Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3230302e3131392e3135312e302f32342d3332203d3e203134373534.roa
File:                     3230302e3131392e3135312e302f32342d3332203d3e203134373534.roa (raw, json)
Hash identifier:          UfhAm6+3Z+Nb7qfjFUbtverTI25AC+1WFandNb2jbTc=
Subject key identifier:   BF:6D:C7:C4:80:43:22:DF:C2:8F:84:31:FD:F9:30:A9:26:1D:1F:24
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       7DB42BD36282053121FC462C6D59000E50536DE0
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3230302e3131392e3135312e302f32342d3332203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:25:55 +0000
ROA not before:           Tue 04 Feb 2025 18:20:55 +0000
ROA not after:            Tue 03 Feb 2026 18:25:55 +0000
asID:                     14754
IP address blocks:        200.119.151.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 19:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b4:2b:d3:62:82:05:31:21:fc:46:2c:6d:59:00:0e:50:53:6d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Feb  4 18:20:55 2025 GMT
            Not After : Feb  3 18:25:55 2026 GMT
        Subject: CN=BF6DC7C4804322DFC28F8431FDF930A9261D1F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d4:8c:02:36:de:5e:09:02:e2:b1:36:5e:82:
                    f6:6e:96:cf:a9:00:59:cc:7b:80:38:3e:29:13:c5:
                    5f:bd:ee:6a:16:aa:05:13:85:63:e2:1e:f4:fb:a0:
                    c9:19:07:b0:ce:68:2c:6c:69:4a:86:18:2a:5d:cf:
                    c0:c1:b6:7a:a5:e5:9e:f4:f3:c5:9e:5a:94:32:fc:
                    8f:ef:06:b9:15:a9:10:29:b1:6c:ed:62:bb:f6:9b:
                    c5:f3:1a:6a:63:4c:bb:6f:a3:3b:c2:43:74:b7:93:
                    b7:48:fc:8b:af:f5:f7:65:37:41:ac:56:2f:5a:a1:
                    70:40:40:6b:aa:a6:73:fc:35:8c:86:b4:21:0f:3b:
                    74:1b:82:fe:43:93:a7:f3:59:fa:f7:a0:cb:5a:d6:
                    6f:50:91:b7:19:26:59:4b:7b:55:28:1c:43:ba:08:
                    b0:de:36:1b:b7:40:be:ba:e6:aa:1e:ed:55:20:92:
                    80:17:c8:24:c3:64:c7:ec:22:ef:db:1d:4b:28:b1:
                    92:d1:67:88:ba:f1:a5:ee:63:34:55:28:c2:01:8c:
                    fa:c0:0e:e9:5d:69:13:50:fd:f4:ea:1e:e1:e2:c2:
                    20:09:fb:19:a7:a6:9b:28:c6:6c:0f:4c:a7:b4:60:
                    c4:aa:c8:76:85:2d:27:8e:3a:69:79:75:32:94:d7:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6D:C7:C4:80:43:22:DF:C2:8F:84:31:FD:F9:30:A9:26:1D:1F:24
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3230302e3131392e3135312e302f32342d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:6a:c3:60:87:5a:ee:89:17:f9:46:95:bf:86:84:26:e3:
         27:56:7d:5f:ae:0c:e9:0f:d4:66:fe:93:4d:02:a0:53:9b:47:
         8f:e3:81:89:73:6c:5b:6b:64:ed:a0:fa:07:e9:4c:34:ab:95:
         bc:22:51:7e:ea:29:77:71:04:90:72:21:a0:f6:c2:e9:2a:57:
         ff:88:b0:5f:cc:34:f1:a3:bd:95:27:43:2f:4d:9f:ba:72:39:
         c1:09:f7:dd:62:07:0a:3c:33:60:a3:a5:d8:eb:70:37:cd:23:
         64:31:30:a4:e4:31:f3:7a:4f:c2:43:11:05:d3:c8:54:bc:4f:
         74:14:8f:41:f4:f4:18:1e:ab:06:eb:c9:f7:65:d8:c0:1c:4a:
         7f:0d:96:ea:f5:b0:36:67:d8:73:b7:17:6b:46:8c:99:19:fe:
         e3:67:74:d9:0f:7d:49:21:8d:55:ef:ca:57:67:ea:85:ce:71:
         54:57:02:5a:a5:a5:22:6e:e5:cc:33:98:fa:f0:36:a2:40:10:
         35:40:40:d3:47:93:45:5e:c3:11:0c:a9:8f:6f:78:81:7f:67:
         5d:1e:1f:7c:b9:96:f8:36:05:be:90:a5:c2:8c:0b:2b:d2:d2:
         b8:5d:e9:5c:a0:d2:0b:93:ba:25:4f:b9:74:fa:cb:55:b7:70:
         e4:5c:18:1d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfbQr02KCBTEh/EYsbVkADlBTbeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQzMTZCQzUwRTE4NkJDNEQ2RUVEOEIxQTcxRTJGN0ZB
QTVGOTUzRDAeFw0yNTAyMDQxODIwNTVaFw0yNjAyMDMxODI1NTVaMDMxMTAvBgNV
BAMTKEJGNkRDN0M0ODA0MzIyREZDMjhGODQzMUZERjkzMEE5MjYxRDFGMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc1IwCNt5eCQLisTZegvZuls+p
AFnMe4A4PikTxV+97moWqgUThWPiHvT7oMkZB7DOaCxsaUqGGCpdz8DBtnql5Z70
88WeWpQy/I/vBrkVqRApsWztYrv2m8XzGmpjTLtvozvCQ3S3k7dI/Iuv9fdlN0Gs
Vi9aoXBAQGuqpnP8NYyGtCEPO3Qbgv5Dk6fzWfr3oMta1m9QkbcZJllLe1UoHEO6
CLDeNhu3QL665qoe7VUgkoAXyCTDZMfsIu/bHUsosZLRZ4i68aXuYzRVKMIBjPrA
DuldaRNQ/fTqHuHiwiAJ+xmnppsoxmwPTKe0YMSqyHaFLSeOOml5dTKU19ihAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUv23HxIBDIt/Cj4Qx/fkwqSYdHyQwHwYDVR0j
BBgwFoAUrTFrxQ4Ya8TW7tixpx4vf6pflT0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNDBBQUREOUMzQTJDQjdBREI5MEFGRTIzNUE2MDkyQjIz
ODI0RDVFRjAwNTAzRjMwQjY1MTg3QjJCMjJGMzIxLzAvQUQzMTZCQzUwRTE4NkJD
NEQ2RUVEOEIxQTcxRTJGN0ZBQTVGOTUzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRDMxNkJDNTBFMTg2QkM0RDZF
RUQ4QjFBNzFFMkY3RkFBNUY5NTNELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjQwQUFERDlDM0EyQ0I3QURCOTBBRkUyMzVBNjA5MkIyMzgyNEQ1RUYw
MDUwM0YzMEI2NTE4N0IyQjIyRjMyMS8wLzMyMzAzMDJlMzEzMTM5MmUzMTM1MzEy
ZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTM0MzczNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHeX
MA0GCSqGSIb3DQEBCwUAA4IBAQAG+2rDYIda7okX+UaVv4aEJuMnVn1frgzpD9Rm
/pNNAqBTm0eP44GJc2xba2TtoPoH6Uw0q5W8IlF+6il3cQSQciGg9sLpKlf/iLBf
zDTxo72VJ0MvTZ+6cjnBCffdYgcKPDNgo6XY63A3zSNkMTCk5DHzek/CQxEF08hU
vE90FI9B9PQYHqsG68n3ZdjAHEp/DZbq9bA2Z9hztxdrRoyZGf7jZ3TZD31JIY1V
78pXZ+qFznFUVwJapaUibuXMM5j68DaiQBA1QEDTR5NFXsMRDKmPb3iBf2ddHh98
uZb4NgW+kKXCjAsr0tK4XelcoNILk7olT7l0+stVt3DkXBgd
-----END CERTIFICATE-----
Generated at Tue Apr 22 17:36:41 2025 by rpki-client