Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231372e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231372e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          jzPTL5UmldQWYQxhhHtj0ndIFgI5hZWeQZq6pm0fpMM=
Subject key identifier:   F0:AA:CA:EF:7D:45:D9:5E:B2:EF:D1:7A:B5:FE:B8:88:0D:65:5F:07
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       0F2DD53C7F1756CFDD7E45D3BD67D97C0F30BB70
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231372e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:17 +0000
ROA not before:           Tue 04 Feb 2025 18:47:17 +0000
ROA not after:            Tue 03 Feb 2026 18:52:17 +0000
asID:                     20015
IP address blocks:        200.71.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2d:d5:3c:7f:17:56:cf:dd:7e:45:d3:bd:67:d9:7c:0f:30:bb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:17 2025 GMT
            Not After : Feb  3 18:52:17 2026 GMT
        Subject: CN=F0AACAEF7D45D95EB2EFD17AB5FEB8880D655F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:80:11:46:b3:1c:c8:55:db:13:af:0d:91:18:
                    24:c3:a5:58:fc:ce:d8:39:96:13:26:bd:28:a3:03:
                    b0:af:79:56:19:66:8c:6c:d4:3e:01:45:3c:e5:14:
                    b1:50:3d:63:f0:59:3f:5a:39:a2:d9:2e:7a:ad:13:
                    ee:ba:d7:00:4c:c8:f9:91:2e:68:c1:4f:f8:a0:0a:
                    36:b9:0f:42:e9:1a:c7:20:ba:11:9c:60:ae:b6:15:
                    b9:ca:76:8b:29:86:f7:92:35:2a:ba:7b:11:71:77:
                    ac:40:fc:db:6c:0a:d6:d4:da:11:58:6d:03:de:ed:
                    00:ce:d6:f3:65:d1:f6:96:e7:43:b1:37:56:1e:40:
                    e6:44:8b:5d:2e:78:d4:cd:3d:ce:8b:0f:f5:1e:00:
                    85:51:80:29:95:be:43:7b:0c:03:59:0f:43:71:8f:
                    5d:e6:19:cc:f0:80:aa:ef:0d:df:75:d6:aa:63:65:
                    b2:64:c1:e2:62:07:22:47:2e:a2:a2:21:41:6e:3e:
                    97:e8:0c:51:68:0c:de:0e:0a:34:03:82:33:79:48:
                    60:f7:36:14:29:40:9d:fb:4d:ae:12:61:03:08:d0:
                    84:85:43:0a:cd:be:0b:dd:64:70:89:1b:df:5f:c8:
                    cd:9e:9f:10:28:ad:47:0d:90:78:7b:73:a0:a5:7f:
                    88:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AA:CA:EF:7D:45:D9:5E:B2:EF:D1:7A:B5:FE:B8:88:0D:65:5F:07
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231372e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:f7:db:ef:d9:46:85:df:4f:06:3b:1e:83:00:9f:16:c8:5b:
         c6:31:5e:fa:62:93:f3:fc:4a:b3:79:92:4f:b9:20:bc:33:67:
         1e:e3:0d:84:60:59:19:80:75:29:ab:c3:1a:25:d0:a0:2a:c4:
