Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133312e302f32342d3234203d3e203133393939.roa
File:                     3230302e37372e3133312e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          NT1+8kif81ZDaMKdE9pmHCcECiUz7jpFhAhu2yF8WXU=
Subject key identifier:   B7:36:FA:0A:F2:DA:CE:E7:27:8F:A9:D6:6B:28:25:D1:F5:FC:DD:83
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       4602CA45F435CBA1C613A952B75EE96867DDF63B
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133312e302f32342d3234203d3e203133393939.roa
Signing time:             Fri 03 Jan 2025 22:10:00 +0000
ROA not before:           Fri 03 Jan 2025 22:05:00 +0000
ROA not after:            Fri 02 Jan 2026 22:10:00 +0000
asID:                     13999
IP address blocks:        200.77.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:02:ca:45:f4:35:cb:a1:c6:13:a9:52:b7:5e:e9:68:67:dd:f6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jan  3 22:05:00 2025 GMT
            Not After : Jan  2 22:10:00 2026 GMT
        Subject: CN=B736FA0AF2DACEE7278FA9D66B2825D1F5FCDD83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:37:82:1b:2e:e9:b9:96:0e:fd:9e:8d:35:75:
                    c6:82:b7:c0:8f:ad:ac:7c:ef:49:b1:d3:9c:2d:81:
                    69:e5:28:31:e3:f4:e0:b5:1c:cd:fe:45:a8:82:fd:
                    06:74:45:1d:35:8d:eb:2b:03:7e:57:10:8a:39:38:
                    91:d0:c7:3e:32:b3:62:8a:fb:fa:26:80:eb:87:3c:
                    2f:5a:17:d6:04:fa:4e:fd:d3:ef:1f:6a:ea:b1:85:
                    7c:e6:27:5f:f2:d6:74:29:3f:8e:02:b9:d6:79:68:
                    b6:38:30:1a:88:f6:b7:69:12:55:e6:aa:c2:d4:47:
                    f0:81:9b:48:90:64:6f:b4:49:c4:bd:ab:fe:a6:16:
                    83:69:93:29:87:c0:11:d1:1f:51:c3:71:ad:b9:e6:
                    f6:45:05:24:89:a0:9b:fb:a6:47:e4:9c:c3:27:ea:
                    ef:23:a3:9a:5d:a1:d0:b2:0d:b9:d1:39:83:95:c2:
                    85:3e:5c:01:04:26:a4:ec:5e:50:0a:2f:d5:eb:d8:
                    cc:b8:a3:6f:e1:fb:ee:f7:5d:12:96:86:e3:d6:23:
                    e1:2f:6b:e5:c3:42:20:05:8e:36:a8:a0:f3:c7:5c:
                    b2:ec:3d:a4:de:b6:28:01:e2:8a:52:77:16:83:23:
                    c4:be:0c:bc:17:f4:00:5c:10:11:7b:c0:37:28:0c:
                    d1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:36:FA:0A:F2:DA:CE:E7:27:8F:A9:D6:6B:28:25:D1:F5:FC:DD:83
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133312e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:77:82:8f:05:e6:23:09:b9:40:31:61:3b:bf:9d:83:52:7c:
         d9:02:5a:66:5c:d6:e5:77:70:43:7b:0b:27:b2:0c:84:41:10:
         88:a1:45:7c:7a:0f:c7:0a:5f:4c:ec:2b:22:21:d1:13:ae:7c:
         4d:39:df:72:7c:c1:34:bc:82:8a:81:28:3e:9c:c0:ba:cb:39:
         31:cb:60:a0:c1:27:e7:be:84:5f:3a:e9:11:86:83:03:70:0a:
         30:65:ff:9e:e0:ca:25:7a:8b:41:58:95:ee:c1:e7:fa:79:99:
         aa:ee:38:f0:da:63:61:a8:39:45:15:26:ca:38:9a:08:fa:8f:
         d1:e0:a5:f9:1a:20:d6:67:9a:f5:71:81:d7:2b:f9:51:26:c0:
         be:69:34:08:8e:80:8b:b6:62:03:0e:4a:0f:9d:06:f4:98:c7:
         d4:20:59:a6:ed:b2:34:85:82:e7:8c:fa:eb:4a:ac:f6:0d:c0:
         c9:cf:f2:86:4d:c6:f5:5e:ee:7c:53:e1:17:0c:61:65:62:15:
         84:d6:d5:6d:1e:f7:75:9b:03:8c:4b:f8:fc:ad:83:38:25:a1:
         69:e0:40:5d:39:e0:f9:02:cc:84:05:3e:9e:35:34:90:61:d7:
         0a:fb:1a:35:f3:cb:e1:29:84:1f:db:d4:6b:da:d9:72:ad:5b:
         35:2b:2c:c2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURgLKRfQ1y6HGE6lSt17paGfd9jswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk3NzFCMkQzMDlCMDVCQjhDMkYwRUEzNkZGMTc1MDFF
MjQyQTE5RTAeFw0yNTAxMDMyMjA1MDBaFw0yNjAxMDIyMjEwMDBaMDMxMTAvBgNV
BAMTKEI3MzZGQTBBRjJEQUNFRTcyNzhGQTlENjZCMjgyNUQxRjVGQ0REODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeN4IbLum5lg79no01dcaCt8CP
rax870mx05wtgWnlKDHj9OC1HM3+RaiC/QZ0RR01jesrA35XEIo5OJHQxz4ys2KK
+/omgOuHPC9aF9YE+k790+8fauqxhXzmJ1/y1nQpP44CudZ5aLY4MBqI9rdpElXm
qsLUR/CBm0iQZG+0ScS9q/6mFoNpkymHwBHRH1HDca255vZFBSSJoJv7pkfknMMn
6u8jo5pdodCyDbnROYOVwoU+XAEEJqTsXlAKL9Xr2My4o2/h++73XRKWhuPWI+Ev
a+XDQiAFjjaooPPHXLLsPaTetigB4opSdxaDI8S+DLwX9ABcEBF7wDcoDNGhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtzb6CvLazucnj6nWaygl0fX83YMwHwYDVR0j
BBgwFoAU6XcbLTCbBbuMLw6jb/F1AeJCoZ4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEVCNkQ5NTYxNUUzNkRDQUQzNTE2NEE2OTkxMDk3OTJD
M0ZDRDNGODYxQjhDN0QxQTYwMTA2QUQzM0ZGRkUyLzAvRTk3NzFCMkQzMDlCMDVC
QjhDMkYwRUEzNkZGMTc1MDFFMjQyQTE5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTc3MUIyRDMwOUIwNUJCOEMy
RjBFQTM2RkYxNzUwMUUyNDJBMTlFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBFQjZEOTU2MTVFMzZEQ0FEMzUxNjRBNjk5MTA5NzkyQzNGQ0QzRjg2
MUI4QzdEMUE2MDEwNkFEMzNGRkZFMi8wLzMyMzAzMDJlMzczNzJlMzEzMzMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhNgzAN
BgkqhkiG9w0BAQsFAAOCAQEAPneCjwXmIwm5QDFhO7+dg1J82QJaZlzW5XdwQ3sL
J7IMhEEQiKFFfHoPxwpfTOwrIiHRE658TTnfcnzBNLyCioEoPpzAuss5MctgoMEn
576EXzrpEYaDA3AKMGX/nuDKJXqLQViV7sHn+nmZqu448NpjYag5RRUmyjiaCPqP
0eCl+Rog1mea9XGB1yv5USbAvmk0CI6Ai7ZiAw5KD50G9JjH1CBZpu2yNIWC54z6
60qs9g3Ayc/yhk3G9V7ufFPhFwxhZWIVhNbVbR73dZsDjEv4/K2DOCWhaeBAXTng
+QLMhAU+njU0kGHXCvsaNfPL4SmEH9vUa9rZcq1bNSsswg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:52 2025 by rpki-client