Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3230302e32352e3132382e302f31382d3234203d3e203134353232.roa
File:                     3230302e32352e3132382e302f31382d3234203d3e203134353232.roa (raw, json)
Hash identifier:          ISof5Wd/4/TnoxgyuXLIli55zu/9700mgFkpPY1CZdA=
Subject key identifier:   31:23:2C:52:C6:16:20:3F:9D:A5:AF:48:8D:0A:3A:7E:3B:BE:22:33
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       2C66283393876477E167F3686F985D74DC683DB3
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3230302e32352e3132382e302f31382d3234203d3e203134353232.roa
Signing time:             Tue 05 Mar 2024 18:20:51 +0000
ROA not before:           Tue 05 Mar 2024 18:15:51 +0000
ROA not after:            Tue 04 Mar 2025 18:20:51 +0000
asID:                     14522
IP address blocks:        200.25.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:66:28:33:93:87:64:77:e1:67:f3:68:6f:98:5d:74:dc:68:3d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Mar  5 18:15:51 2024 GMT
            Not After : Mar  4 18:20:51 2025 GMT
        Subject: CN=31232C52C616203F9DA5AF488D0A3A7E3BBE2233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:80:c9:c0:02:b6:b3:d9:39:4b:a1:0a:03:
                    6a:67:f4:6f:76:c6:c6:f5:47:74:12:5f:17:19:10:
                    50:07:0d:4e:28:63:0c:f8:37:16:59:42:d6:00:b9:
                    94:4d:89:4a:3d:da:23:96:0c:24:51:2a:f5:4b:a4:
                    8a:35:41:fb:a7:86:fb:0a:2a:d4:13:ec:af:15:d3:
                    48:14:21:f6:84:f0:0e:4b:b2:7e:b1:65:74:b5:9b:
                    e7:d0:18:d6:20:c1:18:fb:b9:03:89:c6:43:22:45:
                    df:94:19:b4:b6:87:12:6e:93:1e:ee:7b:62:66:50:
                    64:a1:4d:1e:ab:77:89:02:a1:46:2c:f2:58:34:79:
                    5e:9b:87:2c:87:aa:99:c5:18:ff:8a:dd:40:7e:32:
                    53:af:79:d1:25:68:b2:6e:90:40:c1:b9:a0:86:63:
                    18:7c:7e:ea:46:b5:ba:46:5d:da:d7:f3:ce:93:85:
                    b2:e9:22:91:f0:b3:65:c4:ac:28:51:d1:86:96:11:
                    1e:84:e9:aa:1e:ee:6b:7e:d3:b0:6e:05:95:a7:8e:
                    a5:93:64:f3:af:81:ce:2e:a5:fe:44:63:11:01:b7:
                    b1:f8:02:d0:1f:e2:f3:39:8d:1a:00:49:73:a9:b0:
                    5c:24:18:5c:18:93:44:6d:8b:84:93:d6:9d:de:5c:
                    25:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:23:2C:52:C6:16:20:3F:9D:A5:AF:48:8D:0A:3A:7E:3B:BE:22:33
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3230302e32352e3132382e302f31382d3234203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         35:15:c9:19:af:92:76:bd:14:1e:47:cc:62:64:55:fa:ab:12:
         39:9b:1b:d4:f7:8a:54:51:4f:76:e6:6d:59:a6:b0:30:d7:8e:
         27:28:0a:48:30:b0:8b:01:29:a5:17:2f:bf:07:0b:42:8f:6f:
         a3:34:b8:ec:a3:6e:d0:81:8d:e0:3c:06:04:89:ae:cd:67:28:
         fd:31:1c:9a:8c:f3:4d:eb:9b:cc:9e:5d:c0:90:90:7b:7e:b8:
         52:f1:31:12:28:91:01:a5:e4:ae:eb:d5:a3:f3:15:16:95:f6:
         e3:59:b1:65:ac:c3:6e:dc:c2:58:05:ba:81:69:d3:5b:cc:56:
         b3:4e:bb:a0:42:49:0e:74:d5:8c:c4:50:85:94:3b:d2:85:6a:
         2d:1e:83:da:68:c1:96:6d:b8:61:06:be:30:8b:16:36:9b:b3:
         8b:cb:2d:1b:bf:18:f8:0d:0c:a7:78:41:ae:24:92:b3:3d:fd:
         bb:e6:27:40:8e:b7:53:5c:1a:c7:9f:d1:80:4d:24:f7:0a:07:
         24:4a:a5:f6:57:b9:85:78:91:45:26:c4:25:59:fe:19:13:54:
         35:a0:b9:ae:33:18:67:bd:8b:13:ac:4b:8a:98:4e:0c:23:92:
         c4:07:a2:ab:95:ea:56:44:dd:3e:48:64:7c:bd:e1:f7:48:5e:
         62:a9:e2:02
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULGYoM5OHZHfhZ/Nob5hddNxoPbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIyRjQ0NTVFOTcyNkNDM0Q2RENENDE0M0E2RDlGMTc3
M0Y4QTM2RjAeFw0yNDAzMDUxODE1NTFaFw0yNTAzMDQxODIwNTFaMDMxMTAvBgNV
BAMTKDMxMjMyQzUyQzYxNjIwM0Y5REE1QUY0ODhEMEEzQTdFM0JCRTIyMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUEoDJwAK2s9k5S6EKA2pn9G92
xsb1R3QSXxcZEFAHDU4oYwz4NxZZQtYAuZRNiUo92iOWDCRRKvVLpIo1QfunhvsK
KtQT7K8V00gUIfaE8A5Lsn6xZXS1m+fQGNYgwRj7uQOJxkMiRd+UGbS2hxJukx7u
e2JmUGShTR6rd4kCoUYs8lg0eV6bhyyHqpnFGP+K3UB+MlOvedElaLJukEDBuaCG
Yxh8fupGtbpGXdrX886ThbLpIpHws2XErChR0YaWER6E6aoe7mt+07BuBZWnjqWT
ZPOvgc4upf5EYxEBt7H4AtAf4vM5jRoASXOpsFwkGFwYk0Rti4ST1p3eXCWDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUMSMsUsYWID+dpa9IjQo6fju+IjMwHwYDVR0j
BBgwFoAUgi9EVelybMPW3NQUOm2fF3P4o28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NDhENjk4QjI0M0EwOTY0QTRFQ0VCN0Y5MzM3NTkwQUY5
M0MxMzhEODY1NkE4MDg5NkI2RTQxNkI5QjFGRDlDLzAvODIyRjQ0NTVFOTcyNkND
M0Q2RENENDE0M0E2RDlGMTc3M0Y4QTM2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjJGNDQ1NUU5NzI2Q0MzRDZE
Q0Q0MTQzQTZEOUYxNzczRjhBMzZGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzQ4RDY5OEIyNDNBMDk2NEE0RUNFQjdGOTMzNzU5MEFGOTNDMTM4RDg2
NTZBODA4OTZCNkU0MTZCOUIxRkQ5Qy8wLzMyMzAzMDJlMzIzNTJlMzEzMjM4MmUz
MDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNDM1MzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsgZgDAN
BgkqhkiG9w0BAQsFAAOCAQEANRXJGa+Sdr0UHkfMYmRV+qsSOZsb1PeKVFFPduZt
WaawMNeOJygKSDCwiwEppRcvvwcLQo9vozS47KNu0IGN4DwGBImuzWco/TEcmozz
TeubzJ5dwJCQe364UvExEiiRAaXkruvVo/MVFpX241mxZazDbtzCWAW6gWnTW8xW
s067oEJJDnTVjMRQhZQ70oVqLR6D2mjBlm24YQa+MIsWNpuzi8stG78Y+A0Mp3hB
riSSsz39u+YnQI63U1wax5/RgE0k9woHJEql9le5hXiRRSbEJVn+GRNUNaC5rjMY
Z72LE6xLiphODCOSxAeiq5XqVkTdPkhkfL3h90heYqniAg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org