Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32332d3233203d3e203332303938.roa
File:                     3230302e32332e3136382e302f32332d3233203d3e203332303938.roa (raw, json)
Hash identifier:          T92YD7mc4Rzyo4Sq5sENK3yFG6M7UYWRKlYDVZDXNXo=
Subject key identifier:   2F:4B:4B:BC:D2:35:E7:69:1A:82:18:7C:F7:97:5D:D5:38:7C:03:A8
Certificate issuer:       /CN=DA9CE332EEAB17EF6270B269990D948099DD5049
Certificate serial:       7B78264658C120E2BD0CAEB501C52A0DD96E342B
Authority key identifier: DA:9C:E3:32:EE:AB:17:EF:62:70:B2:69:99:0D:94:80:99:DD:50:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32332d3233203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:10:14 +0000
ROA not before:           Tue 04 Feb 2025 18:05:14 +0000
ROA not after:            Tue 03 Feb 2026 18:10:14 +0000
asID:                     32098
IP address blocks:        200.23.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:78:26:46:58:c1:20:e2:bd:0c:ae:b5:01:c5:2a:0d:d9:6e:34:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9CE332EEAB17EF6270B269990D948099DD5049
        Validity
            Not Before: Feb  4 18:05:14 2025 GMT
            Not After : Feb  3 18:10:14 2026 GMT
        Subject: CN=2F4B4BBCD235E7691A82187CF7975DD5387C03A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:63:2a:75:8e:49:47:ab:16:6a:7e:3e:48:
                    8d:8b:ec:76:84:d2:6a:d3:fd:8d:b3:83:6d:aa:ca:
                    4d:85:26:7d:9d:4d:86:9d:a6:f7:32:7a:ac:67:37:
                    be:8f:88:99:80:6e:92:6d:6f:7b:7a:aa:4b:d3:e0:
                    7b:41:f0:5b:d0:9a:ef:d3:a2:1f:6c:91:08:71:3b:
                    93:b5:52:2a:f9:d2:27:8f:2e:6b:92:a9:c6:2e:ae:
                    c9:01:d2:77:12:a5:90:74:9d:dd:fa:e7:a5:74:6c:
                    2f:8d:63:1e:0e:51:97:1f:70:d1:7c:62:80:82:9f:
                    84:8c:1c:26:20:da:b8:92:b7:a4:4d:a4:33:05:56:
                    93:d7:44:e8:70:31:7b:25:7b:a7:3e:8a:fb:5b:66:
                    c7:22:23:94:8d:03:b6:68:77:95:67:53:5e:a3:bd:
                    b4:38:a6:da:16:a7:3a:f8:e7:a4:32:5f:ae:2a:e3:
                    40:c2:26:ba:53:13:7b:01:06:c3:8f:fa:73:1a:b1:
                    26:21:9d:78:3c:99:0b:81:5e:d8:f5:b0:6b:25:9d:
                    71:e0:ee:5a:c9:d7:44:ec:44:3b:05:9d:bf:6b:4e:
                    b8:66:77:51:8a:79:45:ce:54:1d:5f:05:22:65:35:
                    6a:48:ab:62:2b:ab:9c:85:cb:01:5f:e6:f3:d0:7c:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4B:4B:BC:D2:35:E7:69:1A:82:18:7C:F7:97:5D:D5:38:7C:03:A8
            X509v3 Authority Key Identifier:
                keyid:DA:9C:E3:32:EE:AB:17:EF:62:70:B2:69:99:0D:94:80:99:DD:50:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32332d3233203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:e4:5f:b5:78:91:34:8f:0b:ce:24:b4:71:3a:f2:c3:63:ed:
