf/8iad7fw=
Subject key identifier:   95:3F:6A:22:2F:E9:31:D9:08:31:F7:90:C9:D5:54:AA:10:D8:57:C6
Certificate issuer:       /CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
Certificate serial:       515EAA54803CAC6125CA8A217294C29C02310421
Authority key identifier: 57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/3230302e38312e3135322e302f32312d3234203d3e203237383531.roa
Signing time:             Tue 04 Feb 2025 18:48:47 +0000
ROA not before:           Tue 04 Feb 2025 18:43:47 +0000
ROA not after:            Tue 03 Feb 2026 18:48:47 +0000
asID:                     27851
IP address blocks:        200.81.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 16:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5e:aa:54:80:3c:ac:61:25:ca:8a:21:72:94:c2:9c:02:31:04:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
        Validity
            Not Before: Feb  4 18:43:47 2025 GMT
            Not After : Feb  3 18:48:47 2026 GMT
        Subject: CN=953F6A222FE931D90831F790C9D554AA10D857C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:34:01:35:39:5d:7d:5f:22:3a:3e:e5:cd:79:
                    a9:2c:c4:ef:7d:56:09:3b:d7:60:c1:34:62:01:5f:
                    d2:42:4e:c6:87:21:9e:95:be:41:30:32:80:79:0f:
                    4e:05:ce:f8:a2:20:b2:f4:b1:50:db:a6:3b:8e:30:
                    95:a5:ab:13:25:e1:bf:4b:bf:3d:39:c7:5f:25:4c:
                    13:67:ac:29:27:82:e6:93:f5:dd:74:8a:91:54:38:
                    d4:5e:20:34:0e:c2:4c:bf:c5:9f:67:33:77:27:f4:
                    ec:66:6d:e6:ec:78:36:05:f2:1b:ed:54:b2:f6:17:
                    16:3f:71:d2:9d:b5:d5:88:5e:db:c1:ab:c9:4a:4c:
                    84:2e:57:a5:2d:d3:cb:a9:91:a2:f3:65:6d:18:05:
                    87:d0:25:61:3f:7c:2d:bc:1c:dd:76:72:ef:a5:c2:
                    1a:6b:30:fe:14:37:65:76:5c:e5:ca:94:86:21:8e:
                    98:00:52:9a:b0:d6:46:30:02:74:96:34:ad:a4:8c:
                    1d:b7:c9:ec:c3:ee:6c:3e:ec:f1:bc:e0:8d:25:66:
                    48:10:e4:08:37:76:a0:79:b8:73:2f:98:79:a6:51:
                    8a:bd:0e:01:28:c2:8a:90:aa:ad:13:ac:8b:28:a8:
                    30:aa:8e:e0:bf:f1:6c:db:ad:09:dc:2e:90:4f:9e:
                    0d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3F:6A:22:2F:E9:31:D9:08:31:F7:90:C9:D5:54:AA:10:D8:57:C6
            X509v3 Authority Key Identifier:
                keyid:57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/3230302e38312e3135322e302f32312d3234203d3e203237383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:c9:fc:45:c6:3d:5a:63:8b:3e:c3:3c:80:64:28:12:6a:7b:
         a5:e9:dc:e2:55:22:9b:f5:c3:76:7d:af:e8:33:57:e2:99:c0:
