Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/3230302e3130372e38322e302f32332d3234203d3e20323633373739.roa
File:                     3230302e3130372e38322e302f32332d3234203d3e20323633373739.roa (raw, json)
Hash identifier:          DVUz8e/Dy/8AMrXciWuOtwnhbalf7Nq8Gwx8ps2jrvE=
Subject key identifier:   8E:25:D5:52:93:B8:75:7F:F5:AD:A7:1B:43:C2:4E:30:4E:C0:EC:25
Certificate issuer:       /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial:       612E4906B7FF993D1F8B14EDE9CBB6A4CB358B4F
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/3230302e3130372e38322e302f32332d3234203d3e20323633373739.roa
Signing time:             Tue 04 Feb 2025 18:14:06 +0000
ROA not before:           Tue 04 Feb 2025 18:09:06 +0000
ROA not after:            Tue 03 Feb 2026 18:14:06 +0000
asID:                     263779
IP address blocks:        200.107.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2e:49:06:b7:ff:99:3d:1f:8b:14:ed:e9:cb:b6:a4:cb:35:8b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
        Validity
            Not Before: Feb  4 18:09:06 2025 GMT
            Not After : Feb  3 18:14:06 2026 GMT
        Subject: CN=8E25D55293B8757FF5ADA71B43C24E304EC0EC25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:29:d6:ed:99:bb:c1:f9:44:f3:54:7c:22:
                    37:bb:14:25:d0:30:30:44:48:e3:12:65:bf:66:e0:
                    f4:65:1c:7e:e6:be:99:b3:84:77:7c:b9:27:aa:08:
                    d5:0d:38:ce:65:6a:0f:88:bb:36:b4:9f:4f:bd:69:
                    cb:c7:ae:76:74:b8:6b:66:5c:f6:ca:36:16:84:86:
                    0e:f2:04:31:cd:cb:41:c0:dd:7c:a9:06:34:b3:75:
                    72:07:40:bf:65:a1:b1:14:87:b3:72:82:11:58:f1:
                    66:52:fb:3c:5e:7e:d4:9f:97:5c:de:86:c4:40:d5:
                    29:6e:0c:7a:0f:68:3d:e7:e3:d8:24:ff:07:4e:3d:
                    3e:2e:1c:36:e9:65:d6:71:1e:75:4d:c0:c6:0c:3b:
                    b8:22:a8:5c:4d:1b:83:fd:d6:e7:57:b2:56:e8:44:
                    7a:d3:2f:46:bc:81:32:47:ce:11:97:2d:83:c3:42:
                    5d:e9:ca:4b:99:ba:4d:60:c8:f6:70:df:b2:3d:05:
                    03:91:69:c7:39:3c:80:5c:0a:ca:55:91:8a:f0:05:
                    7f:a8:9f:6d:85:73:cd:19:40:59:1c:f8:6f:4e:79:
                    71:d8:e6:c4:44:e4:cd:ea:cc:49:b5:c7:c0:88:da:
                    22:ac:c6:7d:f7:8d:bd:56:59:61:ce:6f:26:d2:78:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:25:D5:52:93:B8:75:7F:F5:AD:A7:1B:43:C2:4E:30:4E:C0:EC:25
            X509v3 Authority Key Identifier:
                keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/3230302e3130372e38322e302f32332d3234203d3e20323633373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:2a:e8:c9:bc:d0:53:fe:d7:0a:d3:dc:59:43:ee:2c:40:c9:
