Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3139322e302f31392d3234203d3e203139313639.roa
File:                     3230302e39332e3139322e302f31392d3234203d3e203139313639.roa (raw, json)
Hash identifier:          yIQGbHqaYIiXBCn/8dWdD4DhfV94anok+sNKtlL7XVE=
Subject key identifier:   C7:5F:69:75:AA:69:B1:0F:F3:07:67:83:4C:3D:34:65:7B:9F:E6:08
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5DADFE8098641B4AD70C16012256C2FFA7CD7CAF
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3139322e302f31392d3234203d3e203139313639.roa
Signing time:             Tue 04 Feb 2025 18:11:20 +0000
ROA not before:           Tue 04 Feb 2025 18:06:20 +0000
ROA not after:            Tue 03 Feb 2026 18:11:20 +0000
asID:                     19169
IP address blocks:        200.93.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ad:fe:80:98:64:1b:4a:d7:0c:16:01:22:56:c2:ff:a7:cd:7c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:20 2025 GMT
            Not After : Feb  3 18:11:20 2026 GMT
        Subject: CN=C75F6975AA69B10FF30767834C3D34657B9FE608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:71:95:68:ad:af:23:3a:0f:03:43:d6:19:
                    41:47:6e:a4:9e:3d:c3:1c:da:96:b9:65:9e:7a:80:
                    b4:49:b5:4f:6a:f0:9f:09:37:49:93:4a:a2:77:c4:
                    5b:6e:b4:61:18:f8:ad:87:2f:56:eb:ce:3e:b7:e8:
                    73:f3:f4:6f:e9:d3:25:cc:bf:9d:d6:ad:85:03:c9:
                    47:0e:45:28:86:e4:54:62:b1:57:32:65:a0:b3:60:
                    43:f1:f2:d1:cc:ca:bb:a5:f7:54:fa:95:87:af:c4:
                    dc:d8:00:0c:3b:e2:5e:7a:37:1a:67:be:21:88:7c:
                    af:06:13:ca:6c:0c:ac:ab:7c:51:e6:f4:04:3a:fb:
                    4d:b9:ea:e4:ca:8d:17:b3:5a:d4:98:bd:e6:da:0e:
                    48:27:a2:30:a5:d1:05:5a:b8:7c:53:06:1d:da:be:
                    55:51:78:c5:db:0f:0b:80:b6:78:1f:08:85:b3:09:
                    c6:60:89:77:e2:22:3d:6b:83:6b:1b:c2:84:4c:94:
                    23:b9:40:37:91:5c:8f:f1:3c:8e:35:74:6c:1d:8c:
                    33:4f:3b:a5:d9:ff:8a:5a:df:1c:ca:29:60:f9:27:
                    37:0f:f9:bd:ad:bf:30:7e:80:68:fb:4f:c3:ad:69:
                    ce:0e:5c:f0:f2:cd:63:b7:ea:41:5d:c5:ac:c3:d1:
                    fd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5F:69:75:AA:69:B1:0F:F3:07:67:83:4C:3D:34:65:7B:9F:E6:08
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3139322e302f31392d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:9a:00:8e:7d:55:09:b9:00:55:23:a8:a1:53:91:2c:13:bf:
         1c:61:00:f2:b9:dd:c9:9a:98:96:20:76:67:1d:0a:11:71:cc:
         98:eb:ad:3d:29:cd:2c:32:3b:3f:d2:d2:93:ee:8b:a8:08:b1:
         25:ac:f6:5c:ca:e9:36:fd:24:d6:d1:9e:28:d3:b4:de:29:74:
         d8:64:40:8c:d4:61:24:8b:fa:50:63:c1:ad:f7:c0:b0:7d:1b:
         bd:50:40:fd:69:28:45:9c:38:24:6d:51:07:0c:bb:05:a7:08:
         b5:91:73:eb:58:09:1d:67:dd:41:3d:78:ce:96:c7:d5:8d:ee:
         93:d3:ca:60:c0:fd:25:0e:be:a0:6e:99:2f:e5:2e:82:ff:a6:
         53:de:51:bb:1c:05:5f:c5:ec:ff:05:91:09:43:5a:c1:6b:1e:
         47:77:fe:7b:20:ff:05:66:7a:ab:b1:97:01:09:29:8b:58:a1:
         56:0a:16:86:f6:68:f8:d9:11:ac:52:7b:4d:9f:62:c8:b2:6d:
         30:c9:e5:2f:e2:e4:e5:42:fa:50:76:b1:0b:32:77:5c:74:83:
         00:c2:08:83:b6:97:8b:a0:2d:ee:47:42:91:c1:c9:b6:75:d6:
         e1:bb:bf:97:17:31:1b:b9:c2:34:9d:9b:9a:68:38:e4:7d:49:
         e1:e5:9c:6b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXa3+gJhkG0rXDBYBIlbC/6fNfK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNTAyMDQxODA2MjBaFw0yNjAyMDMxODExMjBaMDMxMTAvBgNV
BAMTKEM3NUY2OTc1QUE2OUIxMEZGMzA3Njc4MzRDM0QzNDY1N0I5RkU2MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfBXGVaK2vIzoPA0PWGUFHbqSe
PcMc2pa5ZZ56gLRJtU9q8J8JN0mTSqJ3xFtutGEY+K2HL1brzj636HPz9G/p0yXM
v53WrYUDyUcORSiG5FRisVcyZaCzYEPx8tHMyrul91T6lYevxNzYAAw74l56Nxpn
viGIfK8GE8psDKyrfFHm9AQ6+0256uTKjRezWtSYvebaDkgnojCl0QVauHxTBh3a
vlVReMXbDwuAtngfCIWzCcZgiXfiIj1rg2sbwoRMlCO5QDeRXI/xPI41dGwdjDNP
O6XZ/4pa3xzKKWD5JzcP+b2tvzB+gGj7T8Otac4OXPDyzWO36kFdxazD0f2jAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUx19pdappsQ/zB2eDTD00ZXuf5ggwHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMyMzAzMDJlMzkzMzJlMzEzOTMyMmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzOTMxMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBchdwDAN
BgkqhkiG9w0BAQsFAAOCAQEAN5oAjn1VCbkAVSOooVORLBO/HGEA8rndyZqYliB2
Zx0KEXHMmOutPSnNLDI7P9LSk+6LqAixJaz2XMrpNv0k1tGeKNO03il02GRAjNRh
JIv6UGPBrffAsH0bvVBA/WkoRZw4JG1RBwy7BacItZFz61gJHWfdQT14zpbH1Y3u
k9PKYMD9JQ6+oG6ZL+Uugv+mU95RuxwFX8Xs/wWRCUNawWseR3f+eyD/BWZ6q7GX
AQkpi1ihVgoWhvZo+NkRrFJ7TZ9iyLJtMMnlL+Lk5UL6UHaxCzJ3XHSDAMIIg7aX
i6At7kdCkcHJtnXW4bu/lxcxG7nCNJ2bmmg45H1J4eWcaw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:32 2025 by rpki-client