Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28112.roa
File:                     AS28112.roa (raw, json)
Hash identifier:          hjEFPLAIDcef7Isrf/4A0treNIqWuZmdOtNFtWlVbBA=
Subject key identifier:   04:D3:D0:F1:8C:A6:93:5C:CD:C8:0F:68:DB:38:8C:D5:C9:48:C8:F4
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       786CDCB72F42FE1C04C231CAF35BB77D6C403D0F
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28112.roa
Signing time:             Tue 04 Feb 2025 18:02:41 +0000
ROA not before:           Tue 04 Feb 2025 17:57:41 +0000
ROA not after:            Tue 03 Feb 2026 18:02:41 +0000
asID:                     28112
IP address blocks:        200.46.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6c:dc:b7:2f:42:fe:1c:04:c2:31:ca:f3:5b:b7:7d:6c:40:3d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Feb  4 17:57:41 2025 GMT
            Not After : Feb  3 18:02:41 2026 GMT
        Subject: CN=04D3D0F18CA6935CCDC80F68DB388CD5C948C8F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:f4:f6:44:3b:c1:26:6d:6c:f2:d4:da:ef:
                    c6:7e:09:8e:43:62:55:b3:df:9a:aa:01:cc:e7:5c:
                    c8:a2:61:a2:ec:62:1a:1e:46:b6:87:e8:4d:22:ad:
                    c6:77:28:d7:86:16:97:51:4c:5e:57:fd:fd:9e:5f:
                    e3:1d:f2:d8:0d:da:af:46:ca:b9:37:a5:c3:7a:34:
                    f7:c8:87:36:9f:38:6a:be:d5:b4:4c:2f:b7:b9:1e:
                    61:f9:9b:22:31:ce:26:52:7c:cf:7a:3b:08:65:40:
                    2e:59:39:bc:37:31:8d:30:1a:ab:60:b6:e7:3b:fa:
                    98:ff:f4:f2:e8:4d:fd:63:6c:70:2d:86:86:e7:40:
                    5a:40:a2:07:b9:3d:b9:03:47:79:75:bc:70:3e:0a:
                    27:ca:e7:a6:4b:dd:d7:f0:1e:62:40:7e:38:f7:0d:
                    e3:aa:e3:b8:cb:0f:00:17:44:87:0d:84:46:8f:8e:
                    ac:e9:84:46:22:99:38:61:60:ed:61:61:de:62:f2:
                    0a:70:7a:f4:62:eb:89:6a:57:01:2e:0b:fd:a4:ae:
                    e5:71:92:b2:f5:46:fc:c1:31:ba:30:f0:99:e4:aa:
                    8a:94:d0:d9:c3:12:83:38:c5:15:0e:cb:11:1c:bb:
                    d8:57:d5:7b:d4:50:9c:9a:7a:0b:0a:3a:d3:3a:44:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D3:D0:F1:8C:A6:93:5C:CD:C8:0F:68:DB:38:8C:D5:C9:48:C8:F4
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:35:52:d6:15:02:28:68:a5:3a:6d:a9:16:07:e4:e5:59:33:
         16:8a:35:9e:0b:8e:71:7c:e1:ec:b9:f2:54:f9:2d:02:c2:82:
         a9:f6:1b:d3:56:e9:a4:b8:59:7f:ff:ce:7c:75:1b:30:24:4b:
         0b:a0:17:4a:ba:8c:d9:f4:3c:44:f1:c8:3e:e3:fc:52:44:38:
         01:df:24:84:6c:0b:72:25:f0:35:73:61:fc:8b:99:b1:d4:14:
         80:ff:4d:ff:45:ac:71:f4:b1:28:5d:c6:c2:38:a5:17:1d:b5:
         e9:19:0a:c3:99:db:2a:81:a2:63:4e:d0:93:95:6b:36:e7:cc:
         70:63:e3:b2:c9:3a:0b:69:ce:cc:11:30:2a:a6:a3:56:20:60:
         ea:2a:d9:fe:c5:e8:52:18:ed:80:fd:18:88:15:fe:aa:7a:41:
         fd:68:d4:da:fd:ef:82:1b:d7:1c:e9:03:e7:9c:3b:ea:fa:b9:
         dd:48:57:71:7c:93:0a:83:9f:0e:b0:07:c7:88:90:ff:64:e0:
         a0:01:08:20:b9:c1:39:61:50:52:b3:51:35:e8:dc:29:80:40:
         e1:cb:8c:28:21:2d:b8:c6:b7:a1:87:b1:c9:a2:f3:25:dc:65:
         9e:cd:72:9f:8f:a7:f9:4d:2e:58:48:2a:d6:ef:be:08:7a:90:
         0d:14:92:9f
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUeGzcty9C/hwEwjHK81u3fWxAPQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxNThCRTYxQ0E5MTFCQzM0QTg4NzAwNUI5NjA1NkY0
QzQ3NEIxRTAeFw0yNTAyMDQxNzU3NDFaFw0yNjAyMDMxODAyNDFaMDMxMTAvBgNV
BAMTKDA0RDNEMEYxOENBNjkzNUNDREM4MEY2OERCMzg4Q0Q1Qzk0OEM4RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZPT2RDvBJm1s8tTa78Z+CY5D
YlWz35qqAcznXMiiYaLsYhoeRraH6E0ircZ3KNeGFpdRTF5X/f2eX+Md8tgN2q9G
yrk3pcN6NPfIhzafOGq+1bRML7e5HmH5myIxziZSfM96OwhlQC5ZObw3MY0wGqtg
tuc7+pj/9PLoTf1jbHAthobnQFpAoge5PbkDR3l1vHA+CifK56ZL3dfwHmJAfjj3
DeOq47jLDwAXRIcNhEaPjqzphEYimThhYO1hYd5i8gpwevRi64lqVwEuC/2kruVx
krL1RvzBMbow8JnkqoqU0NnDEoM4xRUOyxEcu9hX1XvUUJyaegsKOtM6RAHhAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUBNPQ8Yymk1zNyA9o2ziM1clIyPQwHwYDVR0j
BBgwFoAUXRWL5hypEbw0qIcAW5YFb0xHSx4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZD
MjkzMjhCMEJGRUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvNUQxNThCRTYxQ0E5MTFC
QzM0QTg4NzAwNUI5NjA1NkY0QzQ3NEIxRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDE1OEJFNjFDQTkxMUJDMzRB
ODg3MDA1Qjk2MDU2RjRDNDc0QjFFLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9ENTcyRUEyNjU5NzE1QjNCMDAyQjkyMjVBMTUyOTYwOEZDMjkzMjhCMEJG
RUQ3OTU4Mzc5QThFRjlEMDA2RUY1LzAvQVMyODExMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMguDDAN
BgkqhkiG9w0BAQsFAAOCAQEAdzVS1hUCKGilOm2pFgfk5VkzFoo1nguOcXzh7Lny
VPktAsKCqfYb01bppLhZf//OfHUbMCRLC6AXSrqM2fQ8RPHIPuP8UkQ4Ad8khGwL
ciXwNXNh/IuZsdQUgP9N/0WscfSxKF3GwjilFx216RkKw5nbKoGiY07Qk5VrNufM
cGPjssk6C2nOzBEwKqajViBg6irZ/sXoUhjtgP0YiBX+qnpB/WjU2v3vghvXHOkD
55w76vq53UhXcXyTCoOfDrAHx4iQ/2TgoAEIILnBOWFQUrNRNejcKYBA4cuMKCEt
uMa3oYexyaLzJdxlns1yn4+n+U0uWEgq1u++CHqQDRSSnw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:29 2025 by rpki-client