Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133362e302f32342d3234203d3e203133393939.roa
File:                     3230302e37372e3133362e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          ByDvDSbFHBkjw3t3zpVkbSweTNAEbgXU61OUQWOojvw=
Subject key identifier:   50:4D:29:10:D8:E4:9C:D8:DA:EE:95:54:6C:A5:83:9B:D4:2A:B4:17
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       27E28065E2F4BC9E65E1EB007208D589478C62F3
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133362e302f32342d3234203d3e203133393939.roa
Signing time:             Thu 16 Jan 2025 06:55:00 +0000
ROA not before:           Thu 16 Jan 2025 06:50:00 +0000
ROA not after:            Thu 15 Jan 2026 06:55:00 +0000
asID:                     13999
IP address blocks:        200.77.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e2:80:65:e2:f4:bc:9e:65:e1:eb:00:72:08:d5:89:47:8c:62:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jan 16 06:50:00 2025 GMT
            Not After : Jan 15 06:55:00 2026 GMT
        Subject: CN=504D2910D8E49CD8DAEE95546CA5839BD42AB417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:fe:bf:3e:1f:5e:27:86:84:12:a1:83:af:
                    e6:9b:9f:80:da:86:03:7c:1a:92:61:ec:5d:4b:c6:
                    29:57:5d:5b:36:34:9c:eb:0a:21:ea:8f:3e:f1:5d:
                    92:e2:31:39:45:d0:d8:08:71:ef:2d:3e:c8:85:67:
                    47:d9:cd:5a:6d:bf:12:a2:d8:39:b5:97:c4:a2:c1:
                    24:30:e0:a4:dc:00:3e:ae:bb:0b:23:3d:03:c2:28:
                    66:32:01:67:36:a2:e3:17:98:08:9e:af:c4:46:a6:
                    53:45:10:9e:24:b4:e1:32:4e:4a:32:5b:ef:9a:3d:
                    15:a7:a2:60:b2:04:4f:fb:60:e0:92:13:f5:28:06:
                    98:bf:2e:cc:13:4c:2b:02:e2:a7:9d:d7:6b:76:f7:
                    6b:b4:7d:f2:b3:bc:db:fa:83:7d:2b:d3:fa:87:e9:
                    2f:e0:e2:39:bb:95:24:4b:93:f2:c6:f6:bf:58:6d:
                    ad:23:f3:c4:b9:d3:1d:87:75:ab:87:c2:44:9a:fb:
                    48:46:87:d0:33:48:30:49:73:99:62:36:1a:b4:8a:
                    16:b5:3e:da:28:1b:b2:54:f9:2b:4a:a9:0f:1a:03:
                    75:d6:75:97:db:e9:00:19:68:d2:cf:c8:55:ad:2f:
                    ab:3b:44:a9:53:f3:12:7b:12:18:08:ea:fc:c3:17:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4D:29:10:D8:E4:9C:D8:DA:EE:95:54:6C:A5:83:9B:D4:2A:B4:17
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133362e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:93:b6:a9:00:7a:56:0b:9b:f2:a5:27:03:2b:99:24:60:b7:
         a9:45:de:fe:47:0d:19:ca:3b:41:5d:36:48:98:aa:d1:d9:ff:
