Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233322e302f32342d3234203d3e203237373237.roa
File:                     3230302e36312e3233322e302f32342d3234203d3e203237373237.roa (raw, json)
Hash identifier:          AnxkpevfYYXhhYDRlDE6H4Xsn4E1Tfh0QMAoybKeDlU=
Subject key identifier:   DC:BC:0E:B2:EF:CA:C6:9A:DF:B0:C9:4C:5E:D0:68:89:84:D1:EF:83
Certificate issuer:       /CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
Certificate serial:       6CDE2A84687BEAB6AE5B71480D5571D86EB79C19
Authority key identifier: B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233322e302f32342d3234203d3e203237373237.roa
Signing time:             Tue 04 Feb 2025 18:03:54 +0000
ROA not before:           Tue 04 Feb 2025 17:58:54 +0000
ROA not after:            Tue 03 Feb 2026 18:03:54 +0000
asID:                     27727
IP address blocks:        200.61.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:de:2a:84:68:7b:ea:b6:ae:5b:71:48:0d:55:71:d8:6e:b7:9c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
        Validity
            Not Before: Feb  4 17:58:54 2025 GMT
            Not After : Feb  3 18:03:54 2026 GMT
        Subject: CN=DCBC0EB2EFCAC69ADFB0C94C5ED0688984D1EF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:70:f3:bf:b0:a9:f7:76:99:7f:26:81:71:69:
                    92:11:ac:24:d3:db:a2:03:db:4a:b1:90:34:ff:95:
                    e6:c8:03:b7:c0:e3:87:1c:10:90:d5:e0:07:72:b0:
                    42:03:c3:f3:f2:d4:76:b4:74:fe:75:8b:6f:31:68:
                    3f:75:c2:bb:db:88:7e:b7:ef:ac:aa:aa:e3:c7:76:
                    22:6a:be:50:03:6b:9c:84:61:60:84:19:cb:dc:98:
                    4f:c6:43:27:dd:fa:d6:e2:ff:db:dc:4c:77:37:93:
                    e0:a5:a7:6d:03:7e:67:50:a1:a5:d0:34:43:44:cb:
                    f0:d7:6b:62:9f:07:73:51:8a:39:fc:c6:8f:e3:97:
                    67:e1:42:25:6d:dc:43:88:e2:a4:54:2e:14:6e:2b:
                    88:c2:6c:7c:bd:06:4d:cd:28:cd:32:53:0b:03:ed:
                    51:69:79:a7:44:c7:49:47:89:7f:d9:45:26:6a:8f:
                    b6:c9:8f:26:80:cc:7b:f8:13:a2:22:de:f0:c6:4e:
                    6d:b6:81:dc:2e:ce:61:bd:77:4a:0b:ab:5a:69:0e:
                    7a:80:70:d7:c0:58:ad:55:68:37:f0:98:75:94:90:
                    cf:dc:9a:8e:69:78:87:a8:b0:78:85:59:a8:db:5a:
                    8e:ea:7a:9b:bc:4f:b7:67:b7:83:25:d7:e4:8d:f1:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BC:0E:B2:EF:CA:C6:9A:DF:B0:C9:4C:5E:D0:68:89:84:D1:EF:83
            X509v3 Authority Key Identifier:
                keyid:B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233322e302f32342d3234203d3e203237373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:8d:d1:cf:2a:72:79:45:fc:db:7d:bc:24:dd:75:87:58:10:
