Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e203134363138.roa
File:                     3230302e33332e372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          M4ez61T+kQFsSZRQZ4771cKR7zC9zTKTAq2RQKn0wQs=
Subject key identifier:   98:22:21:08:2C:6B:BB:F5:1A:AB:CF:4A:B6:CC:45:03:44:7E:45:23
Certificate issuer:       /CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Certificate serial:       530C0AC65B02E5AA98096FC5E3EB748E8BA5EDD3
Authority key identifier: B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 04 Feb 2025 18:21:17 +0000
ROA not before:           Tue 04 Feb 2025 18:16:17 +0000
ROA not after:            Tue 03 Feb 2026 18:21:17 +0000
asID:                     14618
IP address blocks:        200.33.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0c:0a:c6:5b:02:e5:aa:98:09:6f:c5:e3:eb:74:8e:8b:a5:ed:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
        Validity
            Not Before: Feb  4 18:16:17 2025 GMT
            Not After : Feb  3 18:21:17 2026 GMT
        Subject: CN=982221082C6BBBF51AABCF4AB6CC4503447E4523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:6f:b4:57:02:c3:56:f5:a5:db:80:a1:c0:
                    86:b9:db:36:b2:42:ce:ab:2a:52:5f:ba:b6:74:3b:
                    2b:88:c2:7d:4b:c9:7a:47:a9:28:42:08:12:39:95:
                    69:04:de:7d:fc:f6:d2:31:61:3a:57:25:c9:d3:34:
                    6a:08:3c:cc:36:a5:23:ff:a4:d1:d0:ae:2b:46:30:
                    a0:83:1e:b8:8f:77:cf:27:33:a6:8f:51:8c:25:45:
                    6b:4d:87:7d:53:b0:27:4a:40:db:88:cf:b6:17:02:
                    11:4a:4f:3a:8e:fe:a6:0e:3c:d2:f2:a8:61:b0:bb:
                    b7:30:b0:17:23:36:a7:c2:98:5b:a0:fb:e9:37:5d:
                    fe:30:56:8e:dd:c0:95:19:02:a0:15:52:3c:fa:f7:
                    48:fd:e8:12:41:53:62:ad:ea:a4:5e:f9:62:03:b3:
                    1e:22:31:3e:0b:32:2f:79:23:06:9c:cd:1d:7f:6a:
                    38:2a:35:22:06:35:e4:a5:e5:8b:45:01:37:9c:ab:
                    a9:5d:53:ae:cc:27:e0:df:9a:e4:32:d6:10:db:16:
                    ed:87:ff:28:8a:be:17:8d:42:3a:23:23:93:9b:47:
                    db:9a:20:fa:55:bc:67:34:35:08:aa:a3:3d:ae:be:
                    e6:ad:c8:da:3c:10:75:3b:25:fd:77:97:c4:05:33:
                    4b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:22:21:08:2C:6B:BB:F5:1A:AB:CF:4A:B6:CC:45:03:44:7E:45:23
            X509v3 Authority Key Identifier:
                keyid:B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:db:78:f1:a5:0d:a4:67:af:e3:4e:58:39:37:6f:03:c6:19:
         a0:b0:1a:8c:a0:34:28:60:57:99:5a:2c:94:9b:8f:6a:52:e4:
