Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230392e302f32342d3234203d3e20323731383637.roa
File:                     3230302e33362e3230392e302f32342d3234203d3e20323731383637.roa (raw, json)
Hash identifier:          OteczmbDyz6fJTRAwAsJcqra3o9yni7s9NoJNtzQMVQ=
Subject key identifier:   2F:21:5B:8A:BE:6E:A4:15:DA:C0:A5:5C:66:8F:62:15:94:02:3B:07
Certificate issuer:       /CN=44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6
Certificate serial:       2D3F683DEA4F9F48979AD5AF3CE10AE560E4FA24
Authority key identifier: 44:F0:97:D1:B0:DF:1D:2B:00:D7:14:F0:E6:C7:61:BF:12:CC:23:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230392e302f32342d3234203d3e20323731383637.roa
Signing time:             Tue 04 Feb 2025 18:34:18 +0000
ROA not before:           Tue 04 Feb 2025 18:29:18 +0000
ROA not after:            Tue 03 Feb 2026 18:34:18 +0000
asID:                     271867
IP address blocks:        200.36.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3f:68:3d:ea:4f:9f:48:97:9a:d5:af:3c:e1:0a:e5:60:e4:fa:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6
        Validity
            Not Before: Feb  4 18:29:18 2025 GMT
            Not After : Feb  3 18:34:18 2026 GMT
        Subject: CN=2F215B8ABE6EA415DAC0A55C668F621594023B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:11:1e:d8:9c:3a:9a:96:24:5a:5c:c7:eb:
                    e4:be:d3:4d:40:93:eb:6c:cd:ae:2d:17:69:6d:03:
                    c1:31:91:5f:22:20:79:b5:d0:ac:6f:38:00:5f:62:
                    26:f5:54:b6:71:2f:69:d9:f5:c9:03:df:2b:de:86:
                    45:70:6c:42:5a:96:83:36:09:db:fa:88:c4:e5:c1:
                    f7:f3:c2:11:2f:86:2c:5e:a2:42:2c:66:f0:02:25:
                    e6:d4:c2:a4:d8:b7:bd:82:73:55:31:07:d3:06:14:
                    a5:04:d4:11:dd:f1:14:ff:0b:7d:00:6f:a3:74:e8:
                    c4:e1:3f:99:20:1f:a9:00:22:e1:27:0b:47:b1:26:
                    5e:be:24:05:b4:f6:72:e4:1e:3d:59:b3:f3:01:ea:
                    76:76:0b:6d:1a:0d:77:da:4d:21:8f:7b:e4:34:6a:
                    f4:46:29:c5:c1:c9:7f:69:a6:9b:c7:25:db:6b:cf:
                    b6:81:b8:45:5f:c6:e7:71:c3:da:e3:6c:9f:4d:e2:
                    7f:c4:a5:01:20:3e:b4:ca:2c:12:ab:b9:cb:e4:f2:
                    80:91:93:76:5d:75:61:4e:0e:8f:05:13:7d:00:18:
                    92:8e:33:22:0a:73:fb:cc:0f:f7:dd:26:0b:13:2a:
                    72:ab:9a:f5:ed:9a:b9:98:6c:75:ed:71:75:09:f7:
                    7a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:21:5B:8A:BE:6E:A4:15:DA:C0:A5:5C:66:8F:62:15:94:02:3B:07
            X509v3 Authority Key Identifier:
                keyid:44:F0:97:D1:B0:DF:1D:2B:00:D7:14:F0:E6:C7:61:BF:12:CC:23:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230392e302f32342d3234203d3e20323731383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:3d:de:f8:ca:33:b1:0f:5e:be:f3:24:00:75:2a:0c:de:23:
         89:e4:14:36:aa:86:aa:fb:4b:bd:29:41:bd:9d:31:e9:11:09:
         64:b3:c7:7a:97:1e:91:ab:b1:e8:ce:03:af:1a:99:2a:b1:26:
         13:ce:97:9c:29:20:a2:ec:9f:51:84:eb:18:0a:bc:00:a6:4e:
         90:ee:61:22:22:e1:dd:20:57:00:01:53:e3:72:81:77:45:ab:
         a4:82:bd:b4:05:ca:f4:64:89:d9:3d:fb:3b:a6:58:47:54:89:
         01:15:a6:c3:57:40:f7:54:54:1a:b2:e7:83:bb:5a:9e:20:5d:
         8a:fc:ee:92:f6:1e:ed:55:a2:3b:b2:97:70:6b:92:99:3b:7c:
         af:e5:90:e6:b1:9e:63:2e:de:d6:5c:1b:f9:a4:b5:0a:75:e0:
         6d:7f:b3:40:45:e6:b3:a6:94:6b:c4:2b:f7:54:16:17:86:a4:
         b7:11:80:b1:43:83:e1:d6:50:03:40:a3:2f:72:59:a0:4b:29:
         d6:89:39:ad:3b:a0:db:32:58:a9:b3:3f:d0:a3:d2:f6:41:d2:
         33:de:5a:c1:ed:52:f2:21:60:76:d9:d5:ce:f2:bb:48:1a:26:
         ed:08:7e:c7:5d:e7:85:8b:81:67:25:56:b8:bb:c7:c2:05:7d:
         17:86:ab:79
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULT9oPepPn0iXmtWvPOEK5WDk+iQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRGMDk3RDFCMERGMUQyQjAwRDcxNEYwRTZDNzYxQkYx
MkNDMjNGNjAeFw0yNTAyMDQxODI5MThaFw0yNjAyMDMxODM0MThaMDMxMTAvBgNV
BAMTKDJGMjE1QjhBQkU2RUE0MTVEQUMwQTU1QzY2OEY2MjE1OTQwMjNCMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwFxEe2Jw6mpYkWlzH6+S+001A
k+tsza4tF2ltA8ExkV8iIHm10KxvOABfYib1VLZxL2nZ9ckD3yvehkVwbEJaloM2
Cdv6iMTlwffzwhEvhixeokIsZvACJebUwqTYt72Cc1UxB9MGFKUE1BHd8RT/C30A
b6N06MThP5kgH6kAIuEnC0exJl6+JAW09nLkHj1Zs/MB6nZ2C20aDXfaTSGPe+Q0
avRGKcXByX9pppvHJdtrz7aBuEVfxudxw9rjbJ9N4n/EpQEgPrTKLBKrucvk8oCR
k3ZddWFODo8FE30AGJKOMyIKc/vMD/fdJgsTKnKrmvXtmrmYbHXtcXUJ93o/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQULyFbir5upBXawKVcZo9iFZQCOwcwHwYDVR0j
BBgwFoAURPCX0bDfHSsA1xTw5sdhvxLMI/YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84REE4NzZBOTVFNEMzQzFCOTBDODgyODQwQUE3MTY1MTA2
RjVGOEVFNEIxMjE5QzdFMTQ3ODlEQzBBQkY2MTRELzAvNDRGMDk3RDFCMERGMUQy
QjAwRDcxNEYwRTZDNzYxQkYxMkNDMjNGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NEYwOTdEMUIwREYxRDJCMDBE
NzE0RjBFNkM3NjFCRjEyQ0MyM0Y2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOERBODc2QTk1RTRDM0MxQjkwQzg4Mjg0MEFBNzE2NTEwNkY1RjhFRTRC
MTIxOUM3RTE0Nzg5REMwQUJGNjE0RC8wLzMyMzAzMDJlMzMzNjJlMzIzMDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzNjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyCTR
MA0GCSqGSIb3DQEBCwUAA4IBAQB2Pd74yjOxD16+8yQAdSoM3iOJ5BQ2qoaq+0u9
KUG9nTHpEQlks8d6lx6Rq7HozgOvGpkqsSYTzpecKSCi7J9RhOsYCrwApk6Q7mEi
IuHdIFcAAVPjcoF3Raukgr20Bcr0ZInZPfs7plhHVIkBFabDV0D3VFQasueDu1qe
IF2K/O6S9h7tVaI7spdwa5KZO3yv5ZDmsZ5jLt7WXBv5pLUKdeBtf7NAReazppRr
xCv3VBYXhqS3EYCxQ4Ph1lADQKMvclmgSynWiTmtO6DbMlipsz/Qo9L2QdIz3lrB
7VLyIWB22dXO8rtIGibtCH7HXeeFi4FnJVa4u8fCBX0Xhqt5
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:51 2025 by rpki-client