         7b:c8:f9:3d:2c:23:b2:ff:e4:e3:9a:9b:61:59:9f:37:a7:01:
         a0:6e:88:13:62:ff:96:fa:2e:32:a8:01:21:c5:4d:0a:f9:2a:
         ab:1e:cf:3d:70:e7:6f:be:60:e0:c5:51:f4:4d:4b:5b:9a:20:
         40:64:fc:d1:bb:84:43:4f:f7:92:10:c5:88:f0:2c:fa:ba:3b:
         38:42:f7:fe:99:d1:90:97:ce:e1:05:d3:df:ae:20:8f:5a:03:
         f4:bc:5d:46:64:9e:6c:37:08:cf:9e:6f:bd:4f:0a:46:99:6c:
         9b:42:d5:18:1b:72:87:f6:37:7a:92:cb:ea:cf:70:fd:b3:79:
         7b:66:6f:d7:02:f5:ae:a9:2f:96:3f:29:f7:e2:84:53:5f:e4:
         21:71:9f:9b:0d:df:c1:b4:44:b8:ed:89:bf:3e:45:f1:24:db:
         c2:5f:fa:e8:c4:55:89:89:01:79:0d:fb:3c:e5:45:c8:53:c0:
         2b:8f:d9:8e:2b:88:fa:a9:ec:01:89:24:68:06:7c:a0:19:fa:
         f4:a2:c1:b8:7f:e0:cc:6e:38:c9:33:29:eb:3f:a0:7c:e6:20:
         cb:fc:1e:c3:7a:70:2c:8c:64:f3:6d:39:ce:2b:b1:97:aa:45:
         08:0e:1b:b3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYS5JBrf/mT0fixTt6cu2pMs1i08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBGMkQ1NTBEQTJGQUZFN0I2NEYzODUwRDlDNzM5Qjcx
RTYxRkQxODAeFw0yNTAyMDQxODA5MDZaFw0yNjAyMDMxODE0MDZaMDMxMTAvBgNV
BAMTKDhFMjVENTUyOTNCODc1N0ZGNUFEQTcxQjQzQzI0RTMwNEVDMEVDMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgCnW7Zm7wflE81R8Ije7FCXQ
MDBESOMSZb9m4PRlHH7mvpmzhHd8uSeqCNUNOM5lag+Iuza0n0+9acvHrnZ0uGtm
XPbKNhaEhg7yBDHNy0HA3XypBjSzdXIHQL9lobEUh7NyghFY8WZS+zxeftSfl1ze
hsRA1SluDHoPaD3n49gk/wdOPT4uHDbpZdZxHnVNwMYMO7giqFxNG4P91udXslbo
RHrTL0a8gTJHzhGXLYPDQl3pykuZuk1gyPZw37I9BQORacc5PIBcCspVkYrwBX+o
n22Fc80ZQFkc+G9OeXHY5sRE5M3qzEm1x8CI2iKsxn33jb1WWWHObybSePxzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUjiXVUpO4dX/1racbQ8JOME7A7CUwHwYDVR0j
BBgwFoAUIPLVUNovr+e2TzhQ2cc5tx5h/RgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjE1Qzk5QjYwQzM0NjdEQjcxMEYxNzZEOTQ2OUJFNjNC
NjQ1OEZFQTU4REYzRDZDNTQwRThFN0M2QzVBQkM1LzAvMjBGMkQ1NTBEQTJGQUZF
N0I2NEYzODUwRDlDNzM5QjcxRTYxRkQxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEYyRDU1MERBMkZBRkU3QjY0
RjM4NTBEOUM3MzlCNzFFNjFGRDE4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0IxNUM5OUI2MEMzNDY3REI3MTBGMTc2RDk0NjlCRTYzQjY0NThGRUE1
OERGM0Q2QzU0MEU4RTdDNkM1QUJDNS8wLzMyMzAzMDJlMzEzMDM3MmUzODMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMzMzczNzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByGtS
MA0GCSqGSIb3DQEBCwUAA4IBAQBJKujJvNBT/tcK09xZQ+4sQMl7yPk9LCOy/+Tj
mpthWZ83pwGgbogTYv+W+i4yqAEhxU0K+SqrHs89cOdvvmDgxVH0TUtbmiBAZPzR
u4RDT/eSEMWI8Cz6ujs4Qvf+mdGQl87hBdPfriCPWgP0vF1GZJ5sNwjPnm+9TwpG
mWybQtUYG3KH9jd6ksvqz3D9s3l7Zm/XAvWuqS+WPyn34oRTX+QhcZ+bDd/BtES4
7Ym/PkXxJNvCX/roxFWJiQF5Dfs85UXIU8Arj9mOK4j6qewBiSRoBnygGfr0osG4
f+DMbjjJMynrP6B85iDL/B7DenAsjGTzbTnOK7GXqkUIDhuz
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:02 2025 by rpki-client