Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28062.roa
File:                     AS28062.roa (raw, json)
Hash identifier:          MEgSLj2BbnB9lEamCesLmHtogbTfSDWp7Rv5guQBjC0=
Subject key identifier:   C5:52:81:9E:B2:BC:0C:11:DC:42:F6:1D:DA:40:16:58:89:26:74:14
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       20731C93E641772F6DA9B42FD031C4076EC66BB9
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28062.roa
Signing time:             Tue 04 Feb 2025 18:02:47 +0000
ROA not before:           Tue 04 Feb 2025 17:57:47 +0000
ROA not after:            Tue 03 Feb 2026 18:02:47 +0000
asID:                     28062
IP address blocks:        200.46.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:73:1c:93:e6:41:77:2f:6d:a9:b4:2f:d0:31:c4:07:6e:c6:6b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Feb  4 17:57:47 2025 GMT
            Not After : Feb  3 18:02:47 2026 GMT
        Subject: CN=C552819EB2BC0C11DC42F61DDA40165889267414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b6:4b:43:e3:3b:4a:4a:56:a3:08:6d:f4:3a:
                    1c:14:a5:d7:53:ed:97:44:71:d9:02:b7:c4:78:2f:
                    b0:cd:a5:29:47:b7:28:7c:b7:46:8c:44:2b:02:c3:
                    7d:05:0d:e9:f3:50:38:fc:9b:80:fe:c7:7e:8b:e8:
                    33:e9:87:20:e3:ee:73:e1:c6:1b:9a:a3:19:76:0f:
                    a1:d4:d3:0f:92:c1:27:a5:1b:93:fb:4d:59:0d:c4:
                    43:00:33:bf:58:7d:98:d7:b7:d0:bb:59:db:00:36:
                    a2:bd:0b:60:ff:29:38:29:08:46:2b:d6:96:1f:75:
                    be:f3:1f:85:a9:b2:80:14:8d:2d:e4:aa:1d:54:2b:
                    05:3e:a6:ff:d0:98:31:57:18:b9:f4:f7:bc:19:31:
                    fa:2f:fd:57:99:3a:67:31:79:5c:da:8b:32:1a:4f:
                    8d:42:1c:c4:e0:37:15:93:bc:ab:ca:dd:db:53:0c:
                    a2:53:d9:91:47:39:52:7a:c5:a8:2c:e7:5b:8f:86:
                    73:ff:39:a0:0c:4e:4a:74:9b:51:60:0d:c7:c3:34:
                    a0:6d:a5:8d:8b:ef:7d:1f:7f:ce:11:ff:a1:72:b8:
                    8a:c9:6f:a3:4d:08:47:c8:fa:8c:e7:90:41:85:3c:
                    c1:53:fb:68:69:34:c2:7b:9f:fe:70:3c:b2:44:86:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:52:81:9E:B2:BC:0C:11:DC:42:F6:1D:DA:40:16:58:89:26:74:14
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28062.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:4a:20:2d:b9:35:4e:01:eb:68:5b:5f:54:17:d4:55:29:e3:
         f8:00:07:bc:5b:db:b4:66:20:75:85:bc:75:c9:c4:76:00:4e:
         25:d9:bf:0a:81:21:9f:c8:06:38:50:04:ed:1f:48:11:c8:ff:
         92:fa:e8:28:5a:78:bd:dc:97:f5:69:83:05:43:1b:cb:8d:5f:
         af:03:a5:bb:89:c6:12:1c:e5:e4:12:6a:98:79:8c:63:96:0e:
         71:07:b5:97:49:c4:f7:66:dc:b1:d9:fe:7b:3e:33:e4:42:ec:
         2c:cb:f6:97:e0:11:18:72:3d:9e:f7:21:9a:a2:ab:90:ef:76:
         52:c1:6d:63:0a:ec:d4:59:4d:83:1f:16:c1:2d:1b:25:ee:54:
         32:0b:a3:37:5a:53:ae:70:a0:38:98:a0:7c:6f:55:0f:a7:11:
         5e:5a:f6:13:d9:8f:c4:7a:8f:c8:3f:d7:1c:fb:8d:27:42:c8:
         2d:c3:f3:ad:aa:2f:c4:d7:9e:7c:e0:a8:ac:0e:37:49:84:a0:
         ac:6c:04:e8:3c:b0:72:71:6e:c5:bf:e2:b2:a2:dd:5e:65:9c:
         32:eb:21:88:27:b0:7c:77:3b:5a:44:4c:c9:60:28:f4:e2:d6:
         8f:24:44:b2:87:b3:94:55:42:09:ab:24:a6:2f:e0:43:29:da:
         54:42:a1:91
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUIHMck+ZBdy9tqbQv0DHEB27Ga7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNTAyMDQxNzU3NDdaFw0yNjAyMDMxODAyNDdaMDMxMTAvBgNV
BAMTKEM1NTI4MTlFQjJCQzBDMTFEQzQyRjYxRERBNDAxNjU4ODkyNjc0MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUtktD4ztKSlajCG30OhwUpddT
7ZdEcdkCt8R4L7DNpSlHtyh8t0aMRCsCw30FDenzUDj8m4D+x36L6DPphyDj7nPh
xhuaoxl2D6HU0w+SwSelG5P7TVkNxEMAM79YfZjXt9C7WdsANqK9C2D/KTgpCEYr
1pYfdb7zH4WpsoAUjS3kqh1UKwU+pv/QmDFXGLn097wZMfov/VeZOmcxeVzaizIa
T41CHMTgNxWTvKvK3dtTDKJT2ZFHOVJ6xags51uPhnP/OaAMTkp0m1FgDcfDNKBt
pY2L730ff84R/6FyuIrJb6NNCEfI+oznkEGFPMFT+2hpNMJ7n/5wPLJEhhZhAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUxVKBnrK8DBHcQvYd2kAWWIkmdBQwHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZDMjkzMjhCMEJG
RUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvQVMyODA2Mi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMguyTAN
BgkqhkiG9w0BAQsFAAOCAQEAEUogLbk1TgHraFtfVBfUVSnj+AAHvFvbtGYgdYW8
dcnEdgBOJdm/CoEhn8gGOFAE7R9IEcj/kvroKFp4vdyX9WmDBUMby41frwOlu4nG
Ehzl5BJqmHmMY5YOcQe1l0nE92bcsdn+ez4z5ELsLMv2l+ARGHI9nvchmqKrkO92
UsFtYwrs1FlNgx8WwS0bJe5UMgujN1pTrnCgOJigfG9VD6cRXlr2E9mPxHqPyD/X
HPuNJ0LILcPzraovxNeefOCorA43SYSgrGwE6DywcnFuxb/isqLdXmWcMushiCew
fHc7WkRMyWAo9OLWjyREsoezlFVCCaskpi/gQynaVEKhkQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:45 2025 by rpki-client