Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e382e302f32322d3234203d3e203131313933.roa
File:                     3230302e36312e382e302f32322d3234203d3e203131313933.roa (raw, json)
Hash identifier:          TxZAukwJu3BoPwwGe9yLxCKly6jPtD3B92uO3HmQGg4=
Subject key identifier:   3B:5E:1A:2E:30:53:2F:E1:B6:F8:44:CA:4B:C0:B5:B1:F1:BC:53:D4
Certificate issuer:       /CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
Certificate serial:       70DCEF3518A0ABC828220640235E9EF6740A90A2
Authority key identifier: 22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e382e302f32322d3234203d3e203131313933.roa
Signing time:             Tue 04 Feb 2025 18:39:45 +0000
ROA not before:           Tue 04 Feb 2025 18:34:45 +0000
ROA not after:            Tue 03 Feb 2026 18:39:45 +0000
asID:                     11193
IP address blocks:        200.61.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:dc:ef:35:18:a0:ab:c8:28:22:06:40:23:5e:9e:f6:74:0a:90:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
        Validity
            Not Before: Feb  4 18:34:45 2025 GMT
            Not After : Feb  3 18:39:45 2026 GMT
        Subject: CN=3B5E1A2E30532FE1B6F844CA4BC0B5B1F1BC53D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:d5:db:47:3e:b2:ee:47:81:5d:24:41:9c:
                    36:6d:a0:27:86:14:39:44:61:aa:a4:ba:de:32:8a:
                    e5:7b:f0:b4:58:a8:4b:68:fb:79:26:a0:d1:c2:27:
                    2e:45:bc:56:59:dd:9a:1a:d1:e3:ce:83:05:83:fb:
                    3d:9d:a7:77:7a:da:50:f2:4e:35:c1:08:cd:11:95:
                    d2:ae:81:f8:02:0b:0d:7b:2b:53:6b:bd:8f:4e:f6:
                    24:17:63:6b:54:63:06:47:9c:fe:d0:d9:cb:ae:a0:
                    58:62:68:e0:8c:71:2d:29:11:33:96:09:14:86:b6:
                    c0:99:14:38:ee:0d:fd:95:be:0a:88:83:7d:0b:6f:
                    7f:b3:3f:a3:03:5e:da:f6:e5:aa:51:f0:a7:0d:f5:
                    73:c6:4a:10:f3:a1:d2:72:8c:d4:8b:6c:b9:0d:63:
                    3e:ce:e2:ab:c4:3f:59:6b:ae:2e:a2:7c:9f:39:ee:
                    9c:dd:be:38:7b:5c:8d:e0:dc:0c:e7:88:14:35:62:
                    60:7c:f2:5d:54:a4:41:ea:cf:64:a1:13:ab:41:12:
                    54:b1:41:02:6b:9d:5e:1c:28:ab:f0:75:a7:d0:29:
                    29:b1:0b:c0:81:20:f3:ae:87:a3:18:b5:55:80:1e:
                    56:a3:a0:11:46:a5:c1:9c:ff:76:ef:36:6f:c8:78:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5E:1A:2E:30:53:2F:E1:B6:F8:44:CA:4B:C0:B5:B1:F1:BC:53:D4
            X509v3 Authority Key Identifier:
                keyid:22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e382e302f32322d3234203d3e203131313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:21:9f:9d:b9:cb:ae:e3:b0:b2:39:81:f4:cc:ff:20:bf:6f:
         3a:e8:37:d3:b6:6e:c6:98:df:c0:ad:3d:c8:1f:ce:62:0b:eb:
         01:ec:0f:4b:a1:f8:40:1f:c1:0e:a9:e7:8d:60:e8:32:8d:b7:
         f7:8d:be:9a:c0:4a:35:c5:a0:25:b2:ea:64:9f:95:36:40:23:
         bb:fc:f9:99:c4:94:cb:6f:cc:00:4f:62:b6:67:f6:9b:39:2d:
         69:f1:8f:35:18:51:12:ea:a7:0b:16:24:9f:7d:9d:27:c2:2f:
         32:d3:be:26:0c:53:45:50:57:36:ad:b8:8e:19:b6:57:69:b8:
         cb:27:6b:91:8a:f1:46:f5:b9:85:d6:76:eb:af:f2:25:fe:4b:
         de:dc:9c:b9:45:13:00:c4:8c:5f:3d:e4:12:7a:59:d7:2b:16:
         0a:99:28:22:48:d5:d1:0a:b3:60:a7:f3:94:57:83:3d:b0:68:
         34:76:95:39:f8:9c:24:ed:73:2d:0c:05:b3:3c:e0:e1:4a:82:
         e3:80:2a:fc:5f:3a:b6:1c:de:8a:bd:8c:83:dd:5f:ce:c3:67:
         fd:95:ba:27:40:27:95:70:d4:65:df:8b:f0:0d:27:8a:0d:e1:
         50:62:3b:6a:7e:6b:87:18:49:2f:7a:bb:66:41:ba:e8:8f:a6:
         00:2a:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:09:38 2025 by rpki-client