Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5B38E3694E6F0B50F84367522234C753FB9852F0326554F2A3C538A4DAFF57A/0/3230302e3132332e34392e302f32342d3234203d3e20323734303439.roa
File:                     3230302e3132332e34392e302f32342d3234203d3e20323734303439.roa (raw, json)
Hash identifier:          lH2WrjJVkiBNYzEiYnQLKXW7TqYZ3T2nachaHzY9Qik=
Subject key identifier:   DE:ED:BC:81:01:96:0E:45:12:4A:E8:F5:55:69:CC:EA:A6:2C:DA:C7
Certificate issuer:       /CN=FEA5D12F64C6C9C0862C8B47E65E8EA94581245A
Certificate serial:       02FA480316D4B4B3E0C4C51A99C0676896045278
Authority key identifier: FE:A5:D1:2F:64:C6:C9:C0:86:2C:8B:47:E6:5E:8E:A9:45:81:24:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEA5D12F64C6C9C0862C8B47E65E8EA94581245A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5B38E3694E6F0B50F84367522234C753FB9852F0326554F2A3C538A4DAFF57A/0/3230302e3132332e34392e302f32342d3234203d3e20323734303439.roa
Signing time:             Tue 25 Feb 2025 14:55:00 +0000
ROA not before:           Tue 25 Feb 2025 14:50:00 +0000
ROA not after:            Tue 24 Feb 2026 14:55:00 +0000
asID:                     274049
IP address blocks:        200.123.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5B38E3694E6F0B50F84367522234C753FB9852F0326554F2A3C538A4DAFF57A/0/FEA5D12F64C6C9C0862C8B47E65E8EA94581245A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5B38E3694E6F0B50F84367522234C753FB9852F0326554F2A3C538A4DAFF57A/0/FEA5D12F64C6C9C0862C8B47E65E8EA94581245A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEA5D12F64C6C9C0862C8B47E65E8EA94581245A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fa:48:03:16:d4:b4:b3:e0:c4:c5:1a:99:c0:67:68:96:04:52:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEA5D12F64C6C9C0862C8B47E65E8EA94581245A
        Validity
            Not Before: Feb 25 14:50:00 2025 GMT
            Not After : Feb 24 14:55:00 2026 GMT
        Subject: CN=DEEDBC8101960E45124AE8F55569CCEAA62CDAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:98:f0:f2:8f:a6:8f:d7:9e:02:a8:2c:f8:93:
                    81:de:42:ce:ae:0e:b4:0c:b7:47:ba:96:4e:da:43:
                    7f:ff:8e:05:23:a4:57:a5:fa:f5:39:7a:64:ca:c9:
                    8c:8d:12:dc:47:65:41:af:f6:9b:96:b0:08:93:72:
                    49:3f:d2:ee:05:ba:5f:a6:0d:4b:af:ba:a4:61:ac:
                    fa:be:41:ec:b2:22:26:a5:d4:7c:a9:ec:0c:20:11:
                    12:a8:b6:7b:c3:46:c7:58:89:a6:8a:5b:d2:f0:af:
                    38:7b:68:e1:27:02:78:1a:70:4e:d3:bc:69:02:39:
                    14:3a:10:4c:b3:63:17:c2:33:6b:67:49:e0:ab:66:
                    7f:31:4c:e4:13:de:8b:f4:bf:c3:33:56:bf:6c:72:
                    45:08:ec:fc:8b:67:8d:1c:a8:89:54:b7:d5:f7:bb:
                    a1:3c:d6:30:f6:0e:94:92:24:29:00:e2:2f:46:47:
                    5b:5a:04:c7:3f:ed:8a:f1:10:6d:ab:21:ff:bc:a2:
                    81:ef:39:e0:b9:1c:79:fc:69:03:1a:91:18:13:bc:
                    fb:1d:f6:3d:08:0e:27:ff:41:b8:9e:7c:48:32:73:
                    27:01:cb:7f:6d:aa:12:64:54:1d:73:6c:da:96:9d:
                    44:39:0d:d9:5a:f7:7d:08:7f:66:e8:ca:10:35:a8:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:ED:BC:81:01:96:0E:45:12:4A:E8:F5:55:69:CC:EA:A6:2C:DA:C7
            X509v3 Authority Key Identifier:
                keyid:FE:A5:D1:2F:64:C6:C9:C0:86:2C:8B:47:E6:5E:8E:A9:45:81:24:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5B38E3694E6F0B50F84367522234C753FB9852F0326554F2A3C538A4DAFF57A/0/FEA5D12F64C6C9C0862C8B47E65E8EA94581245A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEA5D12F64C6C9C0862C8B47E65E8EA94581245A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5B38E3694E6F0B50F84367522234C753FB9852F0326554F2A3C538A4DAFF57A/0/3230302e3132332e34392e302f32342d3234203d3e20323734303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:69:0f:90:0c:0b:3c:73:c1:96:00:a8:4d:60:35:b2:e6:03:
         d6:9e:1a:37:12:5a:ac:ff:d9:09:75:b7:ee:27:b7:24:c4:ed:
         7b:10:cc:7c:49:2d:d8:05:9d:e5:7f:0b:ea:86:14:42:84:10:
         33:6c:3c:75:e1:c8:3a:1a:d7:37:86:7f:93:20:75:8f:8a:da:
         a3:d0:d2:3d:c9:a5:65:80:f3:88:08:56:51:eb:a4:fe:f5:db:
         c7:83:f6:35:23:42:f3:bb:20:20:33:9a:56:4b:74:9f:24:fc:
         e5:98:dd:c9:c8:49:44:dd:d1:71:7e:e9:6d:22:08:5b:93:4a:
         3c:db:bb:58:95:ff:b8:bd:ef:82:84:b0:75:a2:60:df:a8:04:
         fa:f3:43:22:04:96:91:e7:7f:ed:38:0b:ab:4e:8f:a2:98:05:
         0c:8f:9c:99:7a:e7:aa:13:7a:ba:39:0b:79:71:10:91:7f:65:
         26:67:fd:92:e5:12:d6:b0:78:2f:26:7c:cf:e7:e0:0e:e6:e0:
         91:f6:5f:99:23:8d:a4:2b:20:d2:ea:1b:62:65:e7:15:b7:b8:
         58:57:fe:6c:50:b9:1f:bb:9b:20:b4:65:83:16:3f:93:4b:0b:
         ed:73:d5:6c:e4:2d:9b:f6:92:98:9e:9e:01:af:80:54:89:c7:
         32:87:94:c3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAvpIAxbUtLPgxMUamcBnaJYEUngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVBNUQxMkY2NEM2QzlDMDg2MkM4QjQ3RTY1RThFQTk0
NTgxMjQ1QTAeFw0yNTAyMjUxNDUwMDBaFw0yNjAyMjQxNDU1MDBaMDMxMTAvBgNV
BAMTKERFRURCQzgxMDE5NjBFNDUxMjRBRThGNTU1NjlDQ0VBQTYyQ0RBQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXmPDyj6aP154CqCz4k4HeQs6u
DrQMt0e6lk7aQ3//jgUjpFel+vU5emTKyYyNEtxHZUGv9puWsAiTckk/0u4Ful+m
DUuvuqRhrPq+QeyyIial1Hyp7AwgERKotnvDRsdYiaaKW9Lwrzh7aOEnAngacE7T
vGkCORQ6EEyzYxfCM2tnSeCrZn8xTOQT3ov0v8MzVr9sckUI7PyLZ40cqIlUt9X3
u6E81jD2DpSSJCkA4i9GR1taBMc/7YrxEG2rIf+8ooHvOeC5HHn8aQMakRgTvPsd
9j0IDif/QbiefEgycycBy39tqhJkVB1zbNqWnUQ5Ddla930If2boyhA1qKRxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3u28gQGWDkUSSuj1VWnM6qYs2scwHwYDVR0j
BBgwFoAU/qXRL2TGycCGLItH5l6OqUWBJFowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNUIzOEUzNjk0RTZGMEI1MEY4NDM2NzUyMjIzNEM3NTNG
Qjk4NTJGMDMyNjU1NEYyQTNDNTM4QTREQUZGNTdBLzAvRkVBNUQxMkY2NEM2QzlD
MDg2MkM4QjQ3RTY1RThFQTk0NTgxMjQ1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRUE1RDEyRjY0QzZDOUMwODYy
QzhCNDdFNjVFOEVBOTQ1ODEyNDVBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTVCMzhFMzY5NEU2RjBCNTBGODQzNjc1MjIyMzRDNzUzRkI5ODUyRjAz
MjY1NTRGMkEzQzUzOEE0REFGRjU3QS8wLzMyMzAzMDJlMzEzMjMzMmUzNDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM0MzAzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHsx
MA0GCSqGSIb3DQEBCwUAA4IBAQCgaQ+QDAs8c8GWAKhNYDWy5gPWnho3Elqs/9kJ
dbfuJ7ckxO17EMx8SS3YBZ3lfwvqhhRChBAzbDx14cg6Gtc3hn+TIHWPitqj0NI9
yaVlgPOICFZR66T+9dvHg/Y1I0LzuyAgM5pWS3SfJPzlmN3JyElE3dFxfultIghb
k0o827tYlf+4ve+ChLB1omDfqAT680MiBJaR53/tOAurTo+imAUMj5yZeueqE3q6
OQt5cRCRf2UmZ/2S5RLWsHgvJnzP5+AO5uCR9l+ZI42kKyDS6htiZecVt7hYV/5s
ULkfu5sgtGWDFj+TSwvtc9Vs5C2b9pKYnp4Br4BUiccyh5TD
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:02 2025 by rpki-client