Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/3230302e31362e39302e302f32332d3234203d3e20323632313738.roa
File:                     3230302e31362e39302e302f32332d3234203d3e20323632313738.roa (raw, json)
Hash identifier:          K3JPnae6zfkHk6Z1hA+bVLGgI4kWJHUEcI8asT+/cno=
Subject key identifier:   E4:89:35:1B:BF:F1:09:FF:62:C9:35:1F:1C:DC:F0:A8:52:D8:AA:1D
Certificate issuer:       /CN=C9AE029974BF7364D796B09E2D313FA4128E1865
Certificate serial:       10721A8BF09390C8A6B3912C14687E70FF5A678B
Authority key identifier: C9:AE:02:99:74:BF:73:64:D7:96:B0:9E:2D:31:3F:A4:12:8E:18:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/3230302e31362e39302e302f32332d3234203d3e20323632313738.roa
Signing time:             Tue 04 Feb 2025 18:55:51 +0000
ROA not before:           Tue 04 Feb 2025 18:50:51 +0000
ROA not after:            Tue 03 Feb 2026 18:55:51 +0000
asID:                     262178
IP address blocks:        200.16.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/C9AE029974BF7364D796B09E2D313FA4128E1865.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/C9AE029974BF7364D796B09E2D313FA4128E1865.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 20:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:72:1a:8b:f0:93:90:c8:a6:b3:91:2c:14:68:7e:70:ff:5a:67:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9AE029974BF7364D796B09E2D313FA4128E1865
        Validity
            Not Before: Feb  4 18:50:51 2025 GMT
            Not After : Feb  3 18:55:51 2026 GMT
        Subject: CN=E489351BBFF109FF62C9351F1CDCF0A852D8AA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:fc:08:d2:9c:3e:1c:b0:f0:20:56:b3:d8:
                    a8:06:09:bb:1a:5a:bb:e9:0a:1b:72:35:58:8a:ea:
                    4a:21:3c:1c:01:db:26:88:ba:fd:a6:2b:20:83:92:
                    ff:eb:7a:0a:d7:7c:55:0d:84:a2:66:11:dc:88:93:
                    f7:ba:ac:63:7b:50:29:cc:1e:b6:c4:b7:40:a8:89:
                    5b:16:80:a0:11:80:b0:52:12:d1:a8:e2:ca:a8:c9:
                    df:51:92:41:54:25:e8:98:84:fd:0e:66:9f:19:69:
                    32:5a:f5:72:31:81:c5:9f:fa:2b:a8:b8:e8:9f:46:
                    10:4e:d0:ea:bc:f9:a4:0f:ca:88:05:68:22:b2:30:
                    0a:1a:25:62:54:78:3b:44:b2:47:05:27:5f:78:43:
                    3e:c5:1f:e6:ab:2f:27:0a:0b:54:ec:68:a6:1b:ee:
                    33:2f:0f:d8:f0:f0:e3:14:aa:b8:a1:af:57:83:ca:
                    55:f1:8a:94:5a:4e:ed:24:38:9a:fc:77:7c:28:91:
                    71:85:2f:46:08:7f:34:d1:73:69:e0:7a:bc:31:74:
                    ee:b1:67:de:1f:e4:8c:95:ff:d8:b6:b0:74:d7:7d:
                    36:a0:2e:97:bd:c8:f7:b1:0b:e0:59:29:72:3e:e3:
                    9e:2e:e6:49:86:89:58:db:2b:06:d9:38:15:b2:2f:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:89:35:1B:BF:F1:09:FF:62:C9:35:1F:1C:DC:F0:A8:52:D8:AA:1D
            X509v3 Authority Key Identifier:
                keyid:C9:AE:02:99:74:BF:73:64:D7:96:B0:9E:2D:31:3F:A4:12:8E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/C9AE029974BF7364D796B09E2D313FA4128E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/3230302e31362e39302e302f32332d3234203d3e20323632313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         f0:ee:52:68:e1:00:9a:ff:3a:01:52:cb:b1:5c:7f:dc:cc:b2:
         b9:36:49:78:59:c4:a0:18:22:95:4f:72:4c:b4:dd:57:bc:08:
         2f:e1:fb:77:89:73:9f:0d:4e:5f:5e:27:92:e1:23:1e:e1:07:
         c9:78:76:b6:17:f8:92:2b:77:25:25:d1:f2:79:cd:ef:74:1a:
         74:14:b1:1a:1c:70:68:22:06:df:c9:7b:58:6a:49:4d:2c:c5:
         17:db:8f:b4:1a:49:c1:2b:ac:e5:dc:37:76:62:8b:d3:d8:b7:
         26:e2:60:fe:82:7d:37:b4:99:45:73:65:ff:30:8f:93:15:11:
         b6:f1:94:72:29:1f:9c:ec:5e:a8:9f:29:e3:ea:b9:e8:64:bc:
         81:39:53:12:6d:3b:3f:31:e3:30:b8:6d:b2:2f:e9:cd:91:f2:
         59:cf:dd:06:aa:4b:64:f1:97:de:8b:d0:d9:f0:f0:e7:4f:c2:
         9d:6d:fb:59:16:a3:28:92:ae:89:15:98:24:a5:dd:0e:d5:a1:
         20:0f:04:6e:86:2e:f9:35:43:80:39:11:9f:a6:f3:be:3d:68:
         ee:0d:fd:4e:42:ab:ea:a1:7f:d9:f2:c5:c2:c6:66:79:b5:41:
         a6:ae:73:96:45:bb:52:90:63:20:b4:04:8c:56:76:c7:60:8b:
         35:94:95:84
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEHIai/CTkMims5EsFGh+cP9aZ4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlBRTAyOTk3NEJGNzM2NEQ3OTZCMDlFMkQzMTNGQTQx
MjhFMTg2NTAeFw0yNTAyMDQxODUwNTFaFw0yNjAyMDMxODU1NTFaMDMxMTAvBgNV
BAMTKEU0ODkzNTFCQkZGMTA5RkY2MkM5MzUxRjFDRENGMEE4NTJEOEFBMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqO/wI0pw+HLDwIFaz2KgGCbsa
WrvpChtyNViK6kohPBwB2yaIuv2mKyCDkv/regrXfFUNhKJmEdyIk/e6rGN7UCnM
HrbEt0CoiVsWgKARgLBSEtGo4sqoyd9RkkFUJeiYhP0OZp8ZaTJa9XIxgcWf+iuo
uOifRhBO0Oq8+aQPyogFaCKyMAoaJWJUeDtEskcFJ194Qz7FH+arLycKC1TsaKYb
7jMvD9jw8OMUqrihr1eDylXxipRaTu0kOJr8d3wokXGFL0YIfzTRc2ngerwxdO6x
Z94f5IyV/9i2sHTXfTagLpe9yPexC+BZKXI+454u5kmGiVjbKwbZOBWyL4T1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU5Ik1G7/xCf9iyTUfHNzwqFLYqh0wHwYDVR0j
BBgwFoAUya4CmXS/c2TXlrCeLTE/pBKOGGUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FREE3M0U5QjQwQkQ0Q0I1QUQ4OUFBMTUxNkExNDJERDQ5
MTIxNjBBNkQzNkFDOUQzRkYxMDRGQUY2NjE4MDg5LzAvQzlBRTAyOTk3NEJGNzM2
NEQ3OTZCMDlFMkQzMTNGQTQxMjhFMTg2NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DOUFFMDI5OTc0QkY3MzY0RDc5
NkIwOUUyRDMxM0ZBNDEyOEUxODY1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRURBNzNFOUI0MEJENENCNUFEODlBQTE1MTZBMTQyREQ0OTEyMTYwQTZE
MzZBQzlEM0ZGMTA0RkFGNjYxODA4OS8wLzMyMzAzMDJlMzEzNjJlMzkzMDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcgQWjAN
BgkqhkiG9w0BAQsFAAOCAQEA8O5SaOEAmv86AVLLsVx/3MyyuTZJeFnEoBgilU9y
TLTdV7wIL+H7d4lznw1OX14nkuEjHuEHyXh2thf4kit3JSXR8nnN73QadBSxGhxw
aCIG38l7WGpJTSzFF9uPtBpJwSus5dw3dmKL09i3JuJg/oJ9N7SZRXNl/zCPkxUR
tvGUcikfnOxeqJ8p4+q56GS8gTlTEm07PzHjMLhtsi/pzZHyWc/dBqpLZPGX3ovQ
2fDw50/CnW37WRajKJKuiRWYJKXdDtWhIA8EboYu+TVDgDkRn6bzvj1o7g39TkKr
6qF/2fLFwsZmebVBpq5zlkW7UpBjILQEjFZ2x2CLNZSVhA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:27:13 2025 by rpki-client