         b4:48:38:75:6b:9f:d3:fa:b1:84:ed:aa:53:3c:75:3e:7c:22:
         58:00:c7:ea:0f:6f:36:ed:40:28:22:2b:c2:06:99:d4:73:49:
         c1:64:99:ff:b3:f7:5b:40:e7:6d:6d:ea:b2:3f:f5:ea:a4:e2:
         2d:f1:ef:c1:ed:87:c8:3d:63:e7:03:44:ab:b9:6b:62:a5:92:
         b1:0d:c5:0a:29:3a:c2:57:6b:d6:7a:cf:bb:f2:ea:7f:76:12:
         de:9b:5c:cf:9e:5b:14:40:1c:92:fe:75:f9:1c:82:d7:80:ec:
         fa:0a:38:eb:5e:6e:8e:33:cf:ab:23:3b:87:c9:ef:3d:0d:93:
         ab:37:e7:41:6d:71:4c:5e:c5:b7:17:fd:58:d2:37:bf:cc:a5:
         51:ad:99:39:f9:55:74:2f:ef:5f:21:1a:6d:af:7c:db:1e:c7:
         78:f4:52:1d:a3:71:65:26:c5:1a:ff:1a:79:31:eb:32:0e:46:
         b7:c1:12:cb:10:27:81:d0:0d:a0:a5:13:a2:ab:1e:b7:a1:aa:
         c9:64:e7:e7:35:1d:19:24:48:99:92:8f:bb:bf:36:db:9d:16:
         04:ed:9b:f2
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUUwwKxlsC5aqYCW/F4+t0joul7dMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZEMzhDRkRDOUNGREM0MUM2MTdFRjkyQUQ3NTEyMjU5
MEQ5M0U4NzAeFw0yNTAyMDQxODE2MTdaFw0yNjAyMDMxODIxMTdaMDMxMTAvBgNV
BAMTKDk4MjIyMTA4MkM2QkJCRjUxQUFCQ0Y0QUI2Q0M0NTAzNDQ3RTQ1MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKAW+0VwLDVvWl24ChwIa52zay
Qs6rKlJfurZ0OyuIwn1LyXpHqShCCBI5lWkE3n389tIxYTpXJcnTNGoIPMw2pSP/
pNHQritGMKCDHriPd88nM6aPUYwlRWtNh31TsCdKQNuIz7YXAhFKTzqO/qYOPNLy
qGGwu7cwsBcjNqfCmFug++k3Xf4wVo7dwJUZAqAVUjz690j96BJBU2Kt6qRe+WID
sx4iMT4LMi95IwaczR1/ajgqNSIGNeSl5YtFATecq6ldU67MJ+DfmuQy1hDbFu2H
/yiKvheNQjojI5ObR9uaIPpVvGc0NQiqoz2uvuatyNo8EHU7Jf13l8QFM0t3AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUmCIhCCxru/Uaq89KtsxFA0R+RSMwHwYDVR0j
BBgwFoAUttOM/cnP3EHGF++SrXUSJZDZPocwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDFBMDU1REJGMzZGQkIyRjhFNUFCNTFBMUUxOURGMjg2
MEY1ODAyRUYxRDRDQkRBOENFN0EyNTA2N0UxRjMzLzAvQjZEMzhDRkRDOUNGREM0
MUM2MTdFRjkyQUQ3NTEyMjU5MEQ5M0U4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkQzOENGREM5Q0ZEQzQxQzYx
N0VGOTJBRDc1MTIyNTkwRDkzRTg3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQxQTA1NURCRjM2RkJCMkY4RTVBQjUxQTFFMTlERjI4NjBGNTgwMkVG
MUQ0Q0JEQThDRTdBMjUwNjdFMUYzMy8wLzMyMzAzMDJlMzMzMzJlMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyCEHMA0GCSqG
SIb3DQEBCwUAA4IBAQAs23jxpQ2kZ6/jTlg5N28DxhmgsBqMoDQoYFeZWiyUm49q
UuS0SDh1a5/T+rGE7apTPHU+fCJYAMfqD2827UAoIivCBpnUc0nBZJn/s/dbQOdt
beqyP/XqpOIt8e/B7YfIPWPnA0SruWtipZKxDcUKKTrCV2vWes+78up/dhLem1zP
nlsUQByS/nX5HILXgOz6CjjrXm6OM8+rIzuHye89DZOrN+dBbXFMXsW3F/1Y0je/
zKVRrZk5+VV0L+9fIRptr3zbHsd49FIdo3FlJsUa/xp5MesyDka3wRLLECeB0A2g
pROiqx63oarJZOfnNR0ZJEiZko+7vzbbnRYE7Zvy
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:02:13 2025 by rpki-client