Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e3131342e302f32342d3234203d3e20323635383037.roa
File:                     3230302e36382e3131342e302f32342d3234203d3e20323635383037.roa (raw, json)
Hash identifier:          zOAZgIh+0RdYSf8JITfb+x2UDaan5HEreztagRq+Eik=
Subject key identifier:   79:A2:1E:C2:38:2E:8A:B6:7E:EB:D9:22:60:CC:B5:82:BA:8A:11:73
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       2BC42B5DFD712F5AD596A5D14B2B71DD2A145140
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e3131342e302f32342d3234203d3e20323635383037.roa
Signing time:             Tue 04 Feb 2025 20:04:09 +0000
ROA not before:           Tue 04 Feb 2025 19:59:09 +0000
ROA not after:            Tue 03 Feb 2026 20:04:09 +0000
asID:                     265807
IP address blocks:        200.68.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c4:2b:5d:fd:71:2f:5a:d5:96:a5:d1:4b:2b:71:dd:2a:14:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Feb  4 19:59:09 2025 GMT
            Not After : Feb  3 20:04:09 2026 GMT
        Subject: CN=79A21EC2382E8AB67EEBD92260CCB582BA8A1173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:81:5e:a7:01:be:f8:d5:af:5c:21:2d:dd:
                    af:c2:7f:90:dd:c9:85:a8:77:96:14:ad:91:a0:ba:
                    5b:a4:ed:3f:a9:7b:f4:e3:cd:f9:90:95:de:2f:33:
                    83:06:46:ec:ad:bc:a6:7f:c4:53:21:bf:2f:ea:f5:
                    c8:84:89:34:03:e7:16:6d:43:05:41:84:66:e4:b5:
                    4e:61:83:7e:f5:b9:d6:48:ea:74:cf:31:69:0f:a0:
                    86:b6:ca:cf:33:5b:91:08:38:94:0a:b3:ce:0f:4d:
                    64:c6:bf:f5:4f:7e:d3:ed:e8:b1:70:13:37:ad:c6:
                    3a:b6:ee:01:34:a0:7b:70:df:00:7e:4c:50:10:bf:
                    69:ba:1d:22:13:52:1c:b7:af:52:c2:19:ff:72:1b:
                    04:7a:d8:80:9b:08:ea:5a:b3:7d:cc:5a:dd:ce:5a:
                    6b:ee:9e:a6:f4:d7:df:e5:24:83:d6:ee:88:66:61:
                    77:da:ff:a1:35:2f:40:59:8a:0b:13:d0:48:34:89:
                    23:34:d6:80:7c:86:70:b2:af:4c:89:3c:09:9d:71:
                    6e:d4:b0:fd:d5:ca:c3:40:57:22:5e:63:1c:79:cc:
                    12:03:71:fc:88:5e:8f:98:be:31:45:bf:ab:37:6d:
                    7c:3e:b9:98:fb:02:bf:e8:2f:22:74:7a:35:7f:5e:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A2:1E:C2:38:2E:8A:B6:7E:EB:D9:22:60:CC:B5:82:BA:8A:11:73
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e3131342e302f32342d3234203d3e20323635383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c1:7a:a1:58:0b:00:1e:fa:1f:7e:44:f8:d4:9e:0e:bb:e6:
         6e:a8:e9:4b:e8:49:89:24:79:72:3d:9a:3d:7d:5e:99:16:e3:
         86:72:bb:a1:17:13:30:1a:16:3d:ec:b5:49:2d:dc:c0:da:e4:
         9c:50:10:73:42:6e:33:dc:ab:af:03:80:20:62:41:20:a1:09:
         50:2c:6a:a4:ea:87:8b:b7:79:29:35:79:de:46:2f:3b:d7:dd:
         c5:8c:f6:da:7c:2c:d4:d9:d3:0e:6f:ec:31:96:46:04:f7:b8:
         fb:6a:b8:02:84:86:7e:ce:dc:50:07:dc:97:b8:4e:9c:0c:4b:
         2b:d0:84:6a:cc:fd:da:1e:81:96:9e:cc:e8:ca:8f:76:94:0c:
         61:55:ac:27:69:e7:f0:aa:6d:d5:40:21:5f:f6:a7:05:ea:0c:
         e6:10:4d:d4:cd:ea:92:4d:7a:94:25:ac:fc:5b:99:ba:65:b2:
         a6:e1:86:b5:d5:37:04:cb:e9:dc:45:8b:91:a0:a0:e7:a7:fe:
         f2:f9:c1:bc:bb:41:13:ad:60:a6:a7:17:35:01:3a:3c:30:9a:
         33:6f:09:c5:6b:ba:0b:59:52:d0:1a:ce:38:16:b9:ec:7e:86:
         fb:0e:4e:64:63:8d:3d:a0:d5:6c:30:dc:54:f6:54:6e:51:e1:
         5b:77:7d:f8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUK8QrXf1xL1rVlqXRSytx3SoUUUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcxRjE0RDVBRUVDODlGNEFFNDEwNEMwRjYwOURFMjc3
RDFEM0NENzAeFw0yNTAyMDQxOTU5MDlaFw0yNjAyMDMyMDA0MDlaMDMxMTAvBgNV
BAMTKDc5QTIxRUMyMzgyRThBQjY3RUVCRDkyMjYwQ0NCNTgyQkE4QTExNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgy4FepwG++NWvXCEt3a/Cf5Dd
yYWod5YUrZGguluk7T+pe/TjzfmQld4vM4MGRuytvKZ/xFMhvy/q9ciEiTQD5xZt
QwVBhGbktU5hg371udZI6nTPMWkPoIa2ys8zW5EIOJQKs84PTWTGv/VPftPt6LFw
Ezetxjq27gE0oHtw3wB+TFAQv2m6HSITUhy3r1LCGf9yGwR62ICbCOpas33MWt3O
Wmvunqb019/lJIPW7ohmYXfa/6E1L0BZigsT0Eg0iSM01oB8hnCyr0yJPAmdcW7U
sP3VysNAVyJeYxx5zBIDcfyIXo+YvjFFv6s3bXw+uZj7Ar/oLyJ0ejV/Xvj1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUeaIewjguirZ+69kiYMy1grqKEXMwHwYDVR0j
BBgwFoAUFx8U1a7sifSuQQTA9gneJ30dPNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMTM4MkIxQTRDQ0FCNjZEQTYxOEIxRUY5QUI0QzYzMDg2
RUFBQTE4RTdGMEM5NUJEOTQxODAzQzQ2RjVENTY3LzAvMTcxRjE0RDVBRUVDODlG
NEFFNDEwNEMwRjYwOURFMjc3RDFEM0NENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNzFGMTRENUFFRUM4OUY0QUU0
MTA0QzBGNjA5REUyNzdEMUQzQ0Q3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzEzODJCMUE0Q0NBQjY2REE2MThCMUVGOUFCNEM2MzA4NkVBQUExOEU3
RjBDOTVCRDk0MTgwM0M0NkY1RDU2Ny8wLzMyMzAzMDJlMzYzODJlMzEzMTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyERy
MA0GCSqGSIb3DQEBCwUAA4IBAQCpwXqhWAsAHvoffkT41J4Ou+ZuqOlL6EmJJHly
PZo9fV6ZFuOGcruhFxMwGhY97LVJLdzA2uScUBBzQm4z3KuvA4AgYkEgoQlQLGqk
6oeLt3kpNXneRi87193FjPbafCzU2dMOb+wxlkYE97j7argChIZ+ztxQB9yXuE6c
DEsr0IRqzP3aHoGWnszoyo92lAxhVawnaefwqm3VQCFf9qcF6gzmEE3UzeqSTXqU
Jaz8W5m6ZbKm4Ya11TcEy+ncRYuRoKDnp/7y+cG8u0ETrWCmpxc1ATo8MJozbwnF
a7oLWVLQGs44Frnsfob7Dk5kY409oNVsMNxU9lRuUeFbd334
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:40:20 2025 by rpki-client