         a8:b6:a0:1a:17:23:8b:15:48:0a:23:89:b7:e3:07:7b:de:18:
         45:ce:34:f5:ba:3a:d3:22:60:86:0e:c4:bf:0e:dd:27:65:75:
         9c:57:9a:9b:d9:68:3a:dd:1d:4e:fe:c9:f8:bc:c1:6b:42:3d:
         da:0f:05:75:3c:f1:99:b7:ca:e6:71:09:c3:61:83:0f:02:cf:
         a7:ca:6e:b6:68:e6:f1:be:50:eb:f1:d2:f3:0b:2f:8c:77:82:
         c8:7d:9a:4e:c7:1f:f7:88:8b:d8:7f:be:da:ba:bd:61:e5:76:
         45:ba:7f:3e:88:10:04:f6:66:5c:5d:db:1b:10:67:8d:ae:45:
         c5:55:b7:ad:97:e2:44:a7:7c:3b:4c:d0:ab:7e:d6:fe:3f:12:
         22:51:4c:f7:a3:ee:a0:9b:5e:cc:5a:f9:a1:bf:48:b9:db:fe:
         5c:f6:a5:a9:38:7a:17:ba:6d:e2:5e:45:96:9b:b4:08:fb:84:
         4c:72:6c:e9:76:2b:85:fe:a4:a6:2e:f0:a5:d5:46:4e:cf:56:
         3d:bd:1d:9f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDy3VPH8XVs/dfkXTvWfZfA8wu3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzNjhBMUNDQTQzOThBQzI0NUU4MDk2RkZGMkQ5QkQ1
MTVENDJGMzAeFw0yNTAyMDQxODQ3MTdaFw0yNjAyMDMxODUyMTdaMDMxMTAvBgNV
BAMTKEYwQUFDQUVGN0Q0NUQ5NUVCMkVGRDE3QUI1RkVCODg4MEQ2NTVGMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRgBFGsxzIVdsTrw2RGCTDpVj8
ztg5lhMmvSijA7CveVYZZoxs1D4BRTzlFLFQPWPwWT9aOaLZLnqtE+661wBMyPmR
LmjBT/igCja5D0LpGscguhGcYK62FbnKdosphveSNSq6exFxd6xA/NtsCtbU2hFY
bQPe7QDO1vNl0faW50OxN1YeQOZEi10ueNTNPc6LD/UeAIVRgCmVvkN7DANZD0Nx
j13mGczwgKrvDd911qpjZbJkweJiByJHLqKiIUFuPpfoDFFoDN4OCjQDgjN5SGD3
NhQpQJ37Ta4SYQMI0ISFQwrNvgvdZHCJG99fyM2enxAorUcNkHh7c6Clf4h1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU8KrK731F2V6y79F6tf64iA1lXwcwHwYDVR0j
BBgwFoAU1jaKHMpDmKwkXoCW//LZvVFdQvMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzAwQkNGMzdDQzdFQjNBMzE5RTdDOTJBM0Y4OUIyM0My
QjY1Q0VFNkUxRjE2QUUwN0VFRDcxMENDQzQwQ0ZFLzAvRDYzNjhBMUNDQTQzOThB
QzI0NUU4MDk2RkZGMkQ5QkQ1MTVENDJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjM2OEExQ0NBNDM5OEFDMjQ1
RTgwOTZGRkYyRDlCRDUxNUQ0MkYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMwMEJDRjM3Q0M3RUIzQTMxOUU3QzkyQTNGODlCMjNDMkI2NUNFRTZF
MUYxNkFFMDdFRUQ3MTBDQ0M0MENGRS8wLzMyMzAzMDJlMzczMTJlMzIzMTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhH2TAN
BgkqhkiG9w0BAQsFAAOCAQEAqPfb79lGhd9PBjsegwCfFshbxjFe+mKT8/xKs3mS
T7kgvDNnHuMNhGBZGYB1KavDGiXQoCrEqLagGhcjixVICiOJt+MHe94YRc409bo6
0yJghg7Evw7dJ2V1nFeam9loOt0dTv7J+LzBa0I92g8FdTzxmbfK5nEJw2GDDwLP
p8putmjm8b5Q6/HS8wsvjHeCyH2aTscf94iL2H++2rq9YeV2Rbp/PogQBPZmXF3b
GxBnja5FxVW3rZfiRKd8O0zQq37W/j8SIlFM96PuoJtezFr5ob9Iudv+XPalqTh6
F7pt4l5Flpu0CPuETHJs6XYrhf6kpi7wpdVGTs9WPb0dnw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:15 2025 by rpki-client