Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e31302e3230392e302f32342d3234203d3e203237393437.roa
File:                     3230302e31302e3230392e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          vZKZPJ/E3FdkuSrw1uueVk1B3hYLfI7utsacCjE/4A8=
Subject key identifier:   F9:09:2E:15:21:0F:1E:C1:1A:D1:67:84:B3:71:38:A2:C7:44:0B:59
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       446D50E1363FF579445BDB8D461B5623A78B4DD7
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e31302e3230392e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:53:51 +0000
ROA not before:           Tue 04 Feb 2025 18:48:51 +0000
ROA not after:            Tue 03 Feb 2026 18:53:51 +0000
asID:                     27947
IP address blocks:        200.10.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6d:50:e1:36:3f:f5:79:44:5b:db:8d:46:1b:56:23:a7:8b:4d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Feb  4 18:48:51 2025 GMT
            Not After : Feb  3 18:53:51 2026 GMT
        Subject: CN=F9092E15210F1EC11AD16784B37138A2C7440B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:41:62:e6:83:cc:58:53:9e:29:3d:24:68:
                    c5:0b:c6:8a:26:d6:eb:48:92:72:a5:d9:44:1b:cd:
                    41:a5:ac:4e:0d:64:b7:e8:8b:cb:b3:52:1f:98:ee:
                    c2:d4:42:90:4b:23:ea:4d:76:76:02:59:14:c1:75:
                    33:28:3e:8c:7d:53:84:af:ca:33:df:e8:5a:ee:78:
                    51:a5:48:9c:65:09:5a:0d:61:58:9f:c1:4c:28:eb:
                    98:6f:36:7a:34:b1:62:cd:cc:7b:42:b2:e7:8e:18:
                    8a:93:7d:69:0d:83:0b:8d:2e:73:01:98:7a:ca:ee:
                    59:30:2b:e9:62:74:79:46:1c:80:99:9b:f1:09:c6:
                    9d:37:18:4b:e3:e1:eb:00:5a:be:45:25:2e:e0:cf:
                    2a:f7:6a:45:98:af:7e:c5:02:10:69:32:f1:7c:a2:
                    10:87:ab:1d:54:90:3c:87:dc:cb:60:ea:2e:1e:3b:
                    e7:9b:96:86:3e:bb:30:3b:1e:e5:66:8a:a5:e9:30:
                    df:ab:1e:b1:4c:52:30:aa:92:12:d5:48:10:8b:dc:
                    76:ae:68:3b:70:58:f2:d1:29:c3:ba:f2:d9:db:b9:
                    4e:f9:61:f0:3b:68:6b:77:0c:18:b4:3d:6c:c7:58:
                    db:ff:58:00:91:d7:e1:37:2a:c5:67:8a:ab:97:a9:
                    86:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:09:2E:15:21:0F:1E:C1:1A:D1:67:84:B3:71:38:A2:C7:44:0B:59
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e31302e3230392e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:64:ad:9d:a2:d9:a5:9b:52:f9:49:87:d3:a3:39:23:8f:05:
         80:30:4e:86:b8:5e:fc:75:79:f0:fb:e3:b1:54:e8:18:8e:01:
         af:22:ec:7e:0d:c3:75:e4:14:75:4e:2d:c8:bd:25:ad:4a:de:
         bf:c7:76:0b:89:e9:63:bf:6d:54:ba:40:42:5e:1e:af:55:d1:
         54:0b:d0:eb:38:ef:f7:b7:c0:13:a0:e0:65:df:05:1b:2c:d4:
         45:c2:d8:53:25:1b:38:57:47:fd:4b:78:15:eb:38:4a:e9:2f:
         2c:96:36:dd:74:e5:96:9d:3b:40:87:44:c9:6c:5f:ac:a5:b4:
         c2:37:c1:b8:8d:a7:59:cb:38:72:ca:dc:c9:61:84:be:28:37:
         fb:bd:78:b0:cb:9f:f3:a7:46:e4:f7:a0:b3:94:d3:e5:2d:c7:
         3f:90:8b:58:4e:42:98:dc:d6:22:24:f9:d0:00:d1:21:9e:40:
         6e:31:f0:2f:97:59:42:65:4d:bb:d8:aa:8b:ab:7d:cf:2c:09:
         6f:3b:d2:ae:86:4d:ac:e0:de:de:6d:0e:c6:9f:87:bc:78:2a:
         61:e2:d4:8b:ff:3e:27:b1:89:a3:ab:77:ff:42:00:66:d2:d4:
         6a:d0:23:fb:93:3e:d7:e6:af:d0:e8:ad:97:6a:a5:ed:dd:7c:
         b3:7e:3a:1d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURG1Q4TY/9XlEW9uNRhtWI6eLTdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNEQUZFN0M2RDA3MkFENzU4QjJFQUE3QzY1NEM1MjhD
OEREMjU2QjAeFw0yNTAyMDQxODQ4NTFaFw0yNjAyMDMxODUzNTFaMDMxMTAvBgNV
BAMTKEY5MDkyRTE1MjEwRjFFQzExQUQxNjc4NEIzNzEzOEEyQzc0NDBCNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMsUFi5oPMWFOeKT0kaMULxoom
1utIknKl2UQbzUGlrE4NZLfoi8uzUh+Y7sLUQpBLI+pNdnYCWRTBdTMoPox9U4Sv
yjPf6FrueFGlSJxlCVoNYVifwUwo65hvNno0sWLNzHtCsueOGIqTfWkNgwuNLnMB
mHrK7lkwK+lidHlGHICZm/EJxp03GEvj4esAWr5FJS7gzyr3akWYr37FAhBpMvF8
ohCHqx1UkDyH3Mtg6i4eO+ebloY+uzA7HuVmiqXpMN+rHrFMUjCqkhLVSBCL3Hau
aDtwWPLRKcO68tnbuU75YfA7aGt3DBi0PWzHWNv/WACR1+E3KsVniquXqYYDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU+QkuFSEPHsEa0WeEs3E4osdEC1kwHwYDVR0j
BBgwFoAUY9r+fG0HKtdYsuqnxlTFKMjdJWswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQTY1Nzc4RUEyQkEzRjY0NTM4MUNGQjAzQTkwOTkzNTEz
MDY3MDM5QjI0MDRGOTI3MkU4NDAxQjEzQzYyMTUxLzAvNjNEQUZFN0M2RDA3MkFE
NzU4QjJFQUE3QzY1NEM1MjhDOEREMjU2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0RBRkU3QzZEMDcyQUQ3NThC
MkVBQTdDNjU0QzUyOEM4REQyNTZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUE2NTc3OEVBMkJBM0Y2NDUzODFDRkIwM0E5MDk5MzUxMzA2NzAzOUIy
NDA0RjkyNzJFODQwMUIxM0M2MjE1MS8wLzMyMzAzMDJlMzEzMDJlMzIzMDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgK0TAN
BgkqhkiG9w0BAQsFAAOCAQEAEWStnaLZpZtS+UmH06M5I48FgDBOhrhe/HV58Pvj
sVToGI4BryLsfg3DdeQUdU4tyL0lrUrev8d2C4npY79tVLpAQl4er1XRVAvQ6zjv
97fAE6DgZd8FGyzURcLYUyUbOFdH/Ut4Fes4SukvLJY23XTllp07QIdEyWxfrKW0
wjfBuI2nWcs4csrcyWGEvig3+714sMuf86dG5Pegs5TT5S3HP5CLWE5CmNzWIiT5
0ADRIZ5AbjHwL5dZQmVNu9iqi6t9zywJbzvSroZNrODe3m0Oxp+HvHgqYeLUi/8+
J7GJo6t3/0IAZtLUatAj+5M+1+av0Oitl2ql7d18s346HQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:32 2025 by rpki-client