         80:43:2a:1b:aa:c0:2d:d2:5e:dc:03:54:f5:5b:fa:53:25:e4:
         e4:da:c4:98:57:d0:52:af:ee:67:5f:6d:b1:82:2d:cc:e3:2d:
         54:4e:05:85:c0:20:6d:a3:e0:28:0e:69:2a:72:78:fc:b5:43:
         f3:37:f3:32:b3:a5:62:f7:a6:e3:7f:fc:bc:cb:7b:83:fe:54:
         9d:e9:89:58:93:4a:e3:f6:f4:6c:d5:d0:32:4b:73:6b:e0:4e:
         ea:73:ba:05:32:04:1f:9d:57:28:e8:11:98:d7:2c:79:2e:31:
         a1:59:44:29:4d:50:12:ad:7e:1d:44:15:33:3e:28:42:b4:86:
         08:69:95:94:46:82:7c:7f:ad:49:56:1f:4d:97:a1:6c:4a:68:
         55:09:2f:fc:64:35:55:77:39:68:d7:ba:14:22:56:f6:8c:b7:
         89:2b:3d:f0:6d:12:75:b0:d6:bc:a1:7b:ec:dc:0e:6d:64:65:
         a6:70:60:f2:42:1b:cf:01:7c:ec:65:27:fe:78:c2:30:33:dd:
         bf:20:e6:b7:89:28:06:ee:b8:98:b5:6d:e5:30:cd:6d:05:52:
         3c:cd:96:f3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJ+KAZeL0vJ5l4esAcgjViUeMYvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk3NzFCMkQzMDlCMDVCQjhDMkYwRUEzNkZGMTc1MDFF
MjQyQTE5RTAeFw0yNTAxMTYwNjUwMDBaFw0yNjAxMTUwNjU1MDBaMDMxMTAvBgNV
BAMTKDUwNEQyOTEwRDhFNDlDRDhEQUVFOTU1NDZDQTU4MzlCRDQyQUI0MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJWf6/Ph9eJ4aEEqGDr+abn4Da
hgN8GpJh7F1LxilXXVs2NJzrCiHqjz7xXZLiMTlF0NgIce8tPsiFZ0fZzVptvxKi
2Dm1l8SiwSQw4KTcAD6uuwsjPQPCKGYyAWc2ouMXmAier8RGplNFEJ4ktOEyTkoy
W++aPRWnomCyBE/7YOCSE/UoBpi/LswTTCsC4qed12t292u0ffKzvNv6g30r0/qH
6S/g4jm7lSRLk/LG9r9Yba0j88S50x2HdauHwkSa+0hGh9AzSDBJc5liNhq0iha1
PtooG7JU+StKqQ8aA3XWdZfb6QAZaNLPyFWtL6s7RKlT8xJ7EhgI6vzDF2ojAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUUE0pENjknNja7pVUbKWDm9QqtBcwHwYDVR0j
BBgwFoAU6XcbLTCbBbuMLw6jb/F1AeJCoZ4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEVCNkQ5NTYxNUUzNkRDQUQzNTE2NEE2OTkxMDk3OTJD
M0ZDRDNGODYxQjhDN0QxQTYwMTA2QUQzM0ZGRkUyLzAvRTk3NzFCMkQzMDlCMDVC
QjhDMkYwRUEzNkZGMTc1MDFFMjQyQTE5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTc3MUIyRDMwOUIwNUJCOEMy
RjBFQTM2RkYxNzUwMUUyNDJBMTlFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBFQjZEOTU2MTVFMzZEQ0FEMzUxNjRBNjk5MTA5NzkyQzNGQ0QzRjg2
MUI4QzdEMUE2MDEwNkFEMzNGRkZFMi8wLzMyMzAzMDJlMzczNzJlMzEzMzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhNiDAN
BgkqhkiG9w0BAQsFAAOCAQEAhZO2qQB6Vgub8qUnAyuZJGC3qUXe/kcNGco7QV02
SJiq0dn/gEMqG6rALdJe3ANU9Vv6UyXk5NrEmFfQUq/uZ19tsYItzOMtVE4FhcAg
baPgKA5pKnJ4/LVD8zfzMrOlYvem43/8vMt7g/5UnemJWJNK4/b0bNXQMktza+BO
6nO6BTIEH51XKOgRmNcseS4xoVlEKU1QEq1+HUQVMz4oQrSGCGmVlEaCfH+tSVYf
TZehbEpoVQkv/GQ1VXc5aNe6FCJW9oy3iSs98G0SdbDWvKF77NwObWRlpnBg8kIb
zwF87GUn/njCMDPdvyDmt4koBu64mLVt5TDNbQVSPM2W8w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:39 2025 by rpki-client