Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa
File:                     3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa (raw, json)
Hash identifier:          iPZkMidbV6j7qs4Tb72Amx6IwnPxc0DSpDdNVkH9fFw=
Subject key identifier:   88:B9:39:05:08:B1:31:F4:46:C7:6E:D7:0A:B1:67:FC:8B:3E:7C:9C
Certificate issuer:       /CN=C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134
Certificate serial:       0B8779C7400DB4C5C455F4429D6AD68B120ED434
Authority key identifier: C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa
Signing time:             Tue 04 Feb 2025 18:08:03 +0000
ROA not before:           Tue 04 Feb 2025 18:03:03 +0000
ROA not after:            Tue 03 Feb 2026 18:08:03 +0000
asID:                     270033
IP address blocks:        177.200.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:87:79:c7:40:0d:b4:c5:c4:55:f4:42:9d:6a:d6:8b:12:0e:d4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134
        Validity
            Not Before: Feb  4 18:03:03 2025 GMT
            Not After : Feb  3 18:08:03 2026 GMT
        Subject: CN=88B9390508B131F446C76ED70AB167FC8B3E7C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:7f:84:6b:ef:f2:c0:de:ef:62:c9:4c:51:
                    58:a9:21:84:8a:52:ff:16:dc:45:28:2d:25:8f:8b:
                    3c:d0:3e:69:1b:c8:24:dc:38:44:21:bb:da:54:58:
                    c7:1c:13:16:84:ed:b5:f4:1a:22:99:b8:71:74:f8:
                    fa:f9:89:f7:75:78:31:f8:da:6f:68:18:bd:42:60:
                    93:8d:56:87:44:91:d6:ed:9a:a7:43:98:c7:f3:16:
                    43:6f:6f:54:89:5f:9e:6d:db:89:78:3a:18:cf:f6:
                    6d:90:32:23:e9:84:fe:3d:13:35:35:70:61:6d:28:
                    ef:ec:da:ee:a1:fd:9f:92:a6:b1:ff:39:c6:34:05:
                    fd:c5:5f:61:9f:06:e2:e9:4b:85:8b:f1:ff:4d:26:
                    a6:7e:4e:3a:43:87:44:37:51:6f:91:e0:7c:8c:48:
                    27:98:a0:e0:75:b1:84:6e:47:47:21:3a:ae:6c:08:
                    82:f3:db:e3:a2:cd:d0:59:dd:27:c9:07:83:50:47:
                    7a:cd:1e:15:af:73:28:07:6d:4a:19:14:18:b5:45:
                    e8:c1:c7:9f:5a:f0:a3:d8:47:8c:c6:c6:dc:c8:32:
                    6f:6d:5b:54:e9:ab:92:e4:86:3e:eb:08:b9:5a:2c:
                    83:dd:03:af:d2:c6:f0:dc:09:53:19:c3:1e:2a:de:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B9:39:05:08:B1:31:F4:46:C7:6E:D7:0A:B1:67:FC:8B:3E:7C:9C
            X509v3 Authority Key Identifier:
                keyid:C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:2a:1e:c4:29:f5:38:34:90:d0:a2:2e:df:92:3b:ec:52:8d:
         2c:62:56:81:e5:6d:fb:0b:d1:e7:c0:8d:ec:09:1a:a1:b0:7b:
         f4:1e:48:62:9a:7f:88:49:0e:4c:8d:7e:ab:a2:d1:77:56:f4:
         58:46:1d:bf:84:fb:76:37:93:92:c8:84:c1:af:58:3b:be:a1:
         04:7f:28:36:f1:43:23:b9:f6:64:2e:a7:98:e6:a8:03:69:a1:
         f3:a7:c3:0c:2d:4e:20:65:06:1c:37:b3:8b:20:8a:30:32:0f:
         ff:44:55:0b:65:9f:38:5d:68:8f:a2:2d:44:60:79:d6:15:b1:
         f4:47:ea:d5:d5:84:6a:19:5d:94:7d:b8:9d:0e:27:db:e5:8d:
         9f:e2:f2:bd:5a:96:66:12:02:fc:f3:7c:69:52:d5:92:c1:7b:
         56:62:d1:46:2a:50:23:21:a5:a6:8b:fd:3c:d7:7f:f1:7e:bf:
         44:01:14:c9:40:89:56:cc:d2:ed:3a:11:58:58:c6:1d:4b:e8:
         cf:81:2d:60:8e:fc:c6:ad:7e:5d:4b:79:44:4d:b5:91:1b:c3:
         24:f3:03:8e:a7:43:ac:9f:b7:51:fe:03:a4:9d:49:fb:81:44:
         2e:b0:b1:89:21:30:99:9a:d1:de:de:b2:ec:5b:5d:6e:80:c3:
         16:bb:4a:bc
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUC4d5x0ANtMXEVfRCnWrWixIO1DQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVDRTc2RDI4NzUyRjgzMkFFMUFBQjRBQjZFQjhDMzgz
QkZCMjEzNDAeFw0yNTAyMDQxODAzMDNaFw0yNjAyMDMxODA4MDNaMDMxMTAvBgNV
BAMTKDg4QjkzOTA1MDhCMTMxRjQ0NkM3NkVENzBBQjE2N0ZDOEIzRTdDOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjLH+Ea+/ywN7vYslMUVipIYSK
Uv8W3EUoLSWPizzQPmkbyCTcOEQhu9pUWMccExaE7bX0GiKZuHF0+Pr5ifd1eDH4
2m9oGL1CYJONVodEkdbtmqdDmMfzFkNvb1SJX55t24l4OhjP9m2QMiPphP49EzU1
cGFtKO/s2u6h/Z+SprH/OcY0Bf3FX2GfBuLpS4WL8f9NJqZ+TjpDh0Q3UW+R4HyM
SCeYoOB1sYRuR0chOq5sCILz2+OizdBZ3SfJB4NQR3rNHhWvcygHbUoZFBi1RejB
x59a8KPYR4zGxtzIMm9tW1Tpq5Lkhj7rCLlaLIPdA6/SxvDcCVMZwx4q3i3ZAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUiLk5BQixMfRGx27XCrFn/Is+fJwwHwYDVR0j
BBgwFoAUxc520odS+DKuGqtKtuuMODv7ITQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNDcwNDVBQjZGNjcwNzUzOThDMzc1NkUwNTQ4MUE5QjE2
RjFDN0QyNEExMDFERjZDODVFOUVFQUMxODVCMUFBLzAvQzVDRTc2RDI4NzUyRjgz
MkFFMUFBQjRBQjZFQjhDMzgzQkZCMjEzNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNUNFNzZEMjg3NTJGODMyQUUx
QUFCNEFCNkVCOEMzODNCRkIyMTM0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTQ3MDQ1QUI2RjY3MDc1Mzk4QzM3NTZFMDU0ODFBOUIxNkYxQzdEMjRB
MTAxREY2Qzg1RTlFRUFDMTg1QjFBQS8wLzMxMzczNzJlMzIzMDMwMmUzMjMzMzYy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3MzAzMDMzMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGx
yOwwDQYJKoZIhvcNAQELBQADggEBAIQqHsQp9Tg0kNCiLt+SO+xSjSxiVoHlbfsL
0efAjewJGqGwe/QeSGKaf4hJDkyNfqui0XdW9FhGHb+E+3Y3k5LIhMGvWDu+oQR/
KDbxQyO59mQup5jmqANpofOnwwwtTiBlBhw3s4sgijAyD/9EVQtlnzhdaI+iLURg
edYVsfRH6tXVhGoZXZR9uJ0OJ9vljZ/i8r1almYSAvzzfGlS1ZLBe1Zi0UYqUCMh
paaL/TzXf/F+v0QBFMlAiVbM0u06EVhYxh1L6M+BLWCO/Matfl1LeURNtZEbwyTz
A46nQ6yft1H+A6SdSfuBRC6wsYkhMJma0d7esuxbXW6Awxa7Srw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:03 2025 by rpki-client