Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e36382e302f32342d3234203d3e203634313234.roa
File:                     3230302e32352e36382e302f32342d3234203d3e203634313234.roa (raw, json)
Hash identifier:          dRhXZ7jl9X1XJii0m/4uPys/YcGSbFFJykNdhI6zNTY=
Subject key identifier:   7C:93:AD:A9:79:BD:22:5C:76:A4:9F:D5:FE:A6:66:0B:62:98:2A:D2
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       421F8AC34383ED99C41A9908AB2AD713C8A98BE6
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e36382e302f32342d3234203d3e203634313234.roa
Signing time:             Tue 04 Feb 2025 18:30:25 +0000
ROA not before:           Tue 04 Feb 2025 18:25:25 +0000
ROA not after:            Tue 03 Feb 2026 18:30:25 +0000
asID:                     64124
IP address blocks:        200.25.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1f:8a:c3:43:83:ed:99:c4:1a:99:08:ab:2a:d7:13:c8:a9:8b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Feb  4 18:25:25 2025 GMT
            Not After : Feb  3 18:30:25 2026 GMT
        Subject: CN=7C93ADA979BD225C76A49FD5FEA6660B62982AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:e6:90:8a:da:70:ed:43:2c:56:31:5a:54:
                    49:90:a4:e9:d8:de:e4:5b:58:91:62:55:e3:a1:78:
                    76:cb:3e:be:90:f6:db:c0:11:ed:38:58:d7:cf:42:
                    bf:aa:d8:b9:70:aa:6a:ec:51:fb:ca:f0:1f:5f:24:
                    64:ef:43:f5:c5:62:e3:9a:b7:22:2a:cf:f2:35:fd:
                    ee:1c:cb:8b:db:64:ad:7e:06:10:7e:22:a9:44:a7:
                    a5:1b:60:3d:bb:a8:e1:7b:5f:35:3e:54:43:33:f1:
                    bf:c3:08:9e:3f:61:91:a6:f0:8a:61:34:0e:30:89:
                    16:e0:04:9a:24:1c:cf:55:17:59:a2:7a:3d:49:80:
                    08:d4:99:f5:a8:5e:5a:15:de:37:1e:54:6c:c7:ba:
                    3b:12:0b:03:4d:e4:67:d6:5e:7b:92:84:f3:d9:3b:
                    c9:c0:15:6a:90:0b:ba:bf:ac:25:68:0e:22:5a:60:
                    00:13:ba:bb:80:7a:47:8e:3c:e3:e0:98:f0:67:13:
                    91:ab:e9:4c:0d:1e:55:79:4e:85:34:3b:7e:83:06:
                    1c:28:cf:54:98:dd:59:66:52:d2:eb:60:35:20:c7:
                    22:87:11:4c:1a:d0:95:43:74:60:92:b4:a1:68:51:
                    60:89:b2:99:20:54:fb:f6:f5:f7:73:f3:b3:01:ce:
                    34:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:93:AD:A9:79:BD:22:5C:76:A4:9F:D5:FE:A6:66:0B:62:98:2A:D2
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e36382e302f32342d3234203d3e203634313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:26:c9:b5:81:42:a6:90:31:7e:f7:f6:d3:01:5f:11:4b:2a:
         89:5a:34:fe:c2:14:8c:41:2a:90:f8:5b:c3:38:22:46:66:ae:
         46:34:de:e2:f7:62:22:d6:0d:64:70:fa:b4:17:df:5b:38:db:
         7f:c9:81:d8:14:02:b9:8f:4d:88:f9:72:c0:99:0c:75:24:38:
         4a:b8:48:f3:a0:0f:8b:7b:e0:08:82:ef:f4:0e:84:a6:ac:e0:
         01:46:24:37:94:97:91:3d:b3:d8:fc:60:a0:75:22:4d:3d:a6:
         27:c5:df:00:58:1e:89:90:26:98:1e:dc:b7:b0:78:7f:82:2f:
         5b:9f:08:07:35:83:88:5c:75:2e:92:7c:e5:f9:71:fc:cc:c0:
         0e:b8:f4:d4:59:ee:5e:25:22:bf:33:4f:0e:55:4b:37:b6:d2:
         4d:ce:d3:4a:54:a9:df:02:d5:c5:34:09:17:66:c6:bc:a6:05:
         be:55:ae:0a:15:18:b6:ba:83:1a:e9:86:0e:18:93:09:d4:19:
         b1:c7:99:62:51:f2:8b:ad:2c:28:fb:aa:6d:4c:e3:08:2d:be:
         af:62:b0:e9:11:71:a0:89:fd:ac:bd:30:29:2e:2a:68:5e:e5:
         9a:be:8c:6e:2c:10:ff:f6:48:8b:55:d3:f6:c9:99:bd:09:93:
         9f:59:5e:b6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQh+Kw0OD7ZnEGpkIqyrXE8ipi+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCRTg1MzUxNkE2RDM1OTBGMkM5RUQ0QjZCOTQ2OTZD
NDE1Rjg4RjAeFw0yNTAyMDQxODI1MjVaFw0yNjAyMDMxODMwMjVaMDMxMTAvBgNV
BAMTKDdDOTNBREE5NzlCRDIyNUM3NkE0OUZENUZFQTY2NjBCNjI5ODJBRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VeaQitpw7UMsVjFaVEmQpOnY
3uRbWJFiVeOheHbLPr6Q9tvAEe04WNfPQr+q2LlwqmrsUfvK8B9fJGTvQ/XFYuOa
tyIqz/I1/e4cy4vbZK1+BhB+IqlEp6UbYD27qOF7XzU+VEMz8b/DCJ4/YZGm8Iph
NA4wiRbgBJokHM9VF1miej1JgAjUmfWoXloV3jceVGzHujsSCwNN5GfWXnuShPPZ
O8nAFWqQC7q/rCVoDiJaYAATuruAekeOPOPgmPBnE5Gr6UwNHlV5ToU0O36DBhwo
z1SY3VlmUtLrYDUgxyKHEUwa0JVDdGCStKFoUWCJspkgVPv29fdz87MBzjQhAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUfJOtqXm9Ilx2pJ/V/qZmC2KYKtIwHwYDVR0j
BBgwFoAUkr6FNRam01kPLJ7UtrlGlsQV+I8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzY4REYwMENDOTI4QTBGREVERUUxQkE1M0NCOUM0NjI2
RTVFMTA1MDc2RUVFQjZCQTI0QkUxN0EzNkIxNEYyLzAvOTJCRTg1MzUxNkE2RDM1
OTBGMkM5RUQ0QjZCOTQ2OTZDNDE1Rjg4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkJFODUzNTE2QTZEMzU5MEYy
QzlFRDRCNkI5NDY5NkM0MTVGODhGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzc2OERGMDBDQzkyOEEwRkRFREVFMUJBNTNDQjlDNDYyNkU1RTEwNTA3
NkVFRUI2QkEyNEJFMTdBMzZCMTRGMi8wLzMyMzAzMDJlMzIzNTJlMzYzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzQzMTMyMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIGUQwDQYJ
KoZIhvcNAQELBQADggEBAAYmybWBQqaQMX739tMBXxFLKolaNP7CFIxBKpD4W8M4
IkZmrkY03uL3YiLWDWRw+rQX31s423/JgdgUArmPTYj5csCZDHUkOEq4SPOgD4t7
4AiC7/QOhKas4AFGJDeUl5E9s9j8YKB1Ik09pifF3wBYHomQJpge3LeweH+CL1uf
CAc1g4hcdS6SfOX5cfzMwA649NRZ7l4lIr8zTw5VSze20k3O00pUqd8C1cU0CRdm
xrymBb5VrgoVGLa6gxrphg4YkwnUGbHHmWJR8outLCj7qm1M4wgtvq9isOkRcaCJ
/ay9MCkuKmhe5Zq+jG4sEP/2SItV0/bJmb0Jk59ZXrY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:14 2025 by rpki-client