Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3230302e32362e3136382e302f32312d3234203d3e203237383837.roa
File:                     3230302e32362e3136382e302f32312d3234203d3e203237383837.roa (raw, json)
Hash identifier:          J/W54ATKIA334RcyCsGoy/D8m20Cg7+tOtquXI4PeQM=
Subject key identifier:   0D:DC:2F:B6:37:C6:09:80:DE:62:2D:34:4F:87:5F:26:CA:0B:85:77
Certificate issuer:       /CN=F00FBBA32D43BAF3EF3175458BDD03F4CE87674F
Certificate serial:       014AC634FE2BAA796A5CC824418BCD965C3D78BB
Authority key identifier: F0:0F:BB:A3:2D:43:BA:F3:EF:31:75:45:8B:DD:03:F4:CE:87:67:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3230302e32362e3136382e302f32312d3234203d3e203237383837.roa
Signing time:             Tue 04 Feb 2025 20:00:35 +0000
ROA not before:           Tue 04 Feb 2025 19:55:35 +0000
ROA not after:            Tue 03 Feb 2026 20:00:35 +0000
asID:                     27887
IP address blocks:        200.26.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4a:c6:34:fe:2b:aa:79:6a:5c:c8:24:41:8b:cd:96:5c:3d:78:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F00FBBA32D43BAF3EF3175458BDD03F4CE87674F
        Validity
            Not Before: Feb  4 19:55:35 2025 GMT
            Not After : Feb  3 20:00:35 2026 GMT
        Subject: CN=0DDC2FB637C60980DE622D344F875F26CA0B8577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:be:69:b4:bd:ff:8f:e7:13:ea:39:ac:7d:6c:
                    d4:5f:db:64:32:6f:42:cb:8b:e2:ba:00:99:ef:62:
                    d3:55:0e:42:72:74:c3:20:22:8c:95:31:af:1b:60:
                    b8:b1:99:3d:b7:bf:4d:d4:27:cc:8d:b3:a0:4d:87:
                    0c:77:c4:a3:74:fd:20:67:58:11:55:8d:cb:b1:b3:
                    00:a4:ec:ce:03:51:fa:bd:1f:60:e8:4c:97:06:57:
                    a3:bd:b2:7c:4b:f8:e9:17:5a:b6:4f:5b:80:e8:02:
                    0a:33:b6:a8:af:4f:de:55:cf:b1:0c:68:63:7f:62:
                    8d:1a:2c:d1:04:59:b4:f1:d0:a2:75:f6:ce:91:69:
                    41:56:f7:67:6c:16:6a:57:d4:a6:c2:d1:46:60:ef:
                    1a:20:d2:8d:a1:a7:19:db:3a:ca:a5:82:d6:12:b8:
                    99:ba:32:f0:68:22:4f:f7:77:07:96:69:8d:dd:92:
                    65:28:9a:21:9f:8c:8d:6d:08:23:90:29:55:8b:0e:
                    bf:e1:8a:00:6a:22:70:b7:05:12:9f:d5:ad:d8:bf:
                    45:58:64:46:5b:a0:d2:3f:b6:ac:da:d3:b7:e1:ea:
                    11:4c:bc:70:84:d1:45:33:29:9c:68:85:af:0c:03:
                    72:ca:58:a1:4c:8a:40:61:a6:5d:2a:f4:7d:a8:ec:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DC:2F:B6:37:C6:09:80:DE:62:2D:34:4F:87:5F:26:CA:0B:85:77
            X509v3 Authority Key Identifier:
                keyid:F0:0F:BB:A3:2D:43:BA:F3:EF:31:75:45:8B:DD:03:F4:CE:87:67:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3230302e32362e3136382e302f32312d3234203d3e203237383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:3c:83:b7:ac:27:34:78:9d:9b:2d:06:7a:db:a1:cb:e0:3d:
         55:8a:ef:99:c8:50:17:9c:30:3d:1a:5b:1a:86:02:3c:de:65:
         ad:8b:34:1a:09:8c:9c:6f:5d:53:fa:64:83:54:99:1e:fb:a0:
         92:f5:dd:3f:4b:5e:b1:08:d7:f3:cf:25:47:7e:02:47:96:40:
         12:17:56:71:ef:d5:0d:e2:d0:c7:62:ea:01:8c:10:e5:3f:f8:
         19:be:9a:64:70:4e:aa:12:4c:9c:c7:06:01:92:2c:59:23:94:
         0e:28:79:7b:12:4c:6f:df:e3:4e:7f:a2:96:84:9e:60:ee:12:
         97:90:f2:87:fc:24:1b:5b:40:cc:05:33:af:f0:f4:18:d6:53:
         bc:eb:7a:2f:fc:8a:6c:b3:ea:ca:ff:7d:47:27:c5:28:1e:6a:
         73:4e:16:55:85:77:43:cb:be:fc:fd:72:cb:54:a7:e6:77:92:
         0f:15:e3:cf:7f:ae:c6:77:6e:de:30:22:bc:ac:37:56:14:f8:
         41:7a:61:87:66:29:d0:45:84:69:02:f1:c5:56:c9:19:aa:f3:
         45:97:c2:b0:75:b2:a8:79:20:0d:f2:f4:81:00:e4:f4:c6:aa:
         24:05:87:80:65:49:55:20:d6:86:98:78:de:b1:e3:1d:15:64:
         16:57:7e:66
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAUrGNP4rqnlqXMgkQYvNllw9eLswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAwRkJCQTMyRDQzQkFGM0VGMzE3NTQ1OEJERDAzRjRD
RTg3Njc0RjAeFw0yNTAyMDQxOTU1MzVaFw0yNjAyMDMyMDAwMzVaMDMxMTAvBgNV
BAMTKDBEREMyRkI2MzdDNjA5ODBERTYyMkQzNDRGODc1RjI2Q0EwQjg1NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtvmm0vf+P5xPqOax9bNRf22Qy
b0LLi+K6AJnvYtNVDkJydMMgIoyVMa8bYLixmT23v03UJ8yNs6BNhwx3xKN0/SBn
WBFVjcuxswCk7M4DUfq9H2DoTJcGV6O9snxL+OkXWrZPW4DoAgoztqivT95Vz7EM
aGN/Yo0aLNEEWbTx0KJ19s6RaUFW92dsFmpX1KbC0UZg7xog0o2hpxnbOsqlgtYS
uJm6MvBoIk/3dweWaY3dkmUomiGfjI1tCCOQKVWLDr/higBqInC3BRKf1a3Yv0VY
ZEZboNI/tqza07fh6hFMvHCE0UUzKZxoha8MA3LKWKFMikBhpl0q9H2o7El7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUDdwvtjfGCYDeYi00T4dfJsoLhXcwHwYDVR0j
BBgwFoAU8A+7oy1DuvPvMXVFi90D9M6HZ08wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQkFDRDRCQ0NDQkJGRkE5MkQ2RDI2MTlGMDc2QzI1Q0NG
NkQ3MTY4NUY0RjI0NzEyRUNENDNBNjcxOEMxQzJDLzAvRjAwRkJCQTMyRDQzQkFG
M0VGMzE3NTQ1OEJERDAzRjRDRTg3Njc0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDBGQkJBMzJENDNCQUYzRUYz
MTc1NDU4QkREMDNGNENFODc2NzRGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkJBQ0Q0QkNDQ0JCRkZBOTJENkQyNjE5RjA3NkMyNUNDRjZENzE2ODVG
NEYyNDcxMkVDRDQzQTY3MThDMUMyQy8wLzMyMzAzMDJlMzIzNjJlMzEzNjM4MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM4MzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8gaqDAN
BgkqhkiG9w0BAQsFAAOCAQEAFTyDt6wnNHidmy0Getuhy+A9VYrvmchQF5wwPRpb
GoYCPN5lrYs0GgmMnG9dU/pkg1SZHvugkvXdP0tesQjX888lR34CR5ZAEhdWce/V
DeLQx2LqAYwQ5T/4Gb6aZHBOqhJMnMcGAZIsWSOUDih5exJMb9/jTn+iloSeYO4S
l5Dyh/wkG1tAzAUzr/D0GNZTvOt6L/yKbLPqyv99RyfFKB5qc04WVYV3Q8u+/P1y
y1Sn5neSDxXjz3+uxndu3jAivKw3VhT4QXphh2Yp0EWEaQLxxVbJGarzRZfCsHWy
qHkgDfL0gQDk9MaqJAWHgGVJVSDWhph43rHjHRVkFld+Zg==
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:29:36 2025 by rpki-client