Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/3230302e392e39342e302f32342d3234203d3e20323633383034.roa
File:                     3230302e392e39342e302f32342d3234203d3e20323633383034.roa (raw, json)
Hash identifier:          rwjUfrhP1uZz/YkfIlJlbjq6LqLENxCIZtQ2RaxZBDI=
Subject key identifier:   EA:2E:29:1D:8B:38:54:33:57:EB:A2:98:03:F7:5A:85:B7:89:ED:24
Certificate issuer:       /CN=BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8
Certificate serial:       75E658B01EA831D72CA2F4084C2B5DA629CB19A3
Authority key identifier: BC:C9:44:9C:E0:FB:26:78:5C:BE:4A:60:D9:D5:51:4E:9E:17:7A:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/3230302e392e39342e302f32342d3234203d3e20323633383034.roa
Signing time:             Tue 04 Feb 2025 18:56:23 +0000
ROA not before:           Tue 04 Feb 2025 18:51:23 +0000
ROA not after:            Tue 03 Feb 2026 18:56:23 +0000
asID:                     263804
IP address blocks:        200.9.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e6:58:b0:1e:a8:31:d7:2c:a2:f4:08:4c:2b:5d:a6:29:cb:19:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8
        Validity
            Not Before: Feb  4 18:51:23 2025 GMT
            Not After : Feb  3 18:56:23 2026 GMT
        Subject: CN=EA2E291D8B38543357EBA29803F75A85B789ED24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:09:d1:dd:e1:44:70:a7:1e:31:45:75:a8:
                    84:c9:ee:b1:35:49:73:7d:84:f6:7b:78:5f:52:48:
                    de:09:9f:54:37:0b:e6:c0:24:00:2a:53:38:8f:e9:
                    c7:96:b8:d2:e7:e8:5a:eb:4f:10:25:a1:d6:d9:7a:
                    8f:33:3c:77:15:04:fc:04:89:f1:cf:f1:9b:97:5e:
                    14:11:49:7c:6b:09:e3:9a:bf:df:fd:66:ea:3f:1d:
                    8d:4a:97:01:a6:f0:e1:94:52:c5:0c:22:86:75:f7:
                    91:73:c9:84:5f:1d:2c:11:d9:f6:36:3e:a5:2f:ab:
                    fe:2f:e1:cd:5d:e7:7e:5b:d5:38:ad:9a:40:f1:90:
                    8b:c7:c9:ec:d2:c0:9d:9d:3b:45:ff:34:5f:ad:a1:
                    f5:e4:a5:1e:de:cd:a4:24:03:1e:5d:db:d7:b0:0a:
                    c4:0f:f1:c1:de:d8:9d:de:39:a3:10:39:de:e5:ec:
                    5b:8d:fd:38:e2:e2:b8:b4:20:dd:e0:70:3f:8d:49:
                    45:3a:51:7c:62:b5:f2:ca:4d:54:cf:e7:46:9b:cf:
                    43:55:4c:7f:f7:7b:81:54:f9:c4:70:34:bc:b4:4d:
                    f7:38:cf:5a:87:97:16:e0:d0:d1:9d:a6:83:3c:cf:
                    21:47:cc:6a:a1:1d:86:e0:ed:1e:60:16:80:6e:08:
                    22:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2E:29:1D:8B:38:54:33:57:EB:A2:98:03:F7:5A:85:B7:89:ED:24
            X509v3 Authority Key Identifier:
                keyid:BC:C9:44:9C:E0:FB:26:78:5C:BE:4A:60:D9:D5:51:4E:9E:17:7A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/3230302e392e39342e302f32342d3234203d3e20323633383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:cb:54:bb:a2:21:b6:dd:f9:80:57:11:78:bc:e6:bb:f4:47:
         5d:58:04:d5:a2:bc:0b:01:39:78:59:aa:12:fa:5a:08:4e:f0:
         c3:06:8f:3b:13:96:92:c1:61:10:fc:89:75:a4:05:79:26:26:
         21:d3:3b:bd:bf:a0:02:bd:93:fe:11:61:94:66:3a:f0:e8:15:
         4b:e2:fb:b0:7f:14:84:aa:ff:66:ec:68:6e:f0:1c:78:6c:3f:
         f9:a8:9a:ae:b5:08:25:f5:26:ee:1e:1b:14:57:4b:8d:a0:e9:
         01:5f:57:fe:d1:89:09:34:bd:73:b8:20:a8:11:e1:dc:c9:14:
         b8:5a:2f:68:d3:6b:cd:3d:c4:e8:a7:2a:14:9d:0d:fc:14:48:
         5b:04:99:1f:6b:83:dc:c7:91:fc:cb:95:49:31:08:6b:d4:04:
         ad:b3:c8:0c:89:90:ad:c7:ef:d2:2a:84:b8:6f:7e:58:44:98:
         2c:81:a0:4e:26:d7:f8:49:bb:b3:9e:14:4d:63:24:89:7a:c3:
         d0:d0:16:27:e2:de:ca:c3:f0:08:5f:92:f1:7f:f6:e5:10:d2:
         aa:6f:de:87:21:60:f5:f2:5a:84:8e:de:cb:26:5e:e8:e0:ff:
         80:84:b1:65:96:ca:9b:89:38:00:11:79:c6:a3:f9:d4:0e:12:
         50:1f:62:30
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUdeZYsB6oMdcsovQITCtdpinLGaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDOTQ0OUNFMEZCMjY3ODVDQkU0QTYwRDlENTUxNEU5
RTE3N0FGODAeFw0yNTAyMDQxODUxMjNaFw0yNjAyMDMxODU2MjNaMDMxMTAvBgNV
BAMTKEVBMkUyOTFEOEIzODU0MzM1N0VCQTI5ODAzRjc1QTg1Qjc4OUVEMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLhgnR3eFEcKceMUV1qITJ7rE1
SXN9hPZ7eF9SSN4Jn1Q3C+bAJAAqUziP6ceWuNLn6FrrTxAlodbZeo8zPHcVBPwE
ifHP8ZuXXhQRSXxrCeOav9/9Zuo/HY1KlwGm8OGUUsUMIoZ195FzyYRfHSwR2fY2
PqUvq/4v4c1d535b1TitmkDxkIvHyezSwJ2dO0X/NF+tofXkpR7ezaQkAx5d29ew
CsQP8cHe2J3eOaMQOd7l7FuN/Tji4ri0IN3gcD+NSUU6UXxitfLKTVTP50abz0NV
TH/3e4FU+cRwNLy0Tfc4z1qHlxbg0NGdpoM8zyFHzGqhHYbg7R5gFoBuCCJlAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU6i4pHYs4VDNX66KYA/dahbeJ7SQwHwYDVR0j
BBgwFoAUvMlEnOD7Jnhcvkpg2dVRTp4XevgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQkRCMjQwMTBCODZBM0ZFODgwNTkxOTQ1Qzc3MkVBRDEx
MEIyMTk3QThCNzc1NDgwNTIzODhEODNBNjc5RUQ2LzAvQkNDOTQ0OUNFMEZCMjY3
ODVDQkU0QTYwRDlENTUxNEU5RTE3N0FGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQ0M5NDQ5Q0UwRkIyNjc4NUNC
RTRBNjBEOUQ1NTE0RTlFMTc3QUY4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0JEQjI0MDEwQjg2QTNGRTg4MDU5MTk0NUM3NzJFQUQxMTBCMjE5N0E4
Qjc3NTQ4MDUyMzg4RDgzQTY3OUVENi8wLzMyMzAzMDJlMzkyZTM5MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzODMwMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADICV4wDQYJ
KoZIhvcNAQELBQADggEBAJLLVLuiIbbd+YBXEXi85rv0R11YBNWivAsBOXhZqhL6
WghO8MMGjzsTlpLBYRD8iXWkBXkmJiHTO72/oAK9k/4RYZRmOvDoFUvi+7B/FISq
/2bsaG7wHHhsP/momq61CCX1Ju4eGxRXS42g6QFfV/7RiQk0vXO4IKgR4dzJFLha
L2jTa809xOinKhSdDfwUSFsEmR9rg9zHkfzLlUkxCGvUBK2zyAyJkK3H79IqhLhv
flhEmCyBoE4m1/hJu7OeFE1jJIl6w9DQFifi3srD8AhfkvF/9uUQ0qpv3ochYPXy
WoSO3ssmXujg/4CEsWWWypuJOAARecaj+dQOElAfYjA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:51 2025 by rpki-client