         8a:9f:bf:fb:cb:c0:af:39:6e:71:26:00:4b:ef:7b:dc:7d:71:
         71:8a:fb:fd:ba:8c:08:80:4b:ef:c8:59:62:8d:56:41:09:69:
         6f:39:a3:d9:37:a6:c5:6b:63:1f:12:04:89:95:18:93:0a:d8:
         25:7b:dd:08:a6:2d:b1:25:98:22:e9:3c:94:67:67:db:ac:de:
         58:e6:25:83:9b:18:e8:d0:32:a9:f1:a4:e3:ae:0e:9b:d2:d3:
         f0:b6:d4:f8:f5:ea:fa:04:88:a1:61:be:3a:75:98:04:de:38:
         57:3e:0c:67:e6:db:bd:31:db:02:9e:ec:2c:16:b6:c4:e1:93:
         a1:29:36:61:6d:3a:ab:d3:d5:d6:a7:49:0f:26:88:28:f9:70:
         28:be:2b:36:3f:90:bc:52:3d:c8:3a:bc:86:f2:c4:66:55:8e:
         2b:7b:62:54:57:9e:c8:df:7f:1c:92:16:50:a9:4b:fd:b7:f2:
         a0:db:fa:b6:3b:7e:94:75:b5:34:e4:60:7c:85:02:6b:e9:f3:
         83:10:2b:1e:7b:28:1d:d9:a3:1b:ef:11:34:eb:14:06:e1:3c:
         6c:22:ce:6f:10:2b:38:5d:8a:06:aa:5f:7a:c7:63:ae:f9:d2:
         16:10:99:fb
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUe3gmRljBIOK9DK61AcUqDdluNCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE5Q0UzMzJFRUFCMTdFRjYyNzBCMjY5OTkwRDk0ODA5
OURENTA0OTAeFw0yNTAyMDQxODA1MTRaFw0yNjAyMDMxODEwMTRaMDMxMTAvBgNV
BAMTKDJGNEI0QkJDRDIzNUU3NjkxQTgyMTg3Q0Y3OTc1REQ1Mzg3QzAzQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+m2MqdY5JR6sWan4+SI2L7HaE
0mrT/Y2zg22qyk2FJn2dTYadpvcyeqxnN76PiJmAbpJtb3t6qkvT4HtB8FvQmu/T
oh9skQhxO5O1Uir50iePLmuSqcYurskB0ncSpZB0nd3656V0bC+NYx4OUZcfcNF8
YoCCn4SMHCYg2riSt6RNpDMFVpPXROhwMXsle6c+ivtbZsciI5SNA7Zod5VnU16j
vbQ4ptoWpzr456QyX64q40DCJrpTE3sBBsOP+nMasSYhnXg8mQuBXtj1sGslnXHg
7lrJ10TsRDsFnb9rTrhmd1GKeUXOVB1fBSJlNWpIq2Irq5yFywFf5vPQfOE5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUL0tLvNI152kaghh895dd1Th8A6gwHwYDVR0j
BBgwFoAU2pzjMu6rF+9icLJpmQ2UgJndUEkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTk5RDNBNjg4NDJGOTlGQkI1OTdGMzhCMkMzRUJGQUVF
ODA0RDYxRDYwMDg2M0NFNjc5N0YyNTM0ODRDNDVCLzAvREE5Q0UzMzJFRUFCMTdF
RjYyNzBCMjY5OTkwRDk0ODA5OURENTA0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTlDRTMzMkVFQUIxN0VGNjI3
MEIyNjk5OTBEOTQ4MDk5REQ1MDQ5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk5OUQzQTY4ODQyRjk5RkJCNTk3RjM4QjJDM0VCRkFFRTgwNEQ2MUQ2
MDA4NjNDRTY3OTdGMjUzNDg0QzQ1Qi8wLzMyMzAzMDJlMzIzMzJlMzEzNjM4MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzMjMwMzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcgXqDAN
BgkqhkiG9w0BAQsFAAOCAQEAoORftXiRNI8LziS0cTryw2Ptip+/+8vArzlucSYA
S+973H1xcYr7/bqMCIBL78hZYo1WQQlpbzmj2TemxWtjHxIEiZUYkwrYJXvdCKYt
sSWYIuk8lGdn26zeWOYlg5sY6NAyqfGk464Om9LT8LbU+PXq+gSIoWG+OnWYBN44
Vz4MZ+bbvTHbAp7sLBa2xOGToSk2YW06q9PV1qdJDyaIKPlwKL4rNj+QvFI9yDq8
hvLEZlWOK3tiVFeeyN9/HJIWUKlL/bfyoNv6tjt+lHW1NORgfIUCa+nzgxArHnso
HdmjG+8RNOsUBuE8bCLObxArOF2KBqpfesdjrvnSFhCZ+w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:14 2025 by rpki-client