Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa
File:                     3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa (raw, json)
Hash identifier:          lEua8GJfzTeL7+gQflgP2IWdLAwsUC6edxWk25GBWq8=
Subject key identifier:   ED:F4:B5:7B:35:E9:30:20:3D:3F:24:5B:44:5A:8A:38:0F:D1:F4:26
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       08F24A1734C2B3D19003C4A5837BA8A78F8EBEFE
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa
Signing time:             Tue 04 Feb 2025 18:20:31 +0000
ROA not before:           Tue 04 Feb 2025 18:15:31 +0000
ROA not after:            Tue 03 Feb 2026 18:20:31 +0000
asID:                     28058
IP address blocks:        200.105.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f2:4a:17:34:c2:b3:d1:90:03:c4:a5:83:7b:a8:a7:8f:8e:be:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Feb  4 18:15:31 2025 GMT
            Not After : Feb  3 18:20:31 2026 GMT
        Subject: CN=EDF4B57B35E930203D3F245B445A8A380FD1F426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:59:4c:1d:ea:01:71:f6:34:46:ea:62:85:
                    80:94:6d:9a:26:4f:4e:00:65:4e:93:c8:78:d7:73:
                    3c:61:08:1b:8b:96:99:24:4e:bf:9b:43:19:0d:96:
                    66:66:98:65:d1:34:0b:77:55:f6:4d:44:65:8c:7a:
                    53:ac:8f:62:1f:8c:a6:bd:2a:d4:6b:a5:a1:63:17:
                    33:ac:63:3c:4e:27:f4:1d:1f:33:99:f9:df:76:43:
                    05:4f:84:87:1e:b3:39:1d:f9:0f:45:eb:3f:09:f4:
                    52:25:39:05:3e:7d:9f:70:ef:2a:c6:d9:69:7a:f9:
                    c9:74:4d:0c:34:94:f9:e7:e4:1e:99:72:82:84:b3:
                    bf:d0:a9:a3:d2:2b:74:77:58:8d:90:c2:01:78:e5:
                    a8:ec:36:11:99:7c:2c:66:b7:9f:6d:d7:58:48:48:
                    18:24:a9:90:83:b1:8a:a4:58:ec:eb:cf:95:7b:bb:
                    97:d2:90:d9:6e:51:5d:85:98:0f:a3:f9:91:df:ed:
                    14:39:fa:34:2d:8c:1e:98:f3:74:ac:e8:4d:25:ee:
                    0e:13:ce:c3:c3:96:7c:e2:c3:e6:67:22:09:a0:9f:
                    a1:a1:93:c6:06:77:24:ae:a9:fc:28:3d:58:6a:a3:
                    bc:ab:ba:66:92:4f:0a:3f:fe:85:24:f2:5c:be:3d:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F4:B5:7B:35:E9:30:20:3D:3F:24:5B:44:5A:8A:38:0F:D1:F4:26
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.105.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:77:18:64:34:04:ea:31:da:51:51:1b:54:92:f0:a0:3a:9e:
         65:0d:ec:d1:55:5b:7c:95:41:d9:1e:2d:b2:46:29:70:43:33:
         56:2a:95:93:b4:be:a1:29:73:f7:a7:e1:1c:95:0e:4b:29:f8:
         6d:65:51:e0:f6:19:9f:5d:4f:d5:8b:4e:bb:71:60:d7:e3:62:
         52:d4:51:81:ba:ff:d6:f5:ac:1d:bf:1f:23:c5:7b:cc:03:0f:
         6f:f4:51:3c:54:73:c7:a3:80:eb:ca:6c:10:b0:a0:b3:37:c8:
         4e:26:74:7b:f5:90:41:7a:c9:12:4e:2e:da:21:01:2b:3a:15:
         aa:40:5e:07:62:9b:4a:01:65:2d:f2:d4:33:1e:17:80:41:16:
         4f:98:ce:3b:03:bb:14:b7:5c:e2:53:69:6b:dd:e0:78:8d:00:
         40:ad:9e:0a:94:16:41:ca:df:11:f9:28:43:43:d6:36:35:cf:
         72:67:56:f3:ec:5c:b9:e2:7d:3b:9e:3d:6a:29:21:71:63:34:
         19:29:fd:c6:64:b5:77:d0:2a:6e:7d:1d:86:29:43:ab:8e:76:
         00:b8:53:8c:51:a7:19:a0:11:c4:a9:f0:bc:87:10:34:89:7d:
         2f:45:6f:58:ef:07:a1:cf:a4:34:a1:aa:a2:d0:c1:ef:6d:cf:
         ba:77:cc:8e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCPJKFzTCs9GQA8Slg3uop4+Ovv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgwNjhERjdCRThCN0I1MDI3QjJGQ0ExOTI3QURCNEM5
RTY1RDNDRjAeFw0yNTAyMDQxODE1MzFaFw0yNjAyMDMxODIwMzFaMDMxMTAvBgNV
BAMTKEVERjRCNTdCMzVFOTMwMjAzRDNGMjQ1QjQ0NUE4QTM4MEZEMUY0MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFL1lMHeoBcfY0RupihYCUbZom
T04AZU6TyHjXczxhCBuLlpkkTr+bQxkNlmZmmGXRNAt3VfZNRGWMelOsj2IfjKa9
KtRrpaFjFzOsYzxOJ/QdHzOZ+d92QwVPhIceszkd+Q9F6z8J9FIlOQU+fZ9w7yrG
2Wl6+cl0TQw0lPnn5B6ZcoKEs7/QqaPSK3R3WI2QwgF45ajsNhGZfCxmt59t11hI
SBgkqZCDsYqkWOzrz5V7u5fSkNluUV2FmA+j+ZHf7RQ5+jQtjB6Y83Ss6E0l7g4T
zsPDlnziw+ZnIgmgn6Ghk8YGdySuqfwoPVhqo7yrumaSTwo//oUk8ly+PTx3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7fS1ezXpMCA9PyRbRFqKOA/R9CYwHwYDVR0j
BBgwFoAUCAaN976Le1AnsvyhknrbTJ5l088wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOERFQkEzQUVGMzZBNjVDQTY2QkNFMDEyNTI0NzY2OTY0
MTJFNzZFMUQ5RjA0NEZGNjI2QTk5NDk2MUNBRjJFLzAvMDgwNjhERjdCRThCN0I1
MDI3QjJGQ0ExOTI3QURCNEM5RTY1RDNDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wODA2OERGN0JFOEI3QjUwMjdC
MkZDQTE5MjdBREI0QzlFNjVEM0NGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQThERUJBM0FFRjM2QTY1Q0E2NkJDRTAxMjUyNDc2Njk2NDEyRTc2RTFE
OUYwNDRGRjYyNkE5OTQ5NjFDQUYyRS8wLzMyMzAzMDJlMzEzMDM1MmUzMTMxMzIy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzAzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyGlw
MA0GCSqGSIb3DQEBCwUAA4IBAQCqdxhkNATqMdpRURtUkvCgOp5lDezRVVt8lUHZ
Hi2yRilwQzNWKpWTtL6hKXP3p+EclQ5LKfhtZVHg9hmfXU/Vi067cWDX42JS1FGB
uv/W9awdvx8jxXvMAw9v9FE8VHPHo4DrymwQsKCzN8hOJnR79ZBBeskSTi7aIQEr
OhWqQF4HYptKAWUt8tQzHheAQRZPmM47A7sUt1ziU2lr3eB4jQBArZ4KlBZByt8R
+ShDQ9Y2Nc9yZ1bz7Fy54n07nj1qKSFxYzQZKf3GZLV30CpufR2GKUOrjnYAuFOM
UacZoBHEqfC8hxA0iX0vRW9Y7wehz6Q0oaqi0MHvbc+6d8yO
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:32 2025 by rpki-client