Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230302e36332e33322e302f32312d3234203d3e203238303135.roa
File:                     3230302e36332e33322e302f32312d3234203d3e203238303135.roa (raw, json)
Hash identifier:          SW0JRcaJZFeOml1B1Zn5wgIRh7WWTotdpDT+hth/+/0=
Subject key identifier:   FA:41:59:04:A6:A0:C2:DA:58:0D:A9:2F:A6:39:78:87:CA:7E:4E:15
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       291ECC012BB64B1BC51114C1FD08F9D4865885D6
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230302e36332e33322e302f32312d3234203d3e203238303135.roa
Signing time:             Tue 04 Feb 2025 20:06:06 +0000
ROA not before:           Tue 04 Feb 2025 20:01:06 +0000
ROA not after:            Tue 03 Feb 2026 20:06:06 +0000
asID:                     28015
IP address blocks:        200.63.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 19:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1e:cc:01:2b:b6:4b:1b:c5:11:14:c1:fd:08:f9:d4:86:58:85:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Feb  4 20:01:06 2025 GMT
            Not After : Feb  3 20:06:06 2026 GMT
        Subject: CN=FA415904A6A0C2DA580DA92FA6397887CA7E4E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ad:80:9e:a5:6b:b6:7b:a7:d3:ce:dc:07:ea:
                    e8:a4:ff:f9:a3:ed:68:2b:cb:26:83:88:1c:c5:be:
                    5c:98:70:55:f3:7b:9b:36:e6:9d:ef:47:82:5f:66:
                    72:a7:f9:cb:3b:e9:06:7c:7f:65:d6:34:b5:38:98:
                    64:7e:2d:ee:83:6f:72:28:bb:7f:36:fe:4a:c9:bd:
                    96:aa:42:cd:ba:31:b6:6a:44:f0:55:cb:34:e4:b2:
                    ee:41:ab:cb:72:0f:ca:21:40:ae:ab:1b:54:34:1a:
                    6c:4a:c2:e0:3a:dd:1a:f0:98:80:f3:9c:86:24:44:
                    3c:a9:05:b9:23:e2:24:3f:88:36:0d:c9:a1:45:f8:
                    08:d7:68:96:e6:f8:1d:bc:d8:3e:08:4d:52:17:fa:
                    82:3d:07:ce:05:14:ed:f6:05:5c:c3:c5:61:b2:ec:
                    75:e2:5c:b5:76:9f:06:85:9e:1e:22:09:cb:d4:e1:
                    cf:95:ee:62:23:89:f3:20:a6:bd:e5:00:d9:aa:ce:
                    6e:be:b5:15:99:18:dc:96:5a:bf:43:45:c6:cc:b4:
                    79:94:15:f5:cb:a6:80:1e:9b:8b:19:2d:4c:fe:48:
                    c9:7f:aa:04:ec:fd:ca:61:f6:56:8e:c8:b8:fe:bf:
                    6e:fe:d7:22:9d:c8:cb:97:b5:6b:51:cb:a6:49:00:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:41:59:04:A6:A0:C2:DA:58:0D:A9:2F:A6:39:78:87:CA:7E:4E:15
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230302e36332e33322e302f32312d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:69:ad:db:0d:d5:a0:8f:f0:72:7f:4d:76:92:b0:3a:cd:ba:
         97:40:c3:26:7b:00:c8:b4:a2:eb:ff:82:4f:01:d3:b3:ca:e6:
         2b:67:e3:82:77:96:10:f1:7d:ed:6c:eb:e3:01:be:20:ef:f7:
         e1:16:7a:2e:c1:c5:ef:8d:14:b3:cf:12:50:d7:0e:35:ba:db:
         ca:06:05:c8:7a:df:77:32:05:b5:5c:76:e4:8d:e8:6a:a0:22:
         d5:30:65:57:55:c1:45:45:c8:e9:bd:92:52:02:f0:e4:b4:f1:
         29:34:61:fd:c6:82:3a:10:a4:96:d1:70:79:65:3f:ef:8a:05:
         8a:79:78:c0:0a:3f:bb:2e:e4:47:db:60:f6:08:94:18:fc:d7:
         18:f4:19:c3:8c:85:87:60:85:bb:7e:aa:a0:51:6f:af:16:7f:
         08:83:1c:49:fe:7a:ae:1a:bd:9b:37:20:d0:2d:79:c0:05:fb:
         5f:ef:c1:60:2d:09:22:23:f1:6e:eb:38:72:03:60:45:26:34:
         7c:26:5a:4f:a8:6d:f0:56:fd:a3:fb:10:0c:6a:98:81:04:fe:
         f7:6a:5c:8a:b8:16:1a:f6:a3:b8:e0:6b:ab:bc:22:c8:ca:85:
         9c:66:7e:21:96:4d:b1:8e:72:88:f7:f7:d0:49:02:34:5d:d5:
         bc:c7:00:ea
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKR7MASu2SxvFERTB/Qj51IZYhdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDMTZBRDRGODJFNzJEOTI4N0E1RDRFQjk5NzY4QjBD
NDFDODA2MTAeFw0yNTAyMDQyMDAxMDZaFw0yNjAyMDMyMDA2MDZaMDMxMTAvBgNV
BAMTKEZBNDE1OTA0QTZBMEMyREE1ODBEQTkyRkE2Mzk3ODg3Q0E3RTRFMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYrYCepWu2e6fTztwH6uik//mj
7WgryyaDiBzFvlyYcFXze5s25p3vR4JfZnKn+cs76QZ8f2XWNLU4mGR+Le6Db3Io
u382/krJvZaqQs26MbZqRPBVyzTksu5Bq8tyD8ohQK6rG1Q0GmxKwuA63RrwmIDz
nIYkRDypBbkj4iQ/iDYNyaFF+AjXaJbm+B282D4ITVIX+oI9B84FFO32BVzDxWGy
7HXiXLV2nwaFnh4iCcvU4c+V7mIjifMgpr3lANmqzm6+tRWZGNyWWr9DRcbMtHmU
FfXLpoAem4sZLUz+SMl/qgTs/cph9laOyLj+v27+1yKdyMuXtWtRy6ZJAC7/AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU+kFZBKagwtpYDakvpjl4h8p+ThUwHwYDVR0j
BBgwFoAUtsFq1Pguctkoel1OuZdosMQcgGEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EM0Q1MDBERkQ3QkIxQTZBMTMyNjQ0RDkzQ0ZERjUzMTc0
Qjg0MzVBNjQwRjhCQTc0MDJFNkU2RTEzRkIwNTM2LzAvQjZDMTZBRDRGODJFNzJE
OTI4N0E1RDRFQjk5NzY4QjBDNDFDODA2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkMxNkFENEY4MkU3MkQ5Mjg3
QTVENEVCOTk3NjhCMEM0MUM4MDYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDNENTAwREZEN0JCMUE2QTEzMjY0NEQ5M0NGREY1MzE3NEI4NDM1QTY0
MEY4QkE3NDAyRTZFNkUxM0ZCMDUzNi8wLzMyMzAzMDJlMzYzMzJlMzMzMjJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzgzMDMxMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIPyAwDQYJ
KoZIhvcNAQELBQADggEBADtprdsN1aCP8HJ/TXaSsDrNupdAwyZ7AMi0ouv/gk8B
07PK5itn44J3lhDxfe1s6+MBviDv9+EWei7Bxe+NFLPPElDXDjW628oGBch633cy
BbVcduSN6GqgItUwZVdVwUVFyOm9klIC8OS08Sk0Yf3GgjoQpJbRcHllP++KBYp5
eMAKP7su5EfbYPYIlBj81xj0GcOMhYdghbt+qqBRb68WfwiDHEn+eq4avZs3INAt
ecAF+1/vwWAtCSIj8W7rOHIDYEUmNHwmWk+obfBW/aP7EAxqmIEE/vdqXIq4Fhr2
o7jga6u8IsjKhZxmfiGWTbGOcoj399BJAjRd1bzHAOo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:39:40 2025 by rpki-client