Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3230302e32342e3133332e302f32342d3234203d3e20323731383734.roa
File:                     3230302e32342e3133332e302f32342d3234203d3e20323731383734.roa (raw, json)
Hash identifier:          A1DF2ooe6Btb26skD/A/IYwq44x0ewwMSPLP3AIg8vk=
Subject key identifier:   90:48:CE:05:C3:4D:81:89:80:7B:EB:9A:34:5A:92:D5:74:6E:55:C3
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       039F0F85AC58BC94E6C8381076819CBED6525565
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3230302e32342e3133332e302f32342d3234203d3e20323731383734.roa
Signing time:             Tue 04 Feb 2025 18:54:40 +0000
ROA not before:           Tue 04 Feb 2025 18:49:40 +0000
ROA not after:            Tue 03 Feb 2026 18:54:40 +0000
asID:                     271874
IP address blocks:        200.24.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9f:0f:85:ac:58:bc:94:e6:c8:38:10:76:81:9c:be:d6:52:55:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Feb  4 18:49:40 2025 GMT
            Not After : Feb  3 18:54:40 2026 GMT
        Subject: CN=9048CE05C34D8189807BEB9A345A92D5746E55C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:f0:67:2a:b2:39:c9:4b:56:49:24:03:d2:
                    e0:a5:ce:cd:e9:12:c0:b9:c3:50:5d:a2:6c:92:ce:
                    16:4d:45:05:42:a0:80:52:4e:c4:3e:80:fd:6a:ac:
                    9d:9b:63:33:6e:76:68:bf:b5:ee:b2:67:44:12:df:
                    a7:e0:30:3c:a2:3c:a4:7b:4e:d1:de:94:16:c0:d7:
                    7f:0a:ef:87:65:83:b9:02:3a:31:de:e1:aa:40:d2:
                    71:7a:72:6a:97:08:e4:96:2d:a4:8a:89:c7:f5:1e:
                    f7:c7:ce:bf:6f:96:ed:7c:9f:ce:9f:b8:b8:c8:bc:
                    68:e9:81:13:8c:f2:22:53:e4:42:8e:c2:65:bf:cf:
                    f8:0f:69:e4:85:ec:3d:92:f9:55:16:2b:da:12:8d:
                    1a:83:86:cf:77:a0:7b:64:5c:30:ce:6d:7a:65:c3:
                    19:37:57:0c:a1:ce:d3:28:02:0b:34:b9:86:80:f3:
                    93:63:0b:72:58:5c:c4:8f:0e:6f:f7:cc:50:42:ee:
                    58:24:a6:94:1f:45:b2:27:c6:0c:28:10:11:8a:17:
                    16:6e:4a:d7:09:a5:22:be:1d:d0:ed:f0:6f:9f:97:
                    d2:09:8f:98:e1:7e:43:9f:46:2e:0b:ba:a8:37:e6:
                    8a:dd:30:ab:9c:e3:fb:fe:41:ab:9f:6e:03:a0:f8:
                    4e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:48:CE:05:C3:4D:81:89:80:7B:EB:9A:34:5A:92:D5:74:6E:55:C3
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3230302e32342e3133332e302f32342d3234203d3e20323731383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:70:e4:d6:40:c9:4d:4b:9a:9a:a1:bf:ff:69:db:29:e2:2c:
         08:2c:ed:89:02:d4:6d:d0:09:f7:fa:0e:53:f0:11:c2:06:18:
