Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/3230302e392e3235352e302f32342d3234203d3e203237393333.roa
File:                     3230302e392e3235352e302f32342d3234203d3e203237393333.roa (raw, json)
Hash identifier:          KsGi4FlQ+sU7luMACclHUplbIfSCxNSOsFkvSAv1QQA=
Subject key identifier:   D2:54:B0:48:F2:F9:5B:DA:0E:DF:9B:6E:45:C4:ED:83:EA:9E:79:58
Certificate issuer:       /CN=5844C567E7B04876831F61CC7D4A348645F6A0F2
Certificate serial:       0D5F47CB209176F6C7D7D3A95C2DCB876D70261B
Authority key identifier: 58:44:C5:67:E7:B0:48:76:83:1F:61:CC:7D:4A:34:86:45:F6:A0:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/3230302e392e3235352e302f32342d3234203d3e203237393333.roa
Signing time:             Tue 04 Feb 2025 18:04:08 +0000
ROA not before:           Tue 04 Feb 2025 17:59:08 +0000
ROA not after:            Tue 03 Feb 2026 18:04:08 +0000
asID:                     27933
IP address blocks:        200.9.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5f:47:cb:20:91:76:f6:c7:d7:d3:a9:5c:2d:cb:87:6d:70:26:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5844C567E7B04876831F61CC7D4A348645F6A0F2
        Validity
            Not Before: Feb  4 17:59:08 2025 GMT
            Not After : Feb  3 18:04:08 2026 GMT
        Subject: CN=D254B048F2F95BDA0EDF9B6E45C4ED83EA9E7958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:78:ec:38:3e:f1:43:99:e4:6c:84:d7:68:0f:
                    13:77:2d:28:58:25:02:d9:62:5e:79:52:f6:17:af:
                    9c:4c:a8:f6:5a:51:dd:31:ec:ca:ca:ef:81:c2:91:
                    b7:4d:5a:2a:9d:9e:5e:56:b0:f9:e0:75:0e:f7:3e:
                    55:bd:32:75:5e:52:1d:e1:d2:e0:2e:ae:d6:50:34:
                    e7:39:54:27:b0:23:9e:33:0c:e1:f0:d6:49:91:ec:
                    45:10:5d:b7:4e:70:23:ab:c3:a0:00:8f:d3:e4:d7:
                    48:aa:c1:aa:8b:cb:83:ff:27:04:6a:4f:3d:7d:f3:
                    fc:0c:83:cc:70:d0:b6:e0:59:b6:09:a2:e3:35:5a:
                    41:ea:83:0f:95:6a:aa:c4:4a:c8:ae:9f:bc:bf:ad:
                    4a:87:5b:ac:df:4f:44:ca:72:44:ed:5f:2f:e9:08:
                    f7:1e:cd:8d:0f:6e:75:e9:1b:e4:89:e7:6e:14:23:
                    c5:61:47:d1:90:bd:13:68:ec:e5:a9:c5:b1:7b:ab:
                    42:db:0e:c6:3c:2e:19:82:83:96:c1:98:ea:48:4c:
                    1b:87:ea:15:4c:71:12:60:e6:a8:43:90:f1:e2:12:
                    b4:c0:81:5c:18:ae:e3:68:ac:de:53:47:e6:c2:14:
                    26:2c:cd:01:8a:aa:5a:50:af:40:bd:32:d3:77:80:
                    87:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:54:B0:48:F2:F9:5B:DA:0E:DF:9B:6E:45:C4:ED:83:EA:9E:79:58
            X509v3 Authority Key Identifier:
                keyid:58:44:C5:67:E7:B0:48:76:83:1F:61:CC:7D:4A:34:86:45:F6:A0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5844C567E7B04876831F61CC7D4A348645F6A0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF75230CAC6707B558E73C8849D692CBFBBBEED2D16C6C4F21A11E600C91E4AA/0/3230302e392e3235352e302f32342d3234203d3e203237393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:82:2f:c5:23:9b:5a:56:99:57:af:25:c7:23:d3:69:ac:1c:
         fc:9c:d7:53:55:72:7c:d3:2d:2a:e4:8c:2f:d1:1d:59:27:af:
         20:27:b5:91:dc:09:ad:b3:02:25:39:8c:83:df:b2:7c:44:8f:
         4a:ea:96:60:5c:f2:16:a6:a1:27:fa:ab:b4:e0:4e:1a:f9:8b:
         42:d4:26:a8:e4:b7:54:6f:76:52:33:b8:d8:ae:02:27:35:ec:
         4f:87:c7:ff:99:7d:28:00:6c:a1:72:90:3c:10:5d:77:22:c8:
         4c:a5:30:5a:a3:fa:2d:bc:01:a3:97:1f:f2:7c:90:ea:32:cf:
         39:da:4c:51:7b:82:60:90:36:15:18:f9:08:59:61:cb:61:48:
         63:ba:ff:03:03:8b:2b:f8:9b:c7:d0:1f:bf:b3:ef:51:0b:9d:
         e7:f7:f6:d9:3a:94:86:47:d7:7c:f9:6a:f6:f7:4d:32:ed:66:
         73:d5:ee:65:3c:19:2d:24:1d:8a:d1:c8:9f:cc:ed:99:23:44:
         96:8d:83:cf:e1:f5:9b:34:a0:a6:fe:9e:24:fa:5a:c0:1d:43:
         08:ed:7d:58:1f:fb:7a:c8:97:be:51:72:e2:55:6a:68:39:be:
         c7:26:bc:5e:10:10:4e:e9:4f:01:15:66:93:dd:b9:50:f1:86:
         8d:71:5b:04
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUDV9HyyCRdvbH19OpXC3Lh21wJhswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg0NEM1NjdFN0IwNDg3NjgzMUY2MUNDN0Q0QTM0ODY0
NUY2QTBGMjAeFw0yNTAyMDQxNzU5MDhaFw0yNjAyMDMxODA0MDhaMDMxMTAvBgNV
BAMTKEQyNTRCMDQ4RjJGOTVCREEwRURGOUI2RTQ1QzRFRDgzRUE5RTc5NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmeOw4PvFDmeRshNdoDxN3LShY
JQLZYl55UvYXr5xMqPZaUd0x7MrK74HCkbdNWiqdnl5WsPngdQ73PlW9MnVeUh3h
0uAurtZQNOc5VCewI54zDOHw1kmR7EUQXbdOcCOrw6AAj9Pk10iqwaqLy4P/JwRq
Tz198/wMg8xw0LbgWbYJouM1WkHqgw+VaqrESsiun7y/rUqHW6zfT0TKckTtXy/p
CPcezY0PbnXpG+SJ524UI8VhR9GQvRNo7OWpxbF7q0LbDsY8LhmCg5bBmOpITBuH
6hVMcRJg5qhDkPHiErTAgVwYruNorN5TR+bCFCYszQGKqlpQr0C9MtN3gIenAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU0lSwSPL5W9oO35tuRcTtg+qeeVgwHwYDVR0j
BBgwFoAUWETFZ+ewSHaDH2HMfUo0hkX2oPIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjc1MjMwQ0FDNjcwN0I1NThFNzNDODg0OUQ2OTJDQkZC
QkJFRUQyRDE2QzZDNEYyMUExMUU2MDBDOTFFNEFBLzAvNTg0NEM1NjdFN0IwNDg3
NjgzMUY2MUNDN0Q0QTM0ODY0NUY2QTBGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81ODQ0QzU2N0U3QjA0ODc2ODMx
RjYxQ0M3RDRBMzQ4NjQ1RjZBMEYyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY3NTIzMENBQzY3MDdCNTU4RTczQzg4NDlENjkyQ0JGQkJCRUVEMkQx
NkM2QzRGMjFBMTFFNjAwQzkxRTRBQS8wLzMyMzAzMDJlMzkyZTMyMzUzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczOTMzMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADICf8wDQYJ
KoZIhvcNAQELBQADggEBAKCCL8Ujm1pWmVevJccj02msHPyc11NVcnzTLSrkjC/R
HVknryAntZHcCa2zAiU5jIPfsnxEj0rqlmBc8hamoSf6q7TgThr5i0LUJqjkt1Rv
dlIzuNiuAic17E+Hx/+ZfSgAbKFykDwQXXciyEylMFqj+i28AaOXH/J8kOoyzzna
TFF7gmCQNhUY+QhZYcthSGO6/wMDiyv4m8fQH7+z71ELnef39tk6lIZH13z5avb3
TTLtZnPV7mU8GS0kHYrRyJ/M7ZkjRJaNg8/h9Zs0oKb+niT6WsAdQwjtfVgf+3rI
l75RcuJVamg5vscmvF4QEE7pTwEVZpPduVDxho1xWwQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:56:57 2025 by rpki-client