         00:20:77:e8:4c:6c:c8:63:54:7a:09:64:a0:3d:77:4e:f4:82:
         04:c0:95:1b:d7:96:13:ee:d6:3e:94:1c:c8:ef:6a:4b:bb:1c:
         d0:5b:ac:b2:e7:14:49:84:a6:76:0a:3b:fd:40:79:13:61:bb:
         11:e3:56:36:4d:84:1d:82:d6:e2:96:5f:d1:97:be:ae:09:84:
         1b:89:96:64:82:6e:e0:0e:e1:31:ac:c9:4f:60:e4:41:93:40:
         90:07:4b:d2:2a:13:fc:c4:cf:fe:e1:2e:f5:ec:08:ec:38:c6:
         53:75:c2:b3:9d:38:74:28:fd:34:3d:3f:27:89:b8:cb:5a:57:
         90:fc:ec:4e:a6:18:71:64:14:63:c0:18:00:10:7f:47:fb:12:
         7c:a6:8f:f1:bf:98:67:5b:f3:87:1c:73:6a:4a:28:2f:08:dd:
         9c:2d:da:30:cb:7b:9d:a9:52:7f:a1:ff:7c:9a:05:1e:fb:e3:
         c0:c5:bd:09:6a:bd:ce:b7:e3:36:2a:8d:89:bf:f6:90:43:92:
         64:52:c5:82:64:d7:6f:f7:4c:c3:c0:f8:26:dc:2a:92:d6:13:
         64:66:00:ea
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUV6qVIA8rGElyoohcpTCnAIxBCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc2MjAxMjkwOUZDNTY5MkJCNzBBQzdBMTJCRjgwNEY1
NzdBMEFFODAeFw0yNTAyMDQxODQzNDdaFw0yNjAyMDMxODQ4NDdaMDMxMTAvBgNV
BAMTKDk1M0Y2QTIyMkZFOTMxRDkwODMxRjc5MEM5RDU1NEFBMTBEODU3QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTNAE1OV19XyI6PuXNeaksxO99
Vgk712DBNGIBX9JCTsaHIZ6VvkEwMoB5D04FzviiILL0sVDbpjuOMJWlqxMl4b9L
vz05x18lTBNnrCknguaT9d10ipFUONReIDQOwky/xZ9nM3cn9OxmbebseDYF8hvt
VLL2FxY/cdKdtdWIXtvBq8lKTIQuV6Ut08upkaLzZW0YBYfQJWE/fC28HN12cu+l
whprMP4UN2V2XOXKlIYhjpgAUpqw1kYwAnSWNK2kjB23yezD7mw+7PG84I0lZkgQ
5Ag3dqB5uHMvmHmmUYq9DgEowoqQqq0TrIsoqDCqjuC/8WzbrQncLpBPng09AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlT9qIi/pMdkIMfeQydVUqhDYV8YwHwYDVR0j
BBgwFoAUV2IBKQn8VpK7cKx6Er+AT1d6CugwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUNDQzcyMENEQkMxNjcyMTNBREFBNDE4MDQzREE4NkUx
RkUzOTc1RjM4QkIyM0M0OEM0M0E4RThDNjBDM0YwLzAvNTc2MjAxMjkwOUZDNTY5
MkJCNzBBQzdBMTJCRjgwNEY1NzdBMEFFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NzYyMDEyOTA5RkM1NjkyQkI3
MEFDN0ExMkJGODA0RjU3N0EwQUU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFDQ0M3MjBDREJDMTY3MjEzQURBQTQxODA0M0RBODZFMUZFMzk3NUYz
OEJCMjNDNDhDNDNBOEU4QzYwQzNGMC8wLzMyMzAzMDJlMzgzMTJlMzEzNTMyMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM4MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8hRmDAN
BgkqhkiG9w0BAQsFAAOCAQEAXcn8RcY9WmOLPsM8gGQoEmp7penc4lUim/XDdn2v
6DNX4pnAACB36ExsyGNUeglkoD13TvSCBMCVG9eWE+7WPpQcyO9qS7sc0FussucU
SYSmdgo7/UB5E2G7EeNWNk2EHYLW4pZf0Ze+rgmEG4mWZIJu4A7hMazJT2DkQZNA
kAdL0ioT/MTP/uEu9ewI7DjGU3XCs504dCj9ND0/J4m4y1pXkPzsTqYYcWQUY8AY
ABB/R/sSfKaP8b+YZ1vzhxxzakooLwjdnC3aMMt7nalSf6H/fJoFHvvjwMW9CWq9
zrfjNiqNib/2kEOSZFLFgmTXb/dMw8D4JtwqktYTZGYA6g==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:34:45 2025 by rpki-client