         cd:92:52:88:31:e1:29:a7:fa:23:13:f1:73:80:a8:12:c5:d6:
         43:cb:e6:57:1b:fd:a3:a1:03:33:e9:9a:6e:d4:e6:09:f6:a1:
         67:67:c5:32:43:a5:fe:37:46:3d:df:e8:e3:78:06:dd:e1:23:
         81:fb:e2:b8:98:44:f8:71:98:89:9e:2f:ee:a6:63:21:8d:be:
         09:4a:8e:bc:5a:ff:ea:98:18:58:c1:d0:ed:63:e1:6c:4f:f0:
         ce:49:13:72:c4:a4:ff:61:02:6a:79:89:1a:86:cb:58:9a:70:
         25:46:62:98:2b:a3:1b:29:92:bd:ff:31:3d:5c:c9:62:04:bb:
         3b:1b:47:68:e3:db:8d:b6:a7:41:70:01:67:2c:bd:20:18:62:
         01:7b:54:a9:c0:fb:a8:c6:25:c6:e5:e7:d4:49:e3:30:8f:e3:
         e9:19:0e:c9:77:f4:02:67:10:df:2d:f9:4f:94:98:e9:d0:2c:
         c2:03:a0:1f:09:2a:c2:c4:77:d4:2f:8c:6c:9f:a4:79:0a:0a:
         74:d9:ba:e2:ab:7a:cc:a4:83:88:cb:83:1a:d2:fe:ed:64:56:
         4c:cd:32:4b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUA58PhaxYvJTmyDgQdoGcvtZSVWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI1NTBBNUQzMDlFRTIxMjhFNEZDREMwMkNENEFDNUM1
NzYwNjlFMjAeFw0yNTAyMDQxODQ5NDBaFw0yNjAyMDMxODU0NDBaMDMxMTAvBgNV
BAMTKDkwNDhDRTA1QzM0RDgxODk4MDdCRUI5QTM0NUE5MkQ1NzQ2RTU1QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZfBnKrI5yUtWSSQD0uClzs3p
EsC5w1BdomySzhZNRQVCoIBSTsQ+gP1qrJ2bYzNudmi/te6yZ0QS36fgMDyiPKR7
TtHelBbA138K74dlg7kCOjHe4apA0nF6cmqXCOSWLaSKicf1HvfHzr9vlu18n86f
uLjIvGjpgROM8iJT5EKOwmW/z/gPaeSF7D2S+VUWK9oSjRqDhs93oHtkXDDObXpl
wxk3VwyhztMoAgs0uYaA85NjC3JYXMSPDm/3zFBC7lgkppQfRbInxgwoEBGKFxZu
StcJpSK+HdDt8G+fl9IJj5jhfkOfRi4Luqg35ordMKuc4/v+QaufbgOg+E5fAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkEjOBcNNgYmAe+uaNFqS1XRuVcMwHwYDVR0j
BBgwFoAUwlUKXTCe4hKOT83ALNSsXFdgaeIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEI3NDY4MjhBNzM4MDNFRTBBQzJDQ0NGOUQ1ODhDMzg0
QTg2N0U0QTczNUJBNDcxQUU5NjIwMDk4NDMxRjYzLzAvQzI1NTBBNUQzMDlFRTIx
MjhFNEZDREMwMkNENEFDNUM1NzYwNjlFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjU1MEE1RDMwOUVFMjEyOEU0
RkNEQzAyQ0Q0QUM1QzU3NjA2OUUyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBCNzQ2ODI4QTczODAzRUUwQUMyQ0NDRjlENTg4QzM4NEE4NjdFNEE3
MzVCQTQ3MUFFOTYyMDA5ODQzMUY2My8wLzMyMzAzMDJlMzIzNDJlMzEzMzMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzNzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyBiF
MA0GCSqGSIb3DQEBCwUAA4IBAQBlcOTWQMlNS5qaob//adsp4iwILO2JAtRt0An3
+g5T8BHCBhjNklKIMeEpp/ojE/FzgKgSxdZDy+ZXG/2joQMz6Zpu1OYJ9qFnZ8Uy
Q6X+N0Y93+jjeAbd4SOB++K4mET4cZiJni/upmMhjb4JSo68Wv/qmBhYwdDtY+Fs
T/DOSRNyxKT/YQJqeYkahstYmnAlRmKYK6MbKZK9/zE9XMliBLs7G0do49uNtqdB
cAFnLL0gGGIBe1SpwPuoxiXG5efUSeMwj+PpGQ7Jd/QCZxDfLflPlJjp0CzCA6Af
CSrCxHfUL4xsn6R5Cgp02briq3rMpIOIy4Ma0v7tZFZMzTJL
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:15 2025 by rpki-client