Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/3230302e312e3131362e302f32342d3234203d3e203136373031.roa
File:                     3230302e312e3131362e302f32342d3234203d3e203136373031.roa (raw, json)
Hash identifier:          x3K693fpfQgaRhePHYvAhzufbdz1lqRrbhFNiu27j6I=
Subject key identifier:   6A:E0:A0:94:1A:71:B9:69:BC:70:A9:A4:D6:D7:3C:86:D3:E6:B4:54
Certificate issuer:       /CN=12072E6C1A48AEC19505180D145D1D56D72980F3
Certificate serial:       346A45574CBFADCBC6E4D28380B093E79501773F
Authority key identifier: 12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/3230302e312e3131362e302f32342d3234203d3e203136373031.roa
Signing time:             Tue 06 May 2025 20:17:48 +0000
ROA not before:           Tue 06 May 2025 20:12:48 +0000
ROA not after:            Tue 05 May 2026 20:17:48 +0000
asID:                     16701
IP address blocks:        200.1.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6a:45:57:4c:bf:ad:cb:c6:e4:d2:83:80:b0:93:e7:95:01:77:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12072E6C1A48AEC19505180D145D1D56D72980F3
        Validity
            Not Before: May  6 20:12:48 2025 GMT
            Not After : May  5 20:17:48 2026 GMT
        Subject: CN=6AE0A0941A71B969BC70A9A4D6D73C86D3E6B454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c9:5e:aa:84:a0:17:ca:b5:07:7a:a5:64:ac:
                    80:d1:e6:f7:92:d8:5d:91:d3:fb:10:76:92:f8:98:
                    35:a8:f4:3b:83:34:4a:74:37:e3:8c:6f:53:4e:33:
                    fa:c1:9f:a3:0b:cd:2c:2d:25:d7:6e:fe:c3:61:c3:
                    d4:cf:5d:16:1a:d3:16:08:49:db:ca:7a:1e:c9:47:
                    85:c0:cb:53:22:34:55:dd:e5:75:31:cf:95:07:2e:
                    8b:fd:4e:e0:46:9f:45:f6:06:84:b4:25:6f:d6:4b:
                    87:25:44:67:25:81:64:b2:9f:d5:0c:72:a6:3f:4f:
                    ad:39:fa:10:77:82:83:6d:90:e5:e0:c9:06:51:7b:
                    6d:6f:f3:d4:ec:c9:64:29:93:9f:be:1c:d9:52:6b:
                    6a:f1:7e:c6:f5:2b:cf:cc:dc:44:0f:89:0b:28:66:
                    ec:0a:aa:67:b9:c8:61:f0:d0:d8:4a:c0:d5:54:6e:
                    ea:c3:b7:e0:c1:96:71:24:a1:f3:50:b3:83:c2:a9:
                    e1:b9:6a:4b:b4:ff:40:5e:63:6a:7b:a0:ce:ba:9c:
                    1b:10:cc:af:9e:32:61:fb:bc:b6:6b:43:a9:e1:74:
                    92:e8:bf:ef:c7:16:f6:56:36:1d:0e:1e:11:d6:a9:
                    23:ca:c8:08:9a:fa:01:1a:1d:cd:78:c6:a6:d2:1d:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E0:A0:94:1A:71:B9:69:BC:70:A9:A4:D6:D7:3C:86:D3:E6:B4:54
            X509v3 Authority Key Identifier:
                keyid:12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/3230302e312e3131362e302f32342d3234203d3e203136373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:db:1a:1b:e7:50:07:5e:56:fe:8f:21:77:b0:22:b4:e2:b7:
         33:e2:7b:ef:6c:db:5f:b9:a7:ec:d4:a8:20:09:99:e7:65:a3:
         d5:c1:25:62:d4:e1:e3:96:ea:a2:0f:85:07:2c:ee:0e:7b:61:
         ba:a9:8f:04:2b:aa:51:53:52:4b:9e:3a:a1:a6:f7:8a:d0:de:
         41:7d:10:cb:63:c1:7b:c0:c0:fc:84:a5:33:cd:78:0b:87:42:
         ac:61:b8:dd:a5:93:a1:b6:44:71:20:98:37:a9:32:0e:41:c9:
         68:9c:ec:fa:c5:b2:b9:c4:b5:e4:90:61:d5:ff:58:8e:82:49:
         0c:10:fe:17:44:fa:5e:3a:cb:95:b9:8a:9d:fd:e1:46:8b:7b:
         cf:06:d2:88:9c:9e:84:fd:e9:11:1b:1a:4a:aa:04:29:75:1b:
         c4:a4:7e:32:e4:c5:06:5b:a4:21:18:7d:3c:26:26:12:64:ab:
         a5:2b:04:aa:44:dc:5b:83:ea:54:40:51:65:bf:bc:ed:d0:ed:
         5c:7f:f7:4b:08:71:cf:03:bb:45:e6:b3:b8:99:7a:a0:5c:2f:
         b9:67:28:c6:b4:43:c3:12:89:6e:00:98:14:08:a5:b3:ba:f0:
         e9:ae:4c:63:0d:1f:2b:08:d1:2b:62:ab:5c:28:36:54:1f:56:
         6e:c2:71:ce
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNGpFV0y/rcvG5NKDgLCT55UBdz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIwNzJFNkMxQTQ4QUVDMTk1MDUxODBEMTQ1RDFENTZE
NzI5ODBGMzAeFw0yNTA1MDYyMDEyNDhaFw0yNjA1MDUyMDE3NDhaMDMxMTAvBgNV
BAMTKDZBRTBBMDk0MUE3MUI5NjlCQzcwQTlBNEQ2RDczQzg2RDNFNkI0