         39:b3:22:d9:77:58:78:19:ec:51:55:b4:eb:9d:89:86:24:27:
         b7:82:06:f2:a3:f9:4c:45:49:88:36:14:3f:74:48:ac:3b:43:
         d1:22:6d:8b:04:0b:bc:fa:4d:5a:3a:df:13:03:70:e6:4c:de:
         76:32:5f:85:86:42:5a:ff:81:f6:57:6d:37:9a:15:75:78:5e:
         82:90:64:91:46:66:10:db:dd:aa:df:30:2d:ae:c2:b6:1f:5b:
         bc:f1:a6:b1:f9:45:4c:5b:a8:a1:ca:7a:c2:27:93:ff:25:79:
         36:02:7c:0c:02:56:fe:45:88:e5:9a:99:c2:e9:57:87:89:fc:
         50:af:ca:c2:fe:11:47:c6:0e:5d:e0:46:19:46:a6:d1:3c:b2:
         8f:ae:6b:10:dd:53:e8:d9:e0:90:fc:0e:c7:3d:f7:f5:45:93:
         1b:60:d3:13:88:fd:13:de:8b:de:bc:d3:34:5a:2f:3f:57:96:
         ac:5a:c4:64:97:66:81:9f:48:2f:cd:44:00:69:d3:24:9a:d7:
         be:77:be:42:ed:1f:74:7a:d3:df:88:91:d7:57:9a:e9:73:0c:
         4d:1b:b2:c7:31:66:0f:cc:61:bb:35:a3:a3:b8:83:8c:f0:cf:
         bc:f8:da:1e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbN4qhGh76rauW3FIDVVx2G63nBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY3MTQ2Qjc4QzUwQ0VFQjFCQjI1QjYyRTA4RjQ5NjM0
RTM0MTRGRDAeFw0yNTAyMDQxNzU4NTRaFw0yNjAyMDMxODAzNTRaMDMxMTAvBgNV
BAMTKERDQkMwRUIyRUZDQUM2OUFERkIwQzk0QzVFRDA2ODg5ODREMUVGODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDcPO/sKn3dpl/JoFxaZIRrCTT
26ID20qxkDT/lebIA7fA44ccEJDV4AdysEIDw/Py1Ha0dP51i28xaD91wrvbiH63
76yqquPHdiJqvlADa5yEYWCEGcvcmE/GQyfd+tbi/9vcTHc3k+Clp20DfmdQoaXQ
NENEy/DXa2KfB3NRijn8xo/jl2fhQiVt3EOI4qRULhRuK4jCbHy9Bk3NKM0yUwsD
7VFpeadEx0lHiX/ZRSZqj7bJjyaAzHv4E6Ii3vDGTm22gdwuzmG9d0oLq1ppDnqA
cNfAWK1VaDfwmHWUkM/cmo5peIeosHiFWajbWo7qepu8T7dnt4Ml1+SN8djbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3LwOsu/KxprfsMlMXtBoiYTR74MwHwYDVR0j
BBgwFoAUtnFGt4xQzusbslti4I9JY040FP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzJCMUJBNkUyMjkzQzNCNzk4NERGMUMzN0IxNEZDMUFF
NzUyQTY3RkMyNzU5QTgwNUIwNzFCREUxNjY3RUNGLzAvQjY3MTQ2Qjc4QzUwQ0VF
QjFCQjI1QjYyRTA4RjQ5NjM0RTM0MTRGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjcxNDZCNzhDNTBDRUVCMUJC
MjVCNjJFMDhGNDk2MzRFMzQxNEZELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMyQjFCQTZFMjI5M0MzQjc5ODRERjFDMzdCMTRGQzFBRTc1MkE2N0ZD
Mjc1OUE4MDVCMDcxQkRFMTY2N0VDRi8wLzMyMzAzMDJlMzYzMTJlMzIzMzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg96DAN
BgkqhkiG9w0BAQsFAAOCAQEABo3RzypyeUX82328JN11h1gQObMi2XdYeBnsUVW0
652JhiQnt4IG8qP5TEVJiDYUP3RIrDtD0SJtiwQLvPpNWjrfEwNw5kzedjJfhYZC
Wv+B9ldtN5oVdXhegpBkkUZmENvdqt8wLa7Cth9bvPGmsflFTFuoocp6wieT/yV5
NgJ8DAJW/kWI5ZqZwulXh4n8UK/Kwv4RR8YOXeBGGUam0Tyyj65rEN1T6NngkPwO
xz339UWTG2DTE4j9E96L3rzTNFovP1eWrFrEZJdmgZ9IL81EAGnTJJrXvne+Qu0f
dHrT34iR11ea6XMMTRuyxzFmD8xhuzWjo7iDjPDPvPjaHg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:22:01 2025 by rpki-client