Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/3230302e302e3230342e302f32322d3232203d3e203237373530.roa
File:                     3230302e302e3230342e302f32322d3232203d3e203237373530.roa (raw, json)
Hash identifier:          QQR9yYPitnp6GyfxDY5BUdgRvEZxs/gp6ebBfYc/nik=
Subject key identifier:   8A:4F:94:43:32:F5:96:76:B7:E3:AC:8C:D3:86:EC:F3:0C:AA:95:FA
Certificate issuer:       /CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
Certificate serial:       3446328C1A3EF6484605F4F412A98F4262676B1B
Authority key identifier: A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/3230302e302e3230342e302f32322d3232203d3e203237373530.roa
Signing time:             Tue 04 Feb 2025 18:36:47 +0000
ROA not before:           Tue 04 Feb 2025 18:31:47 +0000
ROA not after:            Tue 03 Feb 2026 18:36:47 +0000
asID:                     27750
IP address blocks:        200.0.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:46:32:8c:1a:3e:f6:48:46:05:f4:f4:12:a9:8f:42:62:67:6b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
        Validity
            Not Before: Feb  4 18:31:47 2025 GMT
            Not After : Feb  3 18:36:47 2026 GMT
        Subject: CN=8A4F944332F59676B7E3AC8CD386ECF30CAA95FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d0:96:c9:e1:ed:d7:49:fa:2b:4f:5b:3e:c9:
                    2e:28:48:e3:f2:54:28:6a:2a:60:7f:42:20:b3:1b:
                    fd:7a:37:4a:99:7b:91:0a:27:f4:11:39:53:bd:90:
                    67:78:34:fd:71:31:51:ea:5a:ef:c5:09:79:01:aa:
                    5d:e2:fe:f0:e9:fa:cb:ec:d7:1c:ff:48:39:ec:b2:
                    a8:72:f3:6e:68:62:44:8c:21:78:26:8f:11:8d:1b:
                    32:20:dd:5b:f5:36:75:a2:86:ac:79:01:40:fb:17:
                    f7:da:45:6f:db:3a:e7:9c:20:60:e9:56:3f:de:e7:
                    7c:ea:9a:53:c8:65:c3:e6:16:b8:67:f8:54:b1:6a:
                    cd:9a:8d:b9:e9:e8:16:3a:58:3e:03:06:8e:af:60:
                    aa:70:c0:b6:bd:b6:97:7b:52:66:6f:c9:82:cb:e8:
                    c8:4a:e2:fb:b6:01:27:3f:ed:14:c1:85:28:b0:23:
                    cd:1b:6c:ca:72:ea:a0:1a:47:f7:7b:a8:c6:2b:69:
                    f4:3e:0c:98:e6:bd:95:56:69:5d:63:06:c1:e0:d1:
                    a4:d1:2b:c2:e1:ef:be:e9:a4:45:7a:67:b3:23:27:
                    65:54:d1:a8:69:5b:75:83:02:f0:56:e4:cc:c2:5f:
                    b3:25:46:15:34:20:4f:81:77:36:97:09:4c:4c:41:
                    36:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4F:94:43:32:F5:96:76:B7:E3:AC:8C:D3:86:EC:F3:0C:AA:95:FA
            X509v3 Authority Key Identifier:
                keyid:A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/3230302e302e3230342e302f32322d3232203d3e203237373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:27:b0:40:27:1a:19:59:72:1f:87:fb:22:1b:01:53:f8:fb:
         1b:93:1a:76:bb:3d:16:11:cb:c6:99:ef:f0:5c:8c:93:a2:46:
         1b:c8:99:46:d7:a9:d7:9c:c1:48:ee:e5:80:c1:5b:ac:a7:b7:
         60:14:61:1b:4a:c9:e9:fd:ff:ed:14:ca:e5:c9:43:c3:dc:e4:
         79:c1:62:80:38:4e:e8:62:89:e2:4f:99:53:aa:c8:4b:38:5d:
         e4:f3:e4:2f:be:5b:c0:c9:fa:60:8f:1f:fc:4e:38:21:5f:ff:
         88:e9:e3:ac:b8:48:b6:63:8e:a0:67:53:c6:31:0c:42:bd:43:
         ab:64:23:54:ca:12:18:a2:c1:33:43:6a:f7:52:83:63:98:cc:
         f6:e8:f3:aa:e2:7d:82:26:5c:d1:94:17:ed:62:c1:5d:2c:7b:
         51:e5:dc:d1:ad:96:9f:55:1a:cb:4b:a1:46:f0:85:82:42:6a:
         8b:6e:86:70:88:62:f7:e7:dd:9b:c5:e4:82:3c:e0:4e:8e:e6:
         7b:04:36:75:d0:47:ea:23:c3:c8:45:29:c3:22:06:20:e5:c9:
         a5:9f:7c:4e:3b:8b:df:2c:ce:df:90:4c:bd:a6:32:76:f0:6c:
         5c:17:f8:b3:fe:2a:19:2a:2a:a8:2b:9b:29:ee:cd:d7:1e:53:
         d0:e7:a9:56
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNEYyjBo+9khGBfT0EqmPQmJnaxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkyQTk5QTVFNjNEMURFNUFGNEU2MTIxOUM3MzFENzkz
M0RDQzM5NDAeFw0yNTAyMDQxODMxNDdaFw0yNjAyMDMxODM2NDdaMDMxMTAvBgNV
BAMTKDhBNEY5NDQzMzJGNTk2NzZCN0UzQUM4Q0QzODZFQ0YzMENBQTk1RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj0JbJ4e3XSforT1s+yS4oSOPy
VChqKmB/QiCzG/16N0qZe5EKJ/QROVO9kGd4NP1xMVHqWu/FCXkBql3i/vDp+svs
1xz/SDnssqhy825oYkSMIXgmjxGNGzIg3Vv1NnWihqx5AUD7F/faRW/bOuecIGDp
Vj/e53zqmlPIZcPmFrhn+FSxas2ajbnp6BY6WD4DBo6vYKpwwLa9tpd7UmZvyYLL
6MhK4vu2ASc/7RTBhSiwI80bbMpy6qAaR/d7qMYrafQ+DJjmvZVWaV1jBsHg0aTR
K8Lh777ppEV6Z7MjJ2VU0ahpW3WDAvBW5MzCX7MlRhU0IE+BdzaXCUxMQTbdAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUik+UQzL1lna346yM04bs8wyqlfowHwYDVR0j
BBgwFoAUqSqZpeY9HeWvTmEhnHMdeTPcw5QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTJFMEFDNzM0OUZBRkRFNzU3OUUwQzJBMTI4OTkzMTgw
OEVBOEJCQTk4NTBGQjg4NkIxRkE3N0Y5MUNFNjkzLzAvQTkyQTk5QTVFNjNEMURF
NUFGNEU2MTIxOUM3MzFENzkzM0RDQzM5NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOTJBOTlBNUU2M0QxREU1QUY0
RTYxMjE5QzczMUQ3OTMzRENDMzk0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkUyRTBBQzczNDlGQUZERTc1NzlFMEMyQTEyODk5MzE4MDhFQThCQkE5
ODUwRkI4ODZCMUZBNzdGOTFDRTY5My8wLzMyMzAzMDJlMzAyZTMyMzAzNDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzczNzM1MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIAMwwDQYJ
KoZIhvcNAQELBQADggEBAJgnsEAnGhlZch+H+yIbAVP4+xuTGna7PRYRy8aZ7/Bc
jJOiRhvImUbXqdecwUju5YDBW6ynt2AUYRtKyen9/+0UyuXJQ8Pc5HnBYoA4Tuhi
ieJPmVOqyEs4XeTz5C++W8DJ+mCPH/xOOCFf/4jp46y4SLZjjqBnU8YxDEK9Q6tk
I1TKEhiiwTNDavdSg2OYzPbo86rifYImXNGUF+1iwV0se1Hl3NGtlp9VGstLoUbw
hYJCaotuhnCIYvfn3ZvF5II84E6O5nsENnXQR+ojw8hFKcMiBiDlyaWffE47i98s
zt+QTL2mMnbwbFwX+LP+KhkqKqgrmynuzdceU9DnqVY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:09 2025 by rpki-client