Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/759B9FA9E122CCD085EC2936A668B7FB239317B4BA66AB806B39A562141BBB3D/0/3230302e3232352e3132342e302f32322d3234203d3e20323733303733.roa
File:                     3230302e3232352e3132342e302f32322d3234203d3e20323733303733.roa (raw, json)
Hash identifier:          WpXIOhRMLKjFgqyyrylHbzpOgQeuXW/jWJdWwF+nsNw=
Subject key identifier:   4B:0F:7F:D2:06:1E:ED:A8:DB:25:C1:4A:CE:08:6B:0A:C6:49:51:B1
Certificate issuer:       /CN=AEDA9F311CA1467EC256C8DDD6C35AA4FA717A23
Certificate serial:       0F54EA89F16B08FF5434C5EFE8D40AA70AD2C267
Authority key identifier: AE:DA:9F:31:1C:A1:46:7E:C2:56:C8:DD:D6:C3:5A:A4:FA:71:7A:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA9F311CA1467EC256C8DDD6C35AA4FA717A23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/759B9FA9E122CCD085EC2936A668B7FB239317B4BA66AB806B39A562141BBB3D/0/3230302e3232352e3132342e302f32322d3234203d3e20323733303733.roa
Signing time:             Wed 11 Mar 2026 17:55:00 +0000
ROA not before:           Wed 11 Mar 2026 17:50:00 +0000
ROA not after:            Wed 10 Mar 2027 17:55:00 +0000
asID:                     273073
IP address blocks:        200.225.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/759B9FA9E122CCD085EC2936A668B7FB239317B4BA66AB806B39A562141BBB3D/0/AEDA9F311CA1467EC256C8DDD6C35AA4FA717A23.crl
                          rsync://repository.lacnic.net/rpki/lacnic/759B9FA9E122CCD085EC2936A668B7FB239317B4BA66AB806B39A562141BBB3D/0/AEDA9F311CA1467EC256C8DDD6C35AA4FA717A23.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA9F311CA1467EC256C8DDD6C35AA4FA717A23.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:54:ea:89:f1:6b:08:ff:54:34:c5:ef:e8:d4:0a:a7:0a:d2:c2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA9F311CA1467EC256C8DDD6C35AA4FA717A23
        Validity
            Not Before: Mar 11 17:50:00 2026 GMT
            Not After : Mar 10 17:55:00 2027 GMT
        Subject: CN=4B0F7FD2061EEDA8DB25C14ACE086B0AC64951B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:f3:6c:bd:0e:ce:2d:ce:99:15:0d:1b:cb:
                    a6:13:21:63:65:0f:32:8a:73:64:b3:f6:b5:22:6b:
                    1a:67:e5:c2:74:53:f6:aa:c5:a8:31:bd:28:8f:ef:
                    ca:0e:2d:a7:0e:63:2c:02:2c:7f:02:cc:75:41:4e:
                    b1:c9:3f:a0:c5:cc:93:32:53:1f:5f:74:42:37:50:
                    99:88:10:b6:cc:f7:8a:9f:b0:8e:9e:a9:0c:22:4a:
                    51:db:94:97:c2:06:73:1a:ff:0e:eb:98:3b:cb:66:
                    29:09:f4:f0:e0:92:cf:a2:8c:c5:e9:e2:5f:3b:19:
                    ce:92:50:0e:1a:63:35:7e:e9:d6:94:ec:c5:4b:94:
                    3b:05:2b:34:a9:18:d6:e6:6b:77:96:fa:c9:0c:b6:
                    fa:bd:a6:7a:58:f7:9a:18:bc:73:15:dc:34:09:21:
                    d6:81:ee:24:75:16:43:b8:55:08:ba:f4:84:00:31:
                    98:02:7b:d9:12:70:8c:7d:9c:5f:92:d2:50:4d:35:
                    9c:63:2f:93:6f:7f:3e:df:af:bd:36:5a:bb:50:9b:
                    1e:9a:42:a8:1c:9c:fa:73:86:32:f1:cb:f4:4e:a9:
                    2d:4b:e3:45:ef:52:52:e2:18:86:73:c4:a4:da:f9:
                    3d:62:9c:bc:be:a1:08:0d:79:00:ec:b7:69:a7:fc:
                    8e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0F:7F:D2:06:1E:ED:A8:DB:25:C1:4A:CE:08:6B:0A:C6:49:51:B1
            X509v3 Authority Key Identifier:
                keyid:AE:DA:9F:31:1C:A1:46:7E:C2:56:C8:DD:D6:C3:5A:A4:FA:71:7A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/759B9FA9E122CCD085EC2936A668B7FB239317B4BA66AB806B39A562141BBB3D/0/AEDA9F311CA1467EC256C8DDD6C35AA4FA717A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA9F311CA1467EC256C8DDD6C35AA4FA717A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/759B9FA9E122CCD085EC2936A668B7FB239317B4BA66AB806B39A562141BBB3D/0/3230302e3232352e3132342e302f32322d3234203d3e20323733303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:8c:34:6e:fd:74:21:35:89:3e:06:0a:8b:16:99:2e:37:76:
         ec:66:cb:01:13:9e:d8:a5:49:dd:02:a2:5c:1b:a9:77:5d:35:
         ee:c9:1b:74:01:f9:8d:f4:70:68:d8:71:bd:e3:61:bc:89:bc:
         3e:1e:c7:2e:d5:bf:07:5a:6c:cc:a1:e0:c9:9a:6f:2b:50:88:
         c8:4a:d7:0c:53:b9:c1:80:48:76:44:2b:8c:ac:10:81:73:42:
         51:be:ab:f8:f8:c5:f7:48:a0:b3:47:c3:53:b5:ec:cc:9a:0b:
         4e:c6:fb:2e:19:36:8b:c5:af:25:e1:1c:9b:6a:fa:c3:2a:6e:
         f9:a6:25:53:c6:bf:d1:2d:36:3e:44:68:0b:77:5f:2b:27:26:
         2a:92:3a:4a:8c:6f:cf:bb:db:95:61:e4:23:85:9e:04:87:34:
         69:de:70:b1:ae:fa:bf:b4:52:72:d4:ad:b6:2a:f2:4b:5b:20:
         61:48:36:32:be:7f:b5:82:d7:15:c7:53:56:e6:39:0e:f3:f9:
         03:14:5c:3c:7e:33:52:29:00:7d:6c:25:fd:66:33:50:42:52:
         0c:c0:66:2a:a9:aa:7a:bb:b0:c1:74:dc:4d:ab:63:72:32:0f:
         88:c7:92:ec:1a:2a:a6:9c:58:2a:b4:15:be:5c:06:6a:31:1a:
         ae:23:13:2e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUD1TqifFrCP9UNMXv6NQKpwrSwmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVEQTlGMzExQ0ExNDY3RUMyNTZDOERERDZDMzVBQTRG
QTcxN0EyMzAeFw0yNjAzMTExNzUwMDBaFw0yNzAzMTAxNzU1MDBaMDMxMTAvBgNV
BAMTKDRCMEY3RkQyMDYxRUVEQThEQjI1QzE0QUNFMDg2QjBBQzY0OTUxQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftPNsvQ7OLc6ZFQ0by6YTIWNl
DzKKc2Sz9rUiaxpn5cJ0U/aqxagxvSiP78oOLacOYywCLH8CzHVBTrHJP6DFzJMy
Ux9fdEI3UJmIELbM94qfsI6eqQwiSlHblJfCBnMa/w7rmDvLZikJ9PDgks+ijMXp
4l87Gc6SUA4aYzV+6daU7MVLlDsFKzSpGNbma3eW+skMtvq9pnpY95oYvHMV3DQJ
IdaB7iR1FkO4VQi69IQAMZgCe9kScIx9nF+S0lBNNZxjL5Nvfz7fr702WrtQmx6a
QqgcnPpzhjLxy/ROqS1L40XvUlLiGIZzxKTa+T1inLy+oQgNeQDst2mn/I5RAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUSw9/0gYe7ajbJcFKzghrCsZJUbEwHwYDVR0j
BBgwFoAUrtqfMRyhRn7CVsjd1sNapPpxeiMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTlCOUZBOUUxMjJDQ0QwODVFQzI5MzZBNjY4QjdGQjIz
OTMxN0I0QkE2NkFCODA2QjM5QTU2MjE0MUJCQjNELzAvQUVEQTlGMzExQ0ExNDY3
RUMyNTZDOERERDZDMzVBQTRGQTcxN0EyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRURBOUYzMTFDQTE0NjdFQzI1
NkM4RERENkMzNUFBNEZBNzE3QTIzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzU5QjlGQTlFMTIyQ0NEMDg1RUMyOTM2QTY2OEI3RkIyMzkzMTdCNEJB
NjZBQjgwNkIzOUE1NjIxNDFCQkIzRC8wLzMyMzAzMDJlMzIzMjM1MmUzMTMyMzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzMzMDM3MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALI
4XwwDQYJKoZIhvcNAQELBQADggEBAJSMNG79dCE1iT4GCosWmS43duxmywETntil
Sd0ColwbqXddNe7JG3QB+Y30cGjYcb3jYbyJvD4exy7VvwdabMyh4MmabytQiMhK
1wxTucGASHZEK4ysEIFzQlG+q/j4xfdIoLNHw1O17MyaC07G+y4ZNovFryXhHJtq
+sMqbvmmJVPGv9EtNj5EaAt3XysnJiqSOkqMb8+725Vh5COFngSHNGnecLGu+r+0
UnLUrbYq8ktbIGFINjK+f7WC1xXHU1bmOQ7z+QMUXDx+M1IpAH1sJf1mM1BCUgzA
Ziqpqnq7sMF03E2rY3IyD4jHkuwaKqacWCq0Fb5cBmoxGq4jEy4=
-----END CERTIFICATE-----
Generated at Mon Mar 16 05:05:35 2026 by rpki-client