Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3230382e302f32302d3234203d3e203136363239.roa
File:                     3230302e39302e3230382e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          oX5AqiYY91Fd1McFy5pYFT4ytTLYZbtYxZybnKHDsWw=
Subject key identifier:   83:BE:1F:34:00:FB:E2:2C:C0:7A:11:59:90:EE:C2:2F:57:B7:90:09
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       7901E7B90E063EDF003CB9977D34C620D007AFB1
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3230382e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:29:45 +0000
ROA not before:           Tue 04 Feb 2025 18:24:45 +0000
ROA not after:            Tue 03 Feb 2026 18:29:45 +0000
asID:                     16629
IP address blocks:        200.90.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:01:e7:b9:0e:06:3e:df:00:3c:b9:97:7d:34:c6:20:d0:07:af:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:24:45 2025 GMT
            Not After : Feb  3 18:29:45 2026 GMT
        Subject: CN=83BE1F3400FBE22CC07A115990EEC22F57B79009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:1f:46:26:5b:e1:7a:06:3b:fd:d0:4c:7d:
                    7f:7b:23:3f:7c:d2:ac:1b:c3:16:00:15:53:49:23:
                    a1:6e:91:1d:ba:66:20:8d:83:38:3e:e8:9e:b0:dd:
                    9e:6c:ec:ce:78:a8:d8:cd:c5:ee:0e:e0:37:06:cf:
                    88:af:53:dd:66:2f:9f:0d:5e:11:1a:96:67:0f:e3:
                    83:0d:c2:31:5e:eb:47:70:7c:53:f2:51:78:39:5b:
                    0c:ab:e3:68:ea:3e:8b:14:a9:17:90:c7:8b:10:2e:
                    1a:f5:19:ba:d8:63:73:01:cd:a6:23:2b:c5:0b:dc:
                    3e:52:ce:3d:ea:1d:c1:13:c0:69:55:9a:b7:80:86:
                    c8:7f:3e:ab:e1:e6:c3:69:ac:3f:0e:ab:51:42:72:
                    3a:8b:8c:3d:d1:21:09:5e:a9:3c:91:62:10:85:2e:
                    02:24:15:1c:6d:dc:fd:33:e0:bb:e5:25:b6:25:1f:
                    bc:3d:e0:ab:21:33:97:17:da:01:38:9a:a9:fe:2f:
                    80:39:5f:a2:b7:71:19:4d:4b:cc:4c:22:84:d7:ce:
                    0c:be:23:b5:7b:b6:2a:53:10:42:fb:a3:44:35:fa:
                    f7:48:00:1b:47:ac:ed:9f:90:a4:b9:f8:1f:5d:2d:
                    e4:99:9a:45:6c:1c:c7:fe:70:92:51:99:17:f4:26:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BE:1F:34:00:FB:E2:2C:C0:7A:11:59:90:EE:C2:2F:57:B7:90:09
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3230382e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:ca:31:ce:31:8c:92:53:8d:38:70:e1:09:0b:b8:b3:c6:3a:
         31:bb:cc:3f:43:5f:74:1c:ec:ff:98:4a:79:7a:8a:13:3c:0b:
         d4:40:74:ad:e2:9b:95:c3:64:ae:6c:8c:d8:e8:91:5d:85:66:
         62:a3:d0:33:17:63:77:0e:9d:4a:54:6d:a9:d3:62:3d:b8:71:
         ea:02:5a:d4:a4:36:ac:ed:d8:19:63:7d:b4:74:44:81:74:f6:
         aa:88:dd:c3:ac:d1:34:a2:a3:88:2e:23:e6:0e:f2:7e:3e:3a:
         a5:ba:92:9c:40:af:04:d4:c0:3a:6e:e0:21:03:68:dc:28:1c:
         94:f9:4c:e3:64:21:02:ed:9e:07:8b:89:52:69:f8:cc:0e:4d:
         2c:69:bc:df:1c:99:94:ec:03:4d:09:e5:07:15:3f:95:b6:cc:
         51:6c:28:4d:96:0a:d2:8b:ef:28:c2:c7:dd:49:08:0f:95:96:
         5a:5e:1c:93:19:af:90:bf:1f:d1:0b:be:81:3b:da:5c:9b:e7:
         41:f4:b0:48:ee:3f:67:62:25:dc:81:c1:0a:ce:a0:cd:3b:e4:
         54:90:0c:cb:74:46:91:c2:95:dd:0e:a5:04:45:f5:2e:b1:56:
         33:b9:ba:3a:8a:95:01:eb:9a:7c:d7:31:7a:76:1e:0c:3e:10:
         9e:3b:5e:f4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeQHnuQ4GPt8APLmXfTTGINAHr7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNTAyMDQxODI0NDVaFw0yNjAyMDMxODI5NDVaMDMxMTAvBgNV
BAMTKDgzQkUxRjM0MDBGQkUyMkNDMDdBMTE1OTkwRUVDMjJGNTdCNzkwMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIwR9GJlvhegY7/dBMfX97Iz98
0qwbwxYAFVNJI6FukR26ZiCNgzg+6J6w3Z5s7M54qNjNxe4O4DcGz4ivU91mL58N
XhEalmcP44MNwjFe60dwfFPyUXg5Wwyr42jqPosUqReQx4sQLhr1GbrYY3MBzaYj
K8UL3D5Szj3qHcETwGlVmreAhsh/Pqvh5sNprD8Oq1FCcjqLjD3RIQleqTyRYhCF
LgIkFRxt3P0z4LvlJbYlH7w94KshM5cX2gE4mqn+L4A5X6K3cRlNS8xMIoTXzgy+
I7V7tipTEEL7o0Q1+vdIABtHrO2fkKS5+B9dLeSZmkVsHMf+cJJRmRf0Jp0FAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUg74fNAD74izAehFZkO7CL1e3kAkwHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzkzMDJlMzIzMDM4MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzNjM2MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMha0DAN
BgkqhkiG9w0BAQsFAAOCAQEAG8oxzjGMklONOHDhCQu4s8Y6MbvMP0NfdBzs/5hK
eXqKEzwL1EB0reKblcNkrmyM2OiRXYVmYqPQMxdjdw6dSlRtqdNiPbhx6gJa1KQ2
rO3YGWN9tHREgXT2qojdw6zRNKKjiC4j5g7yfj46pbqSnECvBNTAOm7gIQNo3Cgc
lPlM42QhAu2eB4uJUmn4zA5NLGm83xyZlOwDTQnlBxU/lbbMUWwoTZYK0ovvKMLH
3UkID5WWWl4ckxmvkL8f0Qu+gTvaXJvnQfSwSO4/Z2Il3IHBCs6gzTvkVJAMy3RG
kcKV3Q6lBEX1LrFWM7m6OoqVAeuafNcxenYeDD4Qnjte9A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:32 2025 by rpki-client