Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3134302e302f32342d3234203d3e203139333733.roa
File:                     3230302e35372e3134302e302f32342d3234203d3e203139333733.roa (raw, json)
Hash identifier:          2gWEV39+Ib3O+Pe5zgq2bvjMtJ14tWyUgoJ6rI861E8=
Subject key identifier:   57:7C:06:CB:DA:33:C1:E1:96:20:47:E4:35:02:9C:77:7A:87:95:A1
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       781AB055A67AAB7D41BA2FD462B244590D612A75
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3134302e302f32342d3234203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:40:05 +0000
ROA not before:           Sun 16 Feb 2025 06:35:05 +0000
ROA not after:            Sun 15 Feb 2026 06:40:05 +0000
asID:                     19373
IP address blocks:        200.57.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1a:b0:55:a6:7a:ab:7d:41:ba:2f:d4:62:b2:44:59:0d:61:2a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:35:05 2025 GMT
            Not After : Feb 15 06:40:05 2026 GMT
        Subject: CN=577C06CBDA33C1E1962047E435029C777A8795A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0b:9b:5d:c1:55:85:d3:3e:23:d2:57:59:bb:
                    44:b5:04:4e:4a:c2:a3:af:58:62:7c:5c:e7:88:5d:
                    8a:09:e9:39:8c:ad:dd:dd:0d:b2:a5:54:ac:49:26:
                    93:85:49:04:3a:9d:db:1f:1a:19:ba:a1:78:aa:11:
                    f1:50:bf:dc:2b:70:a3:93:3c:b2:db:21:6f:df:f1:
                    69:80:f7:49:84:ae:c9:20:0e:22:76:ac:3d:6f:45:
                    cc:fc:fb:bb:28:10:cb:43:f9:25:45:3c:21:e9:46:
                    52:5d:67:30:9a:32:95:59:6d:72:94:c5:11:c1:c1:
                    c1:93:b7:00:69:b1:62:d3:75:6f:7c:61:f0:37:bb:
                    6d:e5:c0:45:c8:28:ec:f8:57:1e:0a:5b:c1:6c:87:
                    c3:2a:7a:30:99:55:8d:96:aa:aa:7d:0a:7f:48:49:
                    87:ed:e2:6e:ae:20:65:ba:6f:a1:02:61:69:21:89:
                    ef:1c:c7:24:38:1a:75:6b:05:f8:76:90:63:ca:b0:
                    84:56:09:6d:14:3c:79:3c:bd:fc:75:7d:da:7a:37:
                    48:2c:08:9b:c7:24:01:15:ad:73:86:0e:1b:13:b6:
                    09:1b:96:38:0a:f0:32:e8:d5:eb:5d:26:c9:21:70:
                    f2:4b:10:c4:e1:e1:85:12:23:2c:68:fc:6b:8c:1d:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7C:06:CB:DA:33:C1:E1:96:20:47:E4:35:02:9C:77:7A:87:95:A1
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3134302e302f32342d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:98:91:a2:ab:b0:74:02:a4:24:c5:f7:76:bb:ed:25:b7:41:
         5e:00:b8:0b:66:bf:ad:14:6b:a3:52:60:bc:2c:ad:0f:7a:98:
         12:33:9e:84:99:e2:56:0f:34:fa:4b:2c:e8:2f:f8:11:ae:d2:
         2a:43:d4:29:e8:50:70:53:17:5e:37:6b:59:78:04:a8:de:32:
         1c:2d:92:a0:15:8a:52:d9:e8:bb:67:28:b0:d0:b0:af:b7:5c:
         86:ac:5c:b8:5d:06:66:a8:4d:42:39:98:36:78:e4:ba:15:cf:
         93:87:e1:5c:a3:01:38:57:47:ba:23:af:ad:a1:02:c9:a0:fb:
         d4:d3:d4:f6:ae:f9:3e:3f:58:9b:f4:78:8d:4a:88:51:a8:50:
         da:61:a7:b9:52:54:1d:61:89:61:3e:dd:44:bd:1c:58:c9:16:
         6c:ad:78:3d:c9:f8:5d:d9:d3:0a:cf:c8:57:76:20:bc:f3:57:
         7d:cb:3a:9e:e1:c4:d4:c0:48:36:3f:4f:51:5d:44:fe:a0:62:
         13:c8:be:dc:d7:9a:9f:24:ae:40:04:ad:88:44:30:ad:d8:9a:
         d3:0a:54:da:af:05:24:19:2c:f6:70:48:4a:50:f3:a4:24:73:
         7d:d7:4d:88:c4:7c:a9:f1:be:6d:f1:54:ec:f4:ef:b0:01:7d:
         30:cb:88:19
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeBqwVaZ6q31Bui/UYrJEWQ1hKnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBNjI4NjNCNUVCREY2QzI3QjU2NzQxQzNCOEIyNjI0
RTM3OTExOTAeFw0yNTAyMTYwNjM1MDVaFw0yNjAyMTUwNjQwMDVaMDMxMTAvBgNV
BAMTKDU3N0MwNkNCREEzM0MxRTE5NjIwNDdFNDM1MDI5Qzc3N0E4Nzk1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsC5tdwVWF0z4j0ldZu0S1BE5K
wqOvWGJ8XOeIXYoJ6TmMrd3dDbKlVKxJJpOFSQQ6ndsfGhm6oXiqEfFQv9wrcKOT
PLLbIW/f8WmA90mErskgDiJ2rD1vRcz8+7soEMtD+SVFPCHpRlJdZzCaMpVZbXKU
xRHBwcGTtwBpsWLTdW98YfA3u23lwEXIKOz4Vx4KW8Fsh8MqejCZVY2Wqqp9Cn9I
SYft4m6uIGW6b6ECYWkhie8cxyQ4GnVrBfh2kGPKsIRWCW0UPHk8vfx1fdp6N0gs
CJvHJAEVrXOGDhsTtgkbljgK8DLo1etdJskhcPJLEMTh4YUSIyxo/GuMHS79AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUV3wGy9ozweGWIEfkNQKcd3qHlaEwHwYDVR0j
BBgwFoAUVKYoY7Xr32wntWdBw7iyYk43kRkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjBEODY0OTA0NjBCN0Q2MzEzMzhGNzA5MUU2NjBCMzM3
RjlDRDExMkYyNUJEOTBFMEYzMUVFREEyMjgzNURCLzAvNTRBNjI4NjNCNUVCREY2
QzI3QjU2NzQxQzNCOEIyNjI0RTM3OTExOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEE2Mjg2M0I1RUJERjZDMjdC
NTY3NDFDM0I4QjI2MjRFMzc5MTE5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTYwRDg2NDkwNDYwQjdENjMxMzM4RjcwOTFFNjYwQjMzN0Y5Q0QxMTJG
MjVCRDkwRTBGMzFFRURBMjI4MzVEQi8wLzMyMzAzMDJlMzUzNzJlMzEzNDMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTMzMzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg5jDAN
BgkqhkiG9w0BAQsFAAOCAQEAEpiRoquwdAKkJMX3drvtJbdBXgC4C2a/rRRro1Jg
vCytD3qYEjOehJniVg80+kss6C/4Ea7SKkPUKehQcFMXXjdrWXgEqN4yHC2SoBWK
Utnou2cosNCwr7dchqxcuF0GZqhNQjmYNnjkuhXPk4fhXKMBOFdHuiOvraECyaD7
1NPU9q75Pj9Ym/R4jUqIUahQ2mGnuVJUHWGJYT7dRL0cWMkWbK14Pcn4XdnTCs/I
V3YgvPNXfcs6nuHE1MBINj9PUV1E/qBiE8i+3NeanySuQAStiEQwrdia0wpU2q8F
JBks9nBISlDzpCRzfddNiMR8qfG+bfFU7PTvsAF9MMuIGQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:14:01 2025 by rpki-client