Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136302e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136302e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          e/Ng++GxTz0nxZdc9EbmXLhOBLp98xqKrcWa2LwTZ7Q=
Subject key identifier:   52:82:CB:2F:0F:FB:88:3A:32:D6:5E:4B:F0:54:F6:A3:AD:BF:36:32
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       648EBD8D0EAB00DC2365AE2B0F422D62C4002B12
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136302e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 04 Feb 2025 19:59:21 +0000
ROA not before:           Tue 04 Feb 2025 19:54:21 +0000
ROA not after:            Tue 03 Feb 2026 19:59:21 +0000
asID:                     22541
IP address blocks:        200.75.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 15:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8e:bd:8d:0e:ab:00:dc:23:65:ae:2b:0f:42:2d:62:c4:00:2b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Feb  4 19:54:21 2025 GMT
            Not After : Feb  3 19:59:21 2026 GMT
        Subject: CN=5282CB2F0FFB883A32D65E4BF054F6A3ADBF3632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:b2:be:9e:96:22:14:5b:e0:27:25:40:d0:
                    79:fd:bc:9b:26:63:42:42:03:62:6d:d4:8f:5c:7b:
                    53:7b:bf:44:40:c7:a3:62:2a:b2:2d:e0:82:a5:72:
                    b4:de:ba:8e:58:06:e1:e9:1b:84:35:9b:b1:46:8d:
                    d6:eb:35:48:6b:27:70:f8:90:ef:1b:95:9f:a7:cb:
                    5c:7c:9f:53:92:e4:fc:f1:6b:08:ad:b3:fe:6a:40:
                    2b:67:5f:ad:83:a7:41:38:81:0a:a2:b6:e7:ab:23:
                    59:d6:65:af:96:13:b7:c1:9a:d6:58:20:7a:d2:a6:
                    02:cd:29:d7:c7:7e:12:2d:b4:42:6a:71:c9:2b:90:
                    25:ce:0a:d8:75:ec:5f:6e:ff:97:d0:c3:35:90:7e:
                    4c:5f:78:b8:f0:9c:71:57:0a:8d:10:4b:85:4f:64:
                    46:74:8b:8a:ca:e9:26:6a:d9:80:33:1d:8e:e4:7a:
                    72:ed:16:89:a4:b7:ea:ff:18:d6:d4:d9:e1:9e:6e:
                    33:f3:a2:b4:54:8f:73:59:51:49:5f:09:b4:27:cb:
                    b1:e3:8e:12:34:b1:bb:f9:a9:8f:d8:ab:5d:cf:5b:
                    65:a1:67:b9:80:69:e1:fe:65:28:61:ec:53:a2:3c:
                    e1:34:b2:da:08:e9:2c:eb:77:30:37:07:91:c8:a2:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:82:CB:2F:0F:FB:88:3A:32:D6:5E:4B:F0:54:F6:A3:AD:BF:36:32
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136302e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:25:86:06:23:07:98:f5:43:93:43:61:42:03:70:28:8e:
         46:cb:80:47:19:a0:60:49:e6:ac:32:3c:df:93:7d:f7:41:1c:
         66:84:a7:4c:0d:7c:0f:34:c3:da:3c:03:78:75:9e:96:7c:2c:
         82:c9:3a:37:70:03:a8:2b:58:b6:75:1b:d2:53:83:f7:84:3c:
         cf:aa:b1:e3:63:20:8a:ea:f8:75:2a:e6:66:8a:a3:12:68:8c:
         14:fb:48:fe:05:d3:7e:49:eb:46:ee:b5:a8:56:8b:f5:be:e3:
         73:2e:6f:a2:37:0b:af:d0:f2:99:8e:93:58:88:be:0c:a0:c4:
         b9:8a:4f:38:21:5f:d6:f0:24:2e:25:a1:6d:1b:fd:61:5c:67:
         ab:42:fd:ad:3e:e4:1d:21:e5:a2:ea:5c:b5:af:b1:b2:d6:9d:
         85:52:74:6e:c7:cd:97:f3:e3:e8:55:2e:bf:02:56:f5:73:55:
         01:b3:28:bd:b7:31:d4:df:c6:65:86:81:57:d0:6d:2d:80:4c:
         15:1b:fd:68:76:33:08:36:06:fe:28:63:35:84:95:78:8e:6d:
         76:64:d0:f0:9f:e1:75:80:ac:b6:ff:ea:f3:e7:42:32:56:d2:
         1c:94:f8:98:6b:c9:d6:97:9d:6a:0c:45:af:95:14:56:e7:eb:
         b0:96:f7:20
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZI69jQ6rANwjZa4rD0ItYsQAKxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjIwRDFGREJCRDQ1N0NBMEY5Q0NGQzYzQThCODVDOTlB
ODE5QUYzRDAeFw0yNTAyMDQxOTU0MjFaFw0yNjAyMDMxOTU5MjFaMDMxMTAvBgNV
BAMTKDUyODJDQjJGMEZGQjg4M0EzMkQ2NUU0QkYwNTRGNkEzQURCRjM2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHV7K+npYiFFvgJyVA0Hn9vJsm
Y0JCA2Jt1I9ce1N7v0RAx6NiKrIt4IKlcrTeuo5YBuHpG4Q1m7FGjdbrNUhrJ3D4
kO8blZ+ny1x8n1OS5Pzxawits/5qQCtnX62Dp0E4gQqituerI1nWZa+WE7fBmtZY
IHrSpgLNKdfHfhIttEJqcckrkCXOCth17F9u/5fQwzWQfkxfeLjwnHFXCo0QS4VP
ZEZ0i4rK6SZq2YAzHY7kenLtFomkt+r/GNbU2eGebjPzorRUj3NZUUlfCbQny7Hj
jhI0sbv5qY/Yq13PW2WhZ7mAaeH+ZShh7FOiPOE0stoI6SzrdzA3B5HIotvbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUUoLLLw/7iDoy1l5L8FT2o62/NjIwHwYDVR0j
BBgwFoAUYg0f271FfKD5zPxjqLhcmagZrz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZBMDM5QjlFQUYxM0FERTgxNzg4MkRENEJCRkZBMkJF
MUQ0OTE3NjRCRjkzODNFQ0VFOTA4QkQyM0Y0Q0YwLzAvNjIwRDFGREJCRDQ1N0NB
MEY5Q0NGQzYzQThCODVDOTlBODE5QUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjBEMUZEQkJENDU3Q0EwRjlD
Q0ZDNjNBOEI4NUM5OUE4MTlBRjNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQTAzOUI5RUFGMTNBREU4MTc4ODJERDRCQkZGQTJCRTFENDkxNzY0
QkY5MzgzRUNFRTkwOEJEMjNGNENGMC8wLzMyMzAzMDJlMzczNTJlMzEzNjMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjM1MzQzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhLoDAN
BgkqhkiG9w0BAQsFAAOCAQEAceslhgYjB5j1Q5NDYUIDcCiORsuARxmgYEnmrDI8
35N990EcZoSnTA18DzTD2jwDeHWelnwsgsk6N3ADqCtYtnUb0lOD94Q8z6qx42Mg
iur4dSrmZoqjEmiMFPtI/gXTfknrRu61qFaL9b7jcy5vojcLr9DymY6TWIi+DKDE
uYpPOCFf1vAkLiWhbRv9YVxnq0L9rT7kHSHloupcta+xstadhVJ0bsfNl/Pj6FUu
vwJW9XNVAbMovbcx1N/GZYaBV9BtLYBMFRv9aHYzCDYG/ihjNYSVeI5tdmTQ8J/h
dYCstv/q8+dCMlbSHJT4mGvJ1pedagxFr5UUVufrsJb3IA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 05:11:06 2025 by rpki-client