Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/3230312e3232302e302e302f32302d3234203d3e203237373831.roa
File:                     3230312e3232302e302e302f32302d3234203d3e203237373831.roa (raw, json)
Hash identifier:          zGSid6y66iyW/K/RONpXOKXqOeYkwuU19OFORXhy/8o=
Subject key identifier:   6D:A3:BD:61:EB:C4:23:A5:A4:DB:76:75:DA:2E:A2:0A:E8:C6:DB:B1
Certificate issuer:       /CN=8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118
Certificate serial:       3463B05B3328E8F0E35C34DF2AE6184CD20CE58C
Authority key identifier: 83:34:A3:FB:4A:FA:5A:2B:29:BE:AD:E3:3F:59:57:C1:DA:DE:51:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/3230312e3232302e302e302f32302d3234203d3e203237373831.roa
Signing time:             Tue 04 Feb 2025 18:42:55 +0000
ROA not before:           Tue 04 Feb 2025 18:37:55 +0000
ROA not after:            Tue 03 Feb 2026 18:42:55 +0000
asID:                     27781
IP address blocks:        201.220.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:63:b0:5b:33:28:e8:f0:e3:5c:34:df:2a:e6:18:4c:d2:0c:e5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118
        Validity
            Not Before: Feb  4 18:37:55 2025 GMT
            Not After : Feb  3 18:42:55 2026 GMT
        Subject: CN=6DA3BD61EBC423A5A4DB7675DA2EA20AE8C6DBB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:2f:9e:3d:f6:dd:2b:e8:78:ee:36:f8:70:
                    00:de:12:df:0f:5c:9e:36:8e:59:5c:ae:3b:75:55:
                    29:22:c1:89:7c:c0:70:31:1f:68:50:44:c0:b0:52:
                    41:d2:6b:83:cc:63:11:db:6d:83:75:0a:ed:e7:be:
                    66:8e:f7:ad:54:07:e2:f0:bf:ae:28:62:60:c4:bb:
                    25:a5:0c:c4:fd:fb:b0:c3:c1:53:9a:94:bf:0e:95:
                    33:fc:f9:d7:27:5c:f7:4c:da:2d:42:8e:93:83:66:
                    8e:3e:31:c4:52:57:a0:6c:80:9e:34:a7:d5:69:28:
                    0b:7e:a8:01:f9:d4:b1:a1:3d:e2:4a:17:3a:75:0e:
                    9f:d4:da:ff:85:49:67:a5:3e:82:1b:92:02:5c:54:
                    30:be:a9:4e:c8:a9:5c:3e:71:17:6b:e8:32:9f:39:
                    6b:4d:5a:00:07:2e:a3:d3:39:45:0e:1a:f9:cf:8f:
                    c2:aa:cd:cc:3a:c3:54:d0:b6:44:e5:39:ad:01:d4:
                    19:90:76:f6:34:79:ee:45:48:70:76:52:6e:90:f8:
                    6e:20:07:7b:80:5c:1e:a2:f2:6e:15:12:a2:2e:7b:
                    8e:de:9d:90:52:fa:bb:72:43:0b:e4:25:54:d2:27:
                    1e:e9:8d:13:c7:1b:c8:ad:57:52:3b:4a:ca:ba:a2:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A3:BD:61:EB:C4:23:A5:A4:DB:76:75:DA:2E:A2:0A:E8:C6:DB:B1
            X509v3 Authority Key Identifier:
                keyid:83:34:A3:FB:4A:FA:5A:2B:29:BE:AD:E3:3F:59:57:C1:DA:DE:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/3230312e3232302e302e302f32302d3234203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:c6:d1:39:d3:47:c5:46:9a:2b:ab:0e:71:8e:03:fd:b4:
         43:e0:3b:11:13:b4:3f:4d:63:93:38:a6:41:88:d3:22:e1:a8:
         7d:38:b2:f0:c7:f9:58:0d:f4:c9:0c:9c:63:1c:8f:83:e9:fc:
         92:ee:3c:5d:32:77:e5:9e:9d:c6:dd:ce:7b:f9:17:47:58:7a:
         68:72:61:de:83:6e:ab:05:c5:d0:3f:2c:71:b8:6c:24:c9:2e:
         eb:44:6a:ad:df:80:b7:14:96:44:92:16:60:57:1a:11:93:36:
         3a:65:2a:f4:54:1c:63:6a:e6:f6:63:d4:c2:c5:45:d2:fb:ae:
         75:6d:67:ca:21:39:49:4f:01:b5:e4:2d:55:2a:a1:36:ca:13:
         ee:ee:03:b3:14:49:f6:0f:7c:34:5c:69:ae:db:f2:81:b2:0e:
         72:ea:f8:40:93:89:3b:7d:bf:ce:d9:fa:e4:6a:42:d2:90:26:
         56:f6:c5:97:a8:ca:83:08:66:61:7c:df:0c:fa:7b:dc:45:c8:
         c1:c2:55:56:91:2c:d2:7a:20:41:6c:27:1a:6f:97:8b:12:d3:
         ea:3c:c8:7b:40:b4:b4:81:08:31:b4:c9:86:2b:5e:6d:fb:57:
         00:9f:ed:39:73:3c:a9:35:d5:3a:ee:be:e0:26:9d:e3:26:cf:
         50:d5:1f:8a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNGOwWzMo6PDjXDTfKuYYTNIM5YwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMzNEEzRkI0QUZBNUEyQjI5QkVBREUzM0Y1OTU3QzFE
QURFNTExODAeFw0yNTAyMDQxODM3NTVaFw0yNjAyMDMxODQyNTVaMDMxMTAvBgNV
BAMTKDZEQTNCRDYxRUJDNDIzQTVBNERCNzY3NURBMkVBMjBBRThDNkRCQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWi+ePfbdK+h47jb4cADeEt8P
XJ42jllcrjt1VSkiwYl8wHAxH2hQRMCwUkHSa4PMYxHbbYN1Cu3nvmaO961UB+Lw
v64oYmDEuyWlDMT9+7DDwVOalL8OlTP8+dcnXPdM2i1CjpODZo4+McRSV6BsgJ40
p9VpKAt+qAH51LGhPeJKFzp1Dp/U2v+FSWelPoIbkgJcVDC+qU7IqVw+cRdr6DKf
OWtNWgAHLqPTOUUOGvnPj8Kqzcw6w1TQtkTlOa0B1BmQdvY0ee5FSHB2Um6Q+G4g
B3uAXB6i8m4VEqIue47enZBS+rtyQwvkJVTSJx7pjRPHG8itV1I7Ssq6okkBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUbaO9YevEI6Wk23Z12i6iCujG27EwHwYDVR0j
BBgwFoAUgzSj+0r6Wispvq3jP1lXwdreURgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDY3NjQ5MTkwNkI2NDY0NjE0NkYyQTY3NTFCQTBFM0FB
OEUwMzkzNzg3MUVEMzkyOTk1QkFFMzY1RDc1NDQ5LzAvODMzNEEzRkI0QUZBNUEy
QjI5QkVBREUzM0Y1OTU3QzFEQURFNTExOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MzM0QTNGQjRBRkE1QTJCMjlC
RUFERTMzRjU5NTdDMURBREU1MTE4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2NzY0OTE5MDZCNjQ2NDYxNDZGMkE2NzUxQkEwRTNBQThFMDM5Mzc4
NzFFRDM5Mjk5NUJBRTM2NUQ3NTQ0OS8wLzMyMzAzMTJlMzIzMjMwMmUzMDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzczNzM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATJ3AAwDQYJ
KoZIhvcNAQELBQADggEBAGpdxtE500fFRporqw5xjgP9tEPgOxETtD9NY5M4pkGI
0yLhqH04svDH+VgN9MkMnGMcj4Pp/JLuPF0yd+Wencbdznv5F0dYemhyYd6DbqsF
xdA/LHG4bCTJLutEaq3fgLcUlkSSFmBXGhGTNjplKvRUHGNq5vZj1MLFRdL7rnVt
Z8ohOUlPAbXkLVUqoTbKE+7uA7MUSfYPfDRcaa7b8oGyDnLq+ECTiTt9v87Z+uRq
QtKQJlb2xZeoyoMIZmF83wz6e9xFyMHCVVaRLNJ6IEFsJxpvl4sS0+o8yHtAtLSB
CDG0yYYrXm37VwCf7TlzPKk11TruvuAmneMmz1DVH4o=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:23 2025 by rpki-client