Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/3230302e33332e32362e302f32332d3234203d3e2038313531.roa
File:                     3230302e33332e32362e302f32332d3234203d3e2038313531.roa (raw, json)
Hash identifier:          pxvQo6XJEG//Vg07l/x22srXKxFgm9Z8UzgpTlQ0wPA=
Subject key identifier:   2A:DF:30:C3:00:1F:5D:FE:4B:F0:71:3D:0C:7B:FF:6D:3F:61:5B:EB
Certificate issuer:       /CN=7E458BAEF9BA9DCE3AA516F258A994358878C467
Certificate serial:       43E6017F64D39547FBED558FEE242EDF5592FAFA
Authority key identifier: 7E:45:8B:AE:F9:BA:9D:CE:3A:A5:16:F2:58:A9:94:35:88:78:C4:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/3230302e33332e32362e302f32332d3234203d3e2038313531.roa
Signing time:             Tue 04 Feb 2025 18:12:49 +0000
ROA not before:           Tue 04 Feb 2025 18:07:49 +0000
ROA not after:            Tue 03 Feb 2026 18:12:49 +0000
asID:                     8151
IP address blocks:        200.33.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e6:01:7f:64:d3:95:47:fb:ed:55:8f:ee:24:2e:df:55:92:fa:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E458BAEF9BA9DCE3AA516F258A994358878C467
        Validity
            Not Before: Feb  4 18:07:49 2025 GMT
            Not After : Feb  3 18:12:49 2026 GMT
        Subject: CN=2ADF30C3001F5DFE4BF0713D0C7BFF6D3F615BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:8c:b1:bf:9b:86:07:c6:5e:b3:a6:15:c1:
                    ed:37:2a:40:51:ad:65:28:a7:44:de:28:bd:95:83:
                    d5:36:17:2b:ad:52:62:ac:23:bd:b3:ae:3f:17:1e:
                    54:32:29:78:c4:a7:c7:8b:5c:8c:9f:0c:99:ef:37:
                    d9:45:aa:88:01:b8:fc:3e:24:a5:b5:22:0c:79:0b:
                    c5:b1:8b:1e:9c:56:fb:d7:77:95:76:84:5f:55:3d:
                    d3:04:ea:75:da:ea:de:0d:2c:ef:0f:e2:06:46:0a:
                    b9:33:9d:d8:ae:35:c2:27:0c:86:c0:59:08:b1:9a:
                    8c:ea:bb:96:59:1f:6e:33:84:b3:be:ba:b1:1a:a1:
                    a6:0d:d6:34:f2:16:7e:1e:0a:e0:1a:ec:03:2d:96:
                    67:d0:86:9d:8b:38:77:36:0f:1e:cd:bb:48:44:22:
                    19:42:f7:6c:f0:49:c1:be:ab:f9:65:02:52:9a:a7:
                    4a:63:77:4b:48:71:85:ba:00:49:13:60:2e:b9:77:
                    90:21:65:50:68:27:57:b1:56:af:8d:03:d9:91:c9:
                    27:c7:85:65:b6:dd:6d:6f:0a:0c:f3:4d:8f:83:b1:
                    18:71:ff:2b:02:61:b6:a4:f0:f2:52:4c:d6:c8:fd:
                    76:c1:fb:02:18:5e:96:06:5a:ef:31:7e:74:76:3e:
                    68:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DF:30:C3:00:1F:5D:FE:4B:F0:71:3D:0C:7B:FF:6D:3F:61:5B:EB
            X509v3 Authority Key Identifier:
                keyid:7E:45:8B:AE:F9:BA:9D:CE:3A:A5:16:F2:58:A9:94:35:88:78:C4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E458BAEF9BA9DCE3AA516F258A994358878C467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD200842DF1B005F21BFA33AF9BE5EC4D424D0E49C109E5A0A8F57F63DD07D9F/0/3230302e33332e32362e302f32332d3234203d3e2038313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:8e:a9:66:2b:60:37:9e:0b:2b:6e:55:ca:ea:f6:9a:a3:07:
         f6:b8:eb:12:a4:ee:e2:fd:75:4a:04:4f:4a:d3:e6:0e:a7:0b:
         36:0c:41:c1:32:dd:8c:91:c3:f7:21:37:b1:bd:e4:7b:32:f2:
         1a:0e:80:6d:be:02:5d:f9:f4:26:c6:52:7e:74:17:56:b0:8b:
         20:6c:68:0f:64:69:da:9a:a4:58:16:d5:cf:2a:37:ee:92:9c:
         aa:0a:e1:b8:6d:df:0c:3e:fb:c6:41:df:a0:6e:a5:70:f4:45:
         1b:4a:fa:b3:be:bf:45:c4:a6:1a:62:59:fe:f9:e3:a2:81:c0:
         06:70:88:94:b1:3e:73:a2:21:85:d6:91:87:ed:7b:ca:48:23:
         63:64:49:b4:ec:62:08:c4:14:5e:09:ce:43:2b:ce:dd:c2:16:
         15:e3:c3:42:f9:56:42:83:19:b1:2f:f0:ff:cb:bf:40:9c:b7:
         cc:e5:21:32:9d:71:6a:09:cd:80:2e:81:90:15:71:8f:05:b2:
         b8:1b:a3:bd:01:a8:12:2a:ae:7b:35:aa:61:b2:19:bb:4e:cf:
         30:35:85:6e:58:9f:1e:98:04:4f:7a:57:f2:d3:08:cc:f7:b5:
         74:da:ef:5e:b3:9c:e9:95:4a:84:53:35:b0:8f:54:e0:d3:74:
         21:12:9a:21
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUQ+YBf2TTlUf77VWP7iQu31WS+vowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U0NThCQUVGOUJBOURDRTNBQTUxNkYyNThBOTk0MzU4
ODc4QzQ2NzAeFw0yNTAyMDQxODA3NDlaFw0yNjAyMDMxODEyNDlaMDMxMTAvBgNV
BAMTKDJBREYzMEMzMDAxRjVERkU0QkYwNzEzRDBDN0JGRjZEM0Y2MTVCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkyoyxv5uGB8Zes6YVwe03KkBR
rWUop0TeKL2Vg9U2FyutUmKsI72zrj8XHlQyKXjEp8eLXIyfDJnvN9lFqogBuPw+
JKW1Igx5C8Wxix6cVvvXd5V2hF9VPdME6nXa6t4NLO8P4gZGCrkzndiuNcInDIbA
WQixmozqu5ZZH24zhLO+urEaoaYN1jTyFn4eCuAa7AMtlmfQhp2LOHc2Dx7Nu0hE
IhlC92zwScG+q/llAlKap0pjd0tIcYW6AEkTYC65d5AhZVBoJ1exVq+NA9mRySfH
hWW23W1vCgzzTY+DsRhx/ysCYbak8PJSTNbI/XbB+wIYXpYGWu8xfnR2PmgbAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUKt8wwwAfXf5L8HE9DHv/bT9hW+swHwYDVR0j
BBgwFoAUfkWLrvm6nc46pRbyWKmUNYh4xGcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRDIwMDg0MkRGMUIwMDVGMjFCRkEzM0FGOUJFNUVDNEQ0
MjREMEU0OUMxMDlFNUEwQThGNTdGNjNERDA3RDlGLzAvN0U0NThCQUVGOUJBOURD
RTNBQTUxNkYyNThBOTk0MzU4ODc4QzQ2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RTQ1OEJBRUY5QkE5RENFM0FB
NTE2RjI1OEE5OTQzNTg4NzhDNDY3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkQyMDA4NDJERjFCMDA1RjIxQkZBMzNBRjlCRTVFQzRENDI0RDBFNDlD
MTA5RTVBMEE4RjU3RjYzREQwN0Q5Ri8wLzMyMzAzMDJlMzMzMzJlMzIzNjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzEzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByCEaMA0GCSqG
SIb3DQEBCwUAA4IBAQByjqlmK2A3ngsrblXK6vaaowf2uOsSpO7i/XVKBE9K0+YO
pws2DEHBMt2MkcP3ITexveR7MvIaDoBtvgJd+fQmxlJ+dBdWsIsgbGgPZGnamqRY
FtXPKjfukpyqCuG4bd8MPvvGQd+gbqVw9EUbSvqzvr9FxKYaYln++eOigcAGcIiU
sT5zoiGF1pGH7XvKSCNjZEm07GIIxBReCc5DK87dwhYV48NC+VZCgxmxL/D/y79A
nLfM5SEynXFqCc2ALoGQFXGPBbK4G6O9AagSKq57Naphshm7Ts8wNYVuWJ8emARP
elfy0wjM97V02u9es5zplUqEUzWwj1Tg03QhEpoh
-----END CERTIFICATE-----
Generated at Fri Apr 11 14:47:27 2025 by rpki-client