Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/3230302e3231392e342e302f32322d3232203d3e20323730303636.roa
File:                     3230302e3231392e342e302f32322d3232203d3e20323730303636.roa (raw, json)
Hash identifier:          tzAVH4mNaq8UtO+uOpWepKfDODw13zfMHvcGQW0cnj4=
Subject key identifier:   14:6C:25:D1:58:A6:E8:9A:5F:92:A5:E8:1B:7E:36:22:CA:4A:9B:5A
Certificate issuer:       /CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
Certificate serial:       553A9B56D810926BF086A1113955AF8253506B2A
Authority key identifier: 52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/3230302e3231392e342e302f32322d3232203d3e20323730303636.roa
Signing time:             Tue 04 Feb 2025 18:23:04 +0000
ROA not before:           Tue 04 Feb 2025 18:18:04 +0000
ROA not after:            Tue 03 Feb 2026 18:23:04 +0000
asID:                     270066
IP address blocks:        200.219.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3a:9b:56:d8:10:92:6b:f0:86:a1:11:39:55:af:82:53:50:6b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
        Validity
            Not Before: Feb  4 18:18:04 2025 GMT
            Not After : Feb  3 18:23:04 2026 GMT
        Subject: CN=146C25D158A6E89A5F92A5E81B7E3622CA4A9B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:4f:cc:91:61:b7:cb:eb:cf:6b:b6:14:a8:
                    5e:7a:27:3c:e3:69:69:1f:97:b2:b9:6a:95:ce:9a:
                    bc:5e:c6:7e:2a:78:7d:4e:3c:39:fe:9e:d1:af:6f:
                    67:fe:2c:8a:14:70:d7:5e:c3:83:91:54:a7:69:f5:
                    1b:10:fa:a4:fa:ba:40:de:09:9f:88:2c:4a:47:41:
                    94:85:b6:57:92:8f:df:28:80:e3:1f:4d:3f:4a:ec:
                    63:f8:33:b2:0d:c6:ec:f3:c6:4d:ea:55:85:16:6d:
                    ef:87:ae:98:ca:53:3e:02:a9:73:c9:7e:f9:38:82:
                    2c:23:15:49:b9:7e:ed:cf:0e:57:d5:23:fa:70:b3:
                    64:d4:14:0b:6b:42:80:04:ca:55:bf:35:8e:31:39:
                    61:45:63:f9:7a:b9:1b:86:12:8d:fd:52:47:19:57:
                    5e:37:95:a8:17:4a:49:3a:e4:a3:34:77:3c:32:5f:
                    a9:6a:f4:6e:30:3b:07:b8:f7:fe:02:8c:8f:cb:85:
                    2f:63:db:0b:e0:36:b5:69:08:b3:32:4c:48:f3:aa:
                    5f:27:01:9d:c4:d8:49:e3:55:40:62:0e:57:c2:0a:
                    98:61:07:dd:14:68:24:a1:08:89:7b:80:e1:6a:20:
                    a9:62:47:e7:92:a6:f9:ef:3d:75:4c:1a:0f:26:8d:
                    bc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6C:25:D1:58:A6:E8:9A:5F:92:A5:E8:1B:7E:36:22:CA:4A:9B:5A
            X509v3 Authority Key Identifier:
                keyid:52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/3230302e3231392e342e302f32322d3232203d3e20323730303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:0f:82:21:f3:82:88:a7:a8:84:00:1c:05:b7:57:30:a9:48:
         2c:12:71:06:a9:25:2f:98:60:49:8b:38:4b:d2:f1:46:39:23:
         58:6d:25:06:94:12:4f:0c:0d:57:91:86:9a:4f:79:12:34:f5:
         72:3e:a6:db:bc:9a:d6:91:e8:05:31:0b:88:f3:c8:af:5a:be:
         89:0d:f7:5b:54:40:9f:4c:c9:72:81:b2:b9:f9:9a:35:c6:a2:
         f9:f5:0f:aa:95:bf:09:8e:72:10:25:b1:74:56:42:a5:90:48:
         d2:22:f4:cd:64:70:49:85:04:2a:2f:b8:01:4f:06:60:f4:4c:
         90:62:6e:f9:4c:9b:d4:89:f9:52:59:1a:3c:46:75:60:93:76:
         a9:48:d9:57:32:76:85:d7:8b:cd:db:af:bf:68:0e:dc:93:60:
         1f:24:e1:fd:1a:1e:f0:b2:f5:70:75:53:d0:03:de:b9:9c:56:
         f6:47:78:a1:40:a7:95:23:3f:f1:6b:8e:05:95:d1:d2:76:8f:
         67:83:37:11:2a:d3:74:05:e1:6a:f2:f5:63:31:9d:93:a6:03:
         20:51:c7:99:b5:06:bb:b6:ba:e5:95:c9:f9:b3:01:bd:6d:67:
         60:03:87:30:c3:25:74:71:ae:7b:5f:cc:97:a3:b3:56:b3:b0:
         92:90:bb:57
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVTqbVtgQkmvwhqEROVWvglNQayowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJDMzNBMUJBOTAxNURCNEU1MEQwN0QzQTM1RTkzMTgy
N0ZGQUM0MTAeFw0yNTAyMDQxODE4MDRaFw0yNjAyMDMxODIzMDRaMDMxMTAvBgNV
BAMTKDE0NkMyNUQxNThBNkU4OUE1RjkyQTVFODFCN0UzNjIyQ0E0QTlCNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRk/MkWG3y+vPa7YUqF56Jzzj
aWkfl7K5apXOmrxexn4qeH1OPDn+ntGvb2f+LIoUcNdew4ORVKdp9RsQ+qT6ukDe
CZ+ILEpHQZSFtleSj98ogOMfTT9K7GP4M7INxuzzxk3qVYUWbe+HrpjKUz4CqXPJ
fvk4giwjFUm5fu3PDlfVI/pws2TUFAtrQoAEylW/NY4xOWFFY/l6uRuGEo39UkcZ
V143lagXSkk65KM0dzwyX6lq9G4wOwe49/4CjI/LhS9j2wvgNrVpCLMyTEjzql8n
AZ3E2EnjVUBiDlfCCphhB90UaCShCIl7gOFqIKliR+eSpvnvPXVMGg8mjbz/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUFGwl0Vim6JpfkqXoG342IspKm1owHwYDVR0j
BBgwFoAUUsM6G6kBXbTlDQfTo16TGCf/rEEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNEU5OTc1OUFDRjAxM0VBMTY2RjBEQTkwREJFNjNGMzBG
QUI2NENDRjEzMTBENUYwRkE2OTI3MUIzNUQ4NUFDLzAvNTJDMzNBMUJBOTAxNURC
NEU1MEQwN0QzQTM1RTkzMTgyN0ZGQUM0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MkMzM0ExQkE5MDE1REI0RTUw
RDA3RDNBMzVFOTMxODI3RkZBQzQxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTRFOTk3NTlBQ0YwMTNFQTE2NkYwREE5MERCRTYzRjMwRkFCNjRDQ0Yx
MzEwRDVGMEZBNjkyNzFCMzVEODVBQy8wLzMyMzAzMDJlMzIzMTM5MmUzNDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzczMDMwMzYzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsjbBDAN
BgkqhkiG9w0BAQsFAAOCAQEAWQ+CIfOCiKeohAAcBbdXMKlILBJxBqklL5hgSYs4
S9LxRjkjWG0lBpQSTwwNV5GGmk95EjT1cj6m27ya1pHoBTELiPPIr1q+iQ33W1RA
n0zJcoGyufmaNcai+fUPqpW/CY5yECWxdFZCpZBI0iL0zWRwSYUEKi+4AU8GYPRM
kGJu+Uyb1In5UlkaPEZ1YJN2qUjZVzJ2hdeLzduvv2gO3JNgHyTh/Roe8LL1cHVT
0APeuZxW9kd4oUCnlSM/8WuOBZXR0naPZ4M3ESrTdAXhavL1YzGdk6YDIFHHmbUG
u7a65ZXJ+bMBvW1nYAOHMMMldHGue1/Ml6OzVrOwkpC7Vw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:13:33 2025 by rpki-client