Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e38332e302e302f31362d3234203d3e203232303437.roa
File:                     3230302e38332e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          ptPJvbdZ+JJxVdIYO3MhhlN28CwdjDuHfUl/sW+C6aA=
Subject key identifier:   A6:CA:09:90:3F:F0:CD:F7:39:E7:D5:F3:3E:B8:C2:60:2F:B9:16:F2
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       19CE8EC74F6721078D19060A9BFB432BE3F50D67
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e38332e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 04 Feb 2025 18:19:15 +0000
ROA not before:           Tue 04 Feb 2025 18:14:15 +0000
ROA not after:            Tue 03 Feb 2026 18:19:15 +0000
asID:                     22047
IP address blocks:        200.83.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 05:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ce:8e:c7:4f:67:21:07:8d:19:06:0a:9b:fb:43:2b:e3:f5:0d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Feb  4 18:14:15 2025 GMT
            Not After : Feb  3 18:19:15 2026 GMT
        Subject: CN=A6CA09903FF0CDF739E7D5F33EB8C2602FB916F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:4f:cb:1b:c1:32:51:bf:f7:4e:12:81:87:
                    64:13:c7:c8:d6:ad:7f:5f:a1:00:d5:cc:09:a1:7b:
                    dd:39:d2:38:bc:85:23:1b:f2:ec:c3:e4:11:c6:7e:
                    df:ed:fa:1a:77:87:5d:08:36:fb:41:08:dc:ab:b5:
                    c9:96:b6:e5:05:5a:d1:53:e0:9d:2a:3b:a5:7f:c4:
                    32:91:23:ef:1a:36:ef:d8:0a:4d:e9:15:d9:2f:83:
                    0f:ba:6a:89:3b:ce:93:25:74:2e:80:29:16:18:08:
                    9b:09:11:f5:3f:5e:57:28:17:28:9e:64:db:a5:91:
                    ef:fc:2a:18:5a:a5:38:40:dd:0a:3a:3a:52:0c:fe:
                    35:64:f5:db:35:0b:46:19:2f:39:60:ad:b7:db:bc:
                    a6:6c:b1:54:18:26:4b:c8:08:fc:b5:07:a5:60:6f:
                    89:36:54:2a:6a:67:f9:ad:67:59:3c:21:b0:e6:3c:
                    52:35:62:ca:a7:ff:7c:28:33:bb:2c:02:5b:52:56:
                    24:08:49:42:2a:2e:31:59:13:4c:af:22:46:aa:9e:
                    5c:23:03:12:31:51:2d:6b:25:0f:22:fa:b0:1b:66:
                    25:08:5a:53:44:7e:d5:1d:6f:cc:2f:f5:65:a5:2d:
                    a3:0b:dc:e7:13:a3:10:88:2d:7d:c0:18:b0:40:d9:
                    43:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CA:09:90:3F:F0:CD:F7:39:E7:D5:F3:3E:B8:C2:60:2F:B9:16:F2
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e38332e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.83.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7b:e4:97:43:a7:71:c1:32:b5:e7:2e:91:c2:7e:64:73:34:9d:
         af:16:cd:44:11:bd:c1:c3:b4:0e:c3:92:1c:11:24:36:ab:67:
         2f:8b:d0:6f:7b:30:eb:a4:3f:0c:6e:5c:2d:30:85:69:c8:7c:
         c1:88:20:9c:b2:05:aa:0e:69:1b:e6:89:7e:ad:53:91:ea:7c:
         49:31:7a:bd:6a:0f:96:db:ff:6d:7e:50:1c:14:29:04:10:83:
         41:d7:f0:a9:1c:f5:2e:20:6a:d8:22:02:5d:0f:05:dc:60:ad:
         17:c2:1d:73:91:84:1a:01:f4:a5:ac:b7:73:5b:b1:8e:55:02:
         4d:79:40:ca:2a:e0:e8:c8:d4:31:d7:3a:33:0c:81:82:2e:a9:
         f6:e1:86:83:f2:d5:30:7f:ac:af:b0:fb:77:8d:e1:98:c0:e1:
         85:10:65:f2:30:ca:5d:66:40:45:10:fb:dc:97:3c:8d:87:1c:
         49:7c:37:33:b1:d2:cd:b6:d3:7f:68:b8:30:b0:9e:7e:8c:3d:
         e6:cd:91:24:a3:ae:dd:7e:1c:42:05:57:60:2c:48:c2:86:57:
         77:23:01:3a:ce:af:02:fc:45:86:bf:a6:57:db:86:ac:83:53:
         f1:ec:6c:8a:a8:e1:12:e5:d5:81:0e:64:40:02:f4:eb:bb:dc:
         55:f4:3d:46
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUGc6Ox09nIQeNGQYKm/tDK+P1DWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDODVBN0I3MkJCMzg1RTlDQkQxNDRBNTg1ODMxMkUw
Nzk3MDM2RjAeFw0yNTAyMDQxODE0MTVaFw0yNjAyMDMxODE5MTVaMDMxMTAvBgNV
BAMTKEE2Q0EwOTkwM0ZGMENERjczOUU3RDVGMzNFQjhDMjYwMkZCOTE2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbE/LG8EyUb/3ThKBh2QTx8jW
rX9foQDVzAmhe9050ji8hSMb8uzD5BHGft/t+hp3h10INvtBCNyrtcmWtuUFWtFT
4J0qO6V/xDKRI+8aNu/YCk3pFdkvgw+6aok7zpMldC6AKRYYCJsJEfU/XlcoFyie
ZNulke/8KhhapThA3Qo6OlIM/jVk9ds1C0YZLzlgrbfbvKZssVQYJkvICPy1B6Vg
b4k2VCpqZ/mtZ1k8IbDmPFI1Ysqn/3woM7ssAltSViQISUIqLjFZE0yvIkaqnlwj
AxIxUS1rJQ8i+rAbZiUIWlNEftUdb8wv9WWlLaML3OcToxCILX3AGLBA2UPFAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUpsoJkD/wzfc559XzPrjCYC+5FvIwHwYDVR0j
BBgwFoAU9chae3K7OF6cvRRKWFgxLgeXA28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OTQ0MTgzNjVEMzM0MDc0QTU0ODgzNkMxMUMwNjdBMzEy
Rjk5Q0E4NEMzMENDMjkzQUZGQTUyNjI1QjM1ODVELzAvRjVDODVBN0I3MkJCMzg1
RTlDQkQxNDRBNTg1ODMxMkUwNzk3MDM2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNUM4NUE3QjcyQkIzODVFOUNC
RDE0NEE1ODU4MzEyRTA3OTcwMzZGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzk0NDE4MzY1RDMzNDA3NEE1NDg4MzZDMTFDMDY3QTMxMkY5OUNBODRD
MzBDQzI5M0FGRkE1MjYyNUIzNTg1RC8wLzMyMzAzMDJlMzgzMzJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzMjMyMzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyFMwDQYJKoZI
hvcNAQELBQADggEBAHvkl0OnccEytecukcJ+ZHM0na8WzUQRvcHDtA7DkhwRJDar
Zy+L0G97MOukPwxuXC0whWnIfMGIIJyyBaoOaRvmiX6tU5HqfEkxer1qD5bb/21+
UBwUKQQQg0HX8Kkc9S4gatgiAl0PBdxgrRfCHXORhBoB9KWst3NbsY5VAk15QMoq
4OjI1DHXOjMMgYIuqfbhhoPy1TB/rK+w+3eN4ZjA4YUQZfIwyl1mQEUQ+9yXPI2H
HEl8NzOx0s22039ouDCwnn6MPebNkSSjrt1+HEIFV2AsSMKGV3cjATrOrwL8RYa/
plfbhqyDU/HsbIqo4RLl1YEOZEAC9Ou73FX0PUY=
-----END CERTIFICATE-----
Generated at Mon Apr 14 21:11:35 2025 by rpki-client