Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3132382e302f32302d3234203d3e203139333733.roa
File:                     3230302e35372e3132382e302f32302d3234203d3e203139333733.roa (raw, json)
Hash identifier:          3HPZbNXArsFKB9snS1SSy9NenTu2hL0AUhYV0QTTj50=
Subject key identifier:   57:12:7A:3A:57:51:60:F4:A8:B0:80:50:BE:AB:F7:B0:BD:06:40:DA
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       02EE7085C8CFE490C16C1F0BF456AF4D9EC6B766
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3132382e302f32302d3234203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:40:00 +0000
ROA not before:           Sun 16 Feb 2025 06:35:00 +0000
ROA not after:            Sun 15 Feb 2026 06:40:00 +0000
asID:                     19373
IP address blocks:        200.57.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 14:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ee:70:85:c8:cf:e4:90:c1:6c:1f:0b:f4:56:af:4d:9e:c6:b7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:35:00 2025 GMT
            Not After : Feb 15 06:40:00 2026 GMT
        Subject: CN=57127A3A575160F4A8B08050BEABF7B0BD0640DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:1b:5d:9a:ca:25:13:87:50:12:ce:5f:77:
                    80:17:4f:7d:60:10:9f:76:c4:14:cc:24:94:3f:1b:
                    71:14:97:e2:f2:03:df:44:43:74:ac:77:97:f6:0c:
                    dd:48:2e:45:10:d8:a9:75:28:cc:22:22:d4:a2:0c:
                    d4:3e:bd:1d:be:04:a7:f0:6f:d3:3a:63:d6:5a:63:
                    c1:07:49:de:e6:d1:86:0f:71:13:82:4c:9c:dd:df:
                    74:41:3f:79:84:9a:51:2f:d5:1c:e0:53:9d:77:6a:
                    27:05:52:31:b1:37:57:89:23:2e:a6:dd:d8:cb:bf:
                    03:97:e8:05:42:0b:2a:2f:e0:b4:fb:94:bc:6d:06:
                    10:c5:82:7d:97:6f:08:34:61:9e:c5:73:05:8d:f6:
                    11:f7:34:1e:0d:3a:06:f2:c4:1b:f3:3f:87:11:3f:
                    f0:8b:91:a9:d1:da:a5:fe:0f:45:fc:7e:fc:83:bc:
                    bd:6a:06:6c:e1:c3:a5:07:ad:7e:3e:d8:0b:70:cd:
                    b6:55:9c:a5:6c:db:00:92:d5:86:5e:6c:01:46:2f:
                    ea:2e:b7:e2:9a:29:7b:55:95:5f:20:b1:0f:02:a3:
                    8a:45:3f:0b:70:35:88:46:e0:23:11:ba:22:d4:ec:
                    e4:90:02:b9:df:d7:d8:1a:13:d0:0e:96:cb:56:5a:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:12:7A:3A:57:51:60:F4:A8:B0:80:50:BE:AB:F7:B0:BD:06:40:DA
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3132382e302f32302d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:28:b0:5a:b7:84:88:c0:11:14:49:df:b4:7d:33:9f:11:
         2b:43:b4:0c:77:8d:48:09:3a:62:5f:10:12:55:e5:39:24:01:
         76:05:0b:c5:16:34:cb:d0:38:37:46:01:a0:21:c9:9c:66:08:
         9c:57:dd:b4:76:17:5a:93:cd:f0:0c:14:dc:ac:d8:12:e9:07:
         dc:7f:df:4c:09:6b:95:73:ed:ea:b7:59:d4:31:8d:1b:b6:36:
         09:f6:24:64:2b:89:e8:c1:3b:24:4b:9b:3a:d0:b5:29:d0:a2:
         9a:46:6a:78:af:87:47:7d:f6:76:96:54:ec:45:fa:d3:7d:f5:
         b0:16:ef:df:a9:e7:70:82:3d:61:8b:88:9c:03:c0:b1:52:19:
         e4:2f:c6:6b:c6:cf:7e:36:88:cc:a7:6a:b9:cb:f3:c7:12:4c:
         28:7a:de:7e:7e:ac:1b:4e:7e:5f:c6:0e:ee:cc:e3:db:28:b1:
         8e:bc:d2:62:a7:8d:f2:70:3e:35:aa:b5:3b:a4:72:13:c9:60:
         f0:c5:b5:bb:b6:a7:c4:8a:2a:c6:1f:21:51:18:d7:5c:c5:a2:
         ca:67:43:21:00:90:4e:cf:00:ae:c0:3f:68:d4:52:8f:94:43:
         3f:b3:d9:f1:28:25:93:cf:af:ad:e9:a6:f4:d3:1e:68:34:37:
         05:1e:62:ac
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAu5whcjP5JDBbB8L9FavTZ7Gt2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBNjI4NjNCNUVCREY2QzI3QjU2NzQxQzNCOEIyNjI0
RTM3OTExOTAeFw0yNTAyMTYwNjM1MDBaFw0yNjAyMTUwNjQwMDBaMDMxMTAvBgNV
BAMTKDU3MTI3QTNBNTc1MTYwRjRBOEIwODA1MEJFQUJGN0IwQkQwNjQwREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uhtdmsolE4dQEs5fd4AXT31g
EJ92xBTMJJQ/G3EUl+LyA99EQ3Ssd5f2DN1ILkUQ2Kl1KMwiItSiDNQ+vR2+BKfw
b9M6Y9ZaY8EHSd7m0YYPcROCTJzd33RBP3mEmlEv1RzgU513aicFUjGxN1eJIy6m
3djLvwOX6AVCCyov4LT7lLxtBhDFgn2Xbwg0YZ7FcwWN9hH3NB4NOgbyxBvzP4cR
P/CLkanR2qX+D0X8fvyDvL1qBmzhw6UHrX4+2AtwzbZVnKVs2wCS1YZebAFGL+ou
t+KaKXtVlV8gsQ8Co4pFPwtwNYhG4CMRuiLU7OSQArnf19gaE9AOlstWWnhpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUVxJ6OldRYPSosIBQvqv3sL0GQNowHwYDVR0j
BBgwFoAUVKYoY7Xr32wntWdBw7iyYk43kRkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjBEODY0OTA0NjBCN0Q2MzEzMzhGNzA5MUU2NjBCMzM3
RjlDRDExMkYyNUJEOTBFMEYzMUVFREEyMjgzNURCLzAvNTRBNjI4NjNCNUVCREY2
QzI3QjU2NzQxQzNCOEIyNjI0RTM3OTExOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEE2Mjg2M0I1RUJERjZDMjdC
NTY3NDFDM0I4QjI2MjRFMzc5MTE5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTYwRDg2NDkwNDYwQjdENjMxMzM4RjcwOTFFNjYwQjMzN0Y5Q0QxMTJG
MjVCRDkwRTBGMzFFRURBMjI4MzVEQi8wLzMyMzAzMDJlMzUzNzJlMzEzMjM4MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzOTMzMzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMg5gDAN
BgkqhkiG9w0BAQsFAAOCAQEAK5sosFq3hIjAERRJ37R9M58RK0O0DHeNSAk6Yl8Q
ElXlOSQBdgULxRY0y9A4N0YBoCHJnGYInFfdtHYXWpPN8AwU3KzYEukH3H/fTAlr
lXPt6rdZ1DGNG7Y2CfYkZCuJ6ME7JEubOtC1KdCimkZqeK+HR332dpZU7EX60331
sBbv36nncII9YYuInAPAsVIZ5C/Ga8bPfjaIzKdqucvzxxJMKHrefn6sG05+X8YO
7szj2yixjrzSYqeN8nA+Naq1O6RyE8lg8MW1u7anxIoqxh8hURjXXMWiymdDIQCQ
Ts8ArsA/aNRSj5RDP7PZ8Sglk8+vremm9NMeaDQ3BR5irA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 15:02:19 2025 by rpki-client