Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3230302e3131302e3136382e302f32312d3234203d3e203237393531.roa
File:                     3230302e3131302e3136382e302f32312d3234203d3e203237393531.roa (raw, json)
Hash identifier:          eUc66mYw5L4r/JTwTx8+fLL0SiLZHvX+cHpaBED51YQ=
Subject key identifier:   BC:C0:F5:E0:55:13:FA:7A:56:6A:65:F3:CE:DA:FF:04:4B:E8:66:5A
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       4573CBCAE76F104AA50B93B86E22D262AB46F886
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3230302e3131302e3136382e302f32312d3234203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 19:57:04 +0000
ROA not before:           Tue 04 Feb 2025 19:52:04 +0000
ROA not after:            Tue 03 Feb 2026 19:57:04 +0000
asID:                     27951
IP address blocks:        200.110.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:73:cb:ca:e7:6f:10:4a:a5:0b:93:b8:6e:22:d2:62:ab:46:f8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:52:04 2025 GMT
            Not After : Feb  3 19:57:04 2026 GMT
        Subject: CN=BCC0F5E05513FA7A566A65F3CEDAFF044BE8665A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6f:d9:4b:27:5d:7f:cf:07:da:5d:ee:df:5f:
                    48:3a:9a:af:0f:84:4e:8c:ea:55:e8:06:73:84:1c:
                    7f:1c:36:09:25:95:7e:45:73:60:21:75:3c:4b:9b:
                    4e:eb:5a:71:28:cd:b0:79:02:0c:08:a9:9e:05:5d:
                    db:0e:02:85:a3:df:18:75:8b:c0:f1:eb:6b:d5:b6:
                    84:84:66:bb:d7:51:43:0e:44:6d:fc:86:45:d1:74:
                    68:51:12:3f:7e:17:8e:7d:ae:20:24:a8:71:d9:bc:
                    21:b0:2a:56:da:78:06:c8:a4:c5:db:fd:3f:49:e0:
                    d4:50:3b:32:1b:b5:ee:85:29:56:37:72:24:7f:37:
                    1e:6c:35:b4:1e:a9:58:78:4f:6c:b3:c1:69:39:08:
                    49:6d:ae:db:35:93:04:4a:5b:af:9f:bd:f5:ba:f7:
                    8e:a6:8d:c0:5a:66:01:5c:14:85:75:77:57:ce:94:
                    41:bc:0b:13:9c:f1:c8:22:16:0d:30:af:83:78:92:
                    1a:f1:1f:93:30:fa:f7:39:e1:90:0b:80:bc:5f:d0:
                    e1:8a:d8:00:ad:d2:bb:3c:a6:6c:3b:70:ee:d0:08:
                    f5:69:52:da:65:4d:3d:fd:b4:5e:4f:05:a8:03:4f:
                    be:46:f4:7f:a4:3d:32:51:a1:2e:46:1c:ec:39:03:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C0:F5:E0:55:13:FA:7A:56:6A:65:F3:CE:DA:FF:04:4B:E8:66:5A
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3230302e3131302e3136382e302f32312d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:a0:77:e9:12:be:f0:af:06:84:da:a3:6e:4e:47:9d:fc:
         f9:58:07:f0:b6:a6:00:66:de:46:32:86:f3:fc:de:d5:d9:60:
         c7:70:33:94:80:d1:f9:4b:83:27:6d:45:d6:7d:58:b7:d2:b0:
         bc:4f:b0:36:57:0b:9f:9b:78:80:14:68:8a:ab:ec:d6:73:d1:
         1d:9a:de:91:eb:bb:a9:e2:57:fe:00:98:43:fc:06:d8:10:94:
         b7:c0:ac:ba:42:13:ee:85:8c:b8:21:68:f2:a6:0a:0e:f5:e2:
         c3:eb:5d:33:c0:7f:07:a0:20:3e:9e:68:b0:b5:03:89:c9:11:
         34:07:b6:76:01:92:16:d3:43:da:5b:9f:bb:1a:03:f1:64:df:
         20:2c:68:61:1c:63:16:36:97:40:3a:a4:fa:53:20:19:61:76:
         ca:a7:28:6d:54:38:f3:f4:c1:4d:bb:1d:11:a9:57:1f:95:b4:
         17:6b:7d:33:ce:38:52:79:cb:95:cb:9d:b6:4f:2d:9a:38:30:
         dd:9b:7d:ab:b1:60:24:da:7e:19:67:af:97:32:d3:27:e7:d1:
         68:d9:1e:c2:bc:9f:ae:c2:5e:41:40:06:4a:81:d4:c9:2d:5f:
         4a:2c:03:9f:7d:ba:c1:80:ef:b4:40:77:92:f1:0c:91:0c:5a:
         bc:13:b2:08
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURXPLyudvEEqlC5O4biLSYqtG+IYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFRERBNTdEQkEyNUJCRDQwNTJENkFFMERFQ0Y3NDBF
QTI3QjU3QzAeFw0yNTAyMDQxOTUyMDRaFw0yNjAyMDMxOTU3MDRaMDMxMTAvBgNV
BAMTKEJDQzBGNUUwNTUxM0ZBN0E1NjZBNjVGM0NFREFGRjA0NEJFODY2NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZb9lLJ11/zwfaXe7fX0g6mq8P
hE6M6lXoBnOEHH8cNgkllX5Fc2AhdTxLm07rWnEozbB5AgwIqZ4FXdsOAoWj3xh1
i8Dx62vVtoSEZrvXUUMORG38hkXRdGhREj9+F459riAkqHHZvCGwKlbaeAbIpMXb
/T9J4NRQOzIbte6FKVY3ciR/Nx5sNbQeqVh4T2yzwWk5CEltrts1kwRKW6+fvfW6
946mjcBaZgFcFIV1d1fOlEG8CxOc8cgiFg0wr4N4khrxH5Mw+vc54ZALgLxf0OGK
2ACt0rs8pmw7cO7QCPVpUtplTT39tF5PBagDT75G9H+kPTJRoS5GHOw5Ay0NAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvMD14FUT+npWamXzztr/BEvoZlowHwYDVR0j
BBgwFoAUte3aV9uiW71AUtauDez3QOontXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjVFODlGNEY2OUUyMEE5OEQxNjU1MDczOTdFQkJDNTA2
MzUyN0UyMTkwRDkwQTM3RTM5RjY5ODJBQzkxQUQ3LzAvQjVFRERBNTdEQkEyNUJC
RDQwNTJENkFFMERFQ0Y3NDBFQTI3QjU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVEREE1N0RCQTI1QkJENDA1
MkQ2QUUwREVDRjc0MEVBMjdCNTdDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTI1RTg5RjRGNjlFMjBBOThEMTY1NTA3Mzk3RUJCQzUwNjM1MjdFMjE5
MEQ5MEEzN0UzOUY2OTgyQUM5MUFENy8wLzMyMzAzMDJlMzEzMTMwMmUzMTM2Mzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM3MzkzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyG6o
MA0GCSqGSIb3DQEBCwUAA4IBAQA9QqB36RK+8K8GhNqjbk5Hnfz5WAfwtqYAZt5G
Mobz/N7V2WDHcDOUgNH5S4MnbUXWfVi30rC8T7A2Vwufm3iAFGiKq+zWc9Edmt6R
67up4lf+AJhD/AbYEJS3wKy6QhPuhYy4IWjypgoO9eLD610zwH8HoCA+nmiwtQOJ
yRE0B7Z2AZIW00PaW5+7GgPxZN8gLGhhHGMWNpdAOqT6UyAZYXbKpyhtVDjz9MFN
ux0RqVcflbQXa30zzjhSecuVy522Ty2aODDdm32rsWAk2n4ZZ6+XMtMn59Fo2R7C
vJ+uwl5BQAZKgdTJLV9KLAOffbrBgO+0QHeS8QyRDFq8E7II
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:13 2025 by rpki-client