Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e38302e302f32342d3234203d3e203634313234.roa
File:                     3230302e32352e38302e302f32342d3234203d3e203634313234.roa (raw, json)
Hash identifier:          Dp9Spc4u6VKngui1soe/oe4vOjRkCa/5iV3jNIfPZOA=
Subject key identifier:   12:13:27:7C:6A:07:7A:F2:85:51:B8:F8:7B:59:20:F8:36:48:53:B6
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       48C686D344FE5F2401B8F5AFE41B2404E82A84D7
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e38302e302f32342d3234203d3e203634313234.roa
Signing time:             Tue 04 Feb 2025 18:30:25 +0000
ROA not before:           Tue 04 Feb 2025 18:25:25 +0000
ROA not after:            Tue 03 Feb 2026 18:30:25 +0000
asID:                     64124
IP address blocks:        200.25.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c6:86:d3:44:fe:5f:24:01:b8:f5:af:e4:1b:24:04:e8:2a:84:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Feb  4 18:25:25 2025 GMT
            Not After : Feb  3 18:30:25 2026 GMT
        Subject: CN=1213277C6A077AF28551B8F87B5920F8364853B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2e:57:a1:db:e0:e3:09:c7:7f:75:c4:9e:9b:
                    e5:04:6e:2a:e6:ad:69:b8:34:60:35:22:8b:ad:d8:
                    6d:b5:01:08:87:eb:de:ae:17:24:51:63:1b:da:d3:
                    fd:ac:72:cc:dc:59:88:68:f6:6d:83:9c:0a:ce:3b:
                    0e:4c:19:a9:80:5a:b9:8a:2e:4a:5a:43:88:0a:37:
                    06:14:cb:8a:d0:e1:c2:74:3c:21:ae:4a:a4:96:57:
                    9e:e7:8c:06:a3:a2:93:5d:80:8f:73:ef:78:6b:88:
                    cc:60:ca:a9:f4:0d:d6:6a:09:de:82:ae:07:a0:23:
                    82:6f:98:84:34:ca:92:a5:c1:66:b5:45:32:68:e7:
                    c6:29:46:2e:b6:f1:b3:bf:0a:dd:52:56:41:10:9e:
                    cc:ad:f7:07:b1:ad:11:0f:c3:59:4c:7f:e1:b9:9c:
                    1c:ca:17:02:51:4b:13:2a:a3:36:d6:d3:ad:b8:92:
                    e9:9b:3a:57:6c:57:c9:8c:72:42:36:0f:38:ba:26:
                    bf:39:89:14:03:c9:85:6f:7e:35:7c:31:f3:3c:9a:
                    69:15:c9:9b:f7:3f:6e:0a:b5:3b:16:07:2c:33:50:
                    a0:c4:05:45:3b:11:57:2a:57:eb:f3:79:4f:50:be:
                    1a:dd:78:e5:8c:94:16:6b:b6:f6:09:8d:3c:1f:01:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:13:27:7C:6A:07:7A:F2:85:51:B8:F8:7B:59:20:F8:36:48:53:B6
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e38302e302f32342d3234203d3e203634313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:ab:46:45:39:77:b2:1d:22:12:4a:cd:d3:ea:80:b2:64:ec:
         f0:52:65:b6:19:5f:f2:92:0b:c0:3b:4e:04:64:24:c8:d2:15:
         39:02:a1:31:8b:bb:90:d2:30:af:9d:3e:a3:29:ef:a6:f5:9a:
         8e:53:ea:14:30:4f:8f:8d:db:44:db:62:64:ab:f1:93:b6:c7:
         5f:e1:80:98:07:d6:42:7a:4f:3f:cc:87:24:99:8e:56:5a:e8:
         39:03:4e:51:89:e6:3c:ed:72:21:27:7d:2a:cf:75:95:f5:60:
         11:e1:c1:7f:4b:bc:71:16:7f:53:f6:db:6a:24:1a:66:50:8c:
         ab:22:1c:de:91:89:8c:3d:11:70:2f:1e:9a:ae:f2:a6:80:f0:
         aa:08:e1:e2:7f:ea:79:77:af:bf:e4:10:70:f3:60:55:43:1c:
         c1:56:64:26:e7:cb:05:d8:47:88:23:63:c1:0b:94:dc:53:88:
         67:50:da:ae:5d:91:8e:3a:8c:c7:90:63:9c:5d:58:cd:d4:2c:
         a2:1f:8e:76:e3:e4:f9:a3:e1:18:16:32:ea:49:3f:4c:37:5a:
         e1:a7:be:3d:a1:91:1b:d8:d8:1c:ef:44:90:51:98:12:72:c4:
         05:57:2c:19:cf:39:e6:ce:ae:1d:dd:ca:a5:8b:b5:60:35:b7:
         11:78:47:5e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSMaG00T+XyQBuPWv5BskBOgqhNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCRTg1MzUxNkE2RDM1OTBGMkM5RUQ0QjZCOTQ2OTZD
NDE1Rjg4RjAeFw0yNTAyMDQxODI1MjVaFw0yNjAyMDMxODMwMjVaMDMxMTAvBgNV
BAMTKDEyMTMyNzdDNkEwNzdBRjI4NTUxQjhGODdCNTkyMEY4MzY0ODUzQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTLleh2+DjCcd/dcSem+UEbirm
rWm4NGA1Iout2G21AQiH696uFyRRYxva0/2scszcWYho9m2DnArOOw5MGamAWrmK
LkpaQ4gKNwYUy4rQ4cJ0PCGuSqSWV57njAajopNdgI9z73hriMxgyqn0DdZqCd6C
rgegI4JvmIQ0ypKlwWa1RTJo58YpRi628bO/Ct1SVkEQnsyt9wexrREPw1lMf+G5
nBzKFwJRSxMqozbW0624kumbOldsV8mMckI2Dzi6Jr85iRQDyYVvfjV8MfM8mmkV
yZv3P24KtTsWBywzUKDEBUU7EVcqV+vzeU9QvhrdeOWMlBZrtvYJjTwfAfUjAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUEhMnfGoHevKFUbj4e1kg+DZIU7YwHwYDVR0j
BBgwFoAUkr6FNRam01kPLJ7UtrlGlsQV+I8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzY4REYwMENDOTI4QTBGREVERUUxQkE1M0NCOUM0NjI2
RTVFMTA1MDc2RUVFQjZCQTI0QkUxN0EzNkIxNEYyLzAvOTJCRTg1MzUxNkE2RDM1
OTBGMkM5RUQ0QjZCOTQ2OTZDNDE1Rjg4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkJFODUzNTE2QTZEMzU5MEYy
QzlFRDRCNkI5NDY5NkM0MTVGODhGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzc2OERGMDBDQzkyOEEwRkRFREVFMUJBNTNDQjlDNDYyNkU1RTEwNTA3
NkVFRUI2QkEyNEJFMTdBMzZCMTRGMi8wLzMyMzAzMDJlMzIzNTJlMzgzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzQzMTMyMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIGVAwDQYJ
KoZIhvcNAQELBQADggEBABqrRkU5d7IdIhJKzdPqgLJk7PBSZbYZX/KSC8A7TgRk
JMjSFTkCoTGLu5DSMK+dPqMp76b1mo5T6hQwT4+N20TbYmSr8ZO2x1/hgJgH1kJ6
Tz/MhySZjlZa6DkDTlGJ5jztciEnfSrPdZX1YBHhwX9LvHEWf1P222okGmZQjKsi
HN6RiYw9EXAvHpqu8qaA8KoI4eJ/6nl3r7/kEHDzYFVDHMFWZCbnywXYR4gjY8EL
lNxTiGdQ2q5dkY46jMeQY5xdWM3ULKIfjnbj5Pmj4RgWMupJP0w3WuGnvj2hkRvY
2BzvRJBRmBJyxAVXLBnPOebOrh3dyqWLtWA1txF4R14=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:55 2025 by rpki-client