Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136322e36342f32362d3236203d3e203139333733.roa
File:                     3230302e35372e3136322e36342f32362d3236203d3e203139333733.roa (raw, json)
Hash identifier:          uPfXLf3hq1I4NXlgw69C1GzE+Ay2IxfsirGzAfXlxPI=
Subject key identifier:   B3:E8:A3:25:B6:70:5E:BB:1D:33:92:CB:7D:60:06:AE:70:35:47:0E
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       5800EEDF501CB1F132F1F8A2B1C3280CFE3D679D
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136322e36342f32362d3236203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:40:00 +0000
ROA not before:           Sun 16 Feb 2025 06:35:00 +0000
ROA not after:            Sun 15 Feb 2026 06:40:00 +0000
asID:                     19373
IP address blocks:        200.57.162.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:00:ee:df:50:1c:b1:f1:32:f1:f8:a2:b1:c3:28:0c:fe:3d:67:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:35:00 2025 GMT
            Not After : Feb 15 06:40:00 2026 GMT
        Subject: CN=B3E8A325B6705EBB1D3392CB7D6006AE7035470E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:69:f4:21:08:16:44:f5:1d:0b:d5:b4:79:
                    31:93:52:d0:6f:96:40:03:d4:24:25:58:0e:7c:95:
                    23:68:a2:d0:f2:2e:78:02:4c:96:2b:3e:f5:0f:78:
                    6f:9d:81:89:6d:d3:33:cc:30:17:9e:b3:af:24:ac:
                    be:1a:6a:5c:4b:a9:97:48:3f:18:8c:c5:e9:7f:30:
                    9f:32:17:ce:72:1d:d0:53:24:d2:11:33:ef:9e:fd:
                    d0:3f:b2:bc:33:e6:d7:e0:41:52:e1:77:48:e7:07:
                    91:6c:ad:f2:c6:5f:66:1d:ca:88:10:7d:d2:41:90:
                    7d:4e:f4:eb:b1:ea:95:d9:d8:06:ee:9f:14:19:2e:
                    2d:b9:86:6b:df:01:9a:e6:21:50:55:3c:66:6c:df:
                    8b:e4:6c:e9:af:69:5d:ea:a2:fd:e0:81:ed:b5:89:
                    36:c1:01:ab:38:18:49:ec:03:6c:24:66:ab:bd:5d:
                    8c:b8:41:c7:df:d2:95:23:34:05:0c:c8:5c:78:18:
                    74:63:7c:df:47:6d:cf:f1:4a:dd:32:94:4a:50:42:
                    de:16:3c:09:26:3e:70:92:44:45:34:e5:9c:79:d5:
                    15:bd:91:fe:fa:e2:a9:1f:70:98:60:72:73:ac:ca:
                    65:87:ea:91:c7:fd:20:62:8e:23:bd:35:82:3c:d5:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E8:A3:25:B6:70:5E:BB:1D:33:92:CB:7D:60:06:AE:70:35:47:0E
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136322e36342f32362d3236203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.162.64/26

    Signature Algorithm: sha256WithRSAEncryption
         72:66:27:9f:2c:8f:ac:1c:02:73:c3:59:1d:12:a7:67:b8:6c:
         d9:5e:01:36:bf:ef:7e:5a:33:7d:f4:77:01:e3:e9:1e:bc:e1:
         6b:0b:69:d7:df:43:8e:26:46:c6:a0:67:c9:eb:61:09:44:0e:
         66:44:94:66:ff:fc:cc:90:8d:65:ea:7f:74:4e:b0:e6:49:b1:
         e1:42:fb:f6:a1:88:37:21:80:2b:b6:bb:88:ca:a3:97:a7:15:
         36:3e:74:3e:0c:b6:55:74:60:ef:4b:cc:19:90:cc:92:ae:64:
         fb:3f:da:97:ef:54:d8:74:92:7b:17:77:ce:16:dd:76:17:f9:
         61:f0:2d:12:c2:2d:af:ac:9d:5c:b9:49:f0:97:6d:90:83:36:
         e2:4b:38:4c:76:5b:27:4a:e5:ba:8f:df:e0:6c:fc:4c:8f:38:
         fd:68:5d:96:b6:1c:2a:aa:e3:f0:88:92:ac:39:f5:c0:9f:ac:
         ab:72:9d:d1:47:a6:56:8f:b7:c2:0d:7c:9b:80:7b:a6:71:c0:
         3d:c6:1f:12:30:40:9d:44:15:66:15:ae:3f:e3:8b:9b:aa:89:
         35:51:7a:4b:12:97:56:f5:7b:07:04:e5:2e:f8:f8:ee:c2:5d:
         60:27:9f:b3:e3:36:de:86:82:81:7a:6e:71:83:e0:54:ac:90:
         14:14:68:42
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUWADu31AcsfEy8fiiscMoDP49Z50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBNjI4NjNCNUVCREY2QzI3QjU2NzQxQzNCOEIyNjI0
RTM3OTExOTAeFw0yNTAyMTYwNjM1MDBaFw0yNjAyMTUwNjQwMDBaMDMxMTAvBgNV
BAMTKEIzRThBMzI1QjY3MDVFQkIxRDMzOTJDQjdENjAwNkFFNzAzNTQ3MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWj2n0IQgWRPUdC9W0eTGTUtBv
lkAD1CQlWA58lSNootDyLngCTJYrPvUPeG+dgYlt0zPMMBees68krL4aalxLqZdI
PxiMxel/MJ8yF85yHdBTJNIRM++e/dA/srwz5tfgQVLhd0jnB5FsrfLGX2YdyogQ
fdJBkH1O9Oux6pXZ2AbunxQZLi25hmvfAZrmIVBVPGZs34vkbOmvaV3qov3gge21
iTbBAas4GEnsA2wkZqu9XYy4Qcff0pUjNAUMyFx4GHRjfN9Hbc/xSt0ylEpQQt4W
PAkmPnCSREU05Zx51RW9kf764qkfcJhgcnOsymWH6pHH/SBijiO9NYI81QCVAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUs+ijJbZwXrsdM5LLfWAGrnA1Rw4wHwYDVR0j
BBgwFoAUVKYoY7Xr32wntWdBw7iyYk43kRkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjBEODY0OTA0NjBCN0Q2MzEzMzhGNzA5MUU2NjBCMzM3
RjlDRDExMkYyNUJEOTBFMEYzMUVFREEyMjgzNURCLzAvNTRBNjI4NjNCNUVCREY2
QzI3QjU2NzQxQzNCOEIyNjI0RTM3OTExOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEE2Mjg2M0I1RUJERjZDMjdC
NTY3NDFDM0I4QjI2MjRFMzc5MTE5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTYwRDg2NDkwNDYwQjdENjMxMzM4RjcwOTFFNjYwQjMzN0Y5Q0QxMTJG
MjVCRDkwRTBGMzFFRURBMjI4MzVEQi8wLzMyMzAzMDJlMzUzNzJlMzEzNjMyMmUz
NjM0MmYzMjM2MmQzMjM2MjAzZDNlMjAzMTM5MzMzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGyDmi
QDANBgkqhkiG9w0BAQsFAAOCAQEAcmYnnyyPrBwCc8NZHRKnZ7hs2V4BNr/vfloz
ffR3AePpHrzhawtp199DjiZGxqBnyethCUQOZkSUZv/8zJCNZep/dE6w5kmx4UL7
9qGINyGAK7a7iMqjl6cVNj50Pgy2VXRg70vMGZDMkq5k+z/al+9U2HSSexd3zhbd
dhf5YfAtEsItr6ydXLlJ8JdtkIM24ks4THZbJ0rluo/f4Gz8TI84/WhdlrYcKqrj
8IiSrDn1wJ+sq3Kd0UemVo+3wg18m4B7pnHAPcYfEjBAnUQVZhWuP+OLm6qJNVF6
SxKXVvV7BwTlLvj47sJdYCefs+M23oaCgXpucYPgVKyQFBRoQg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:11:24 2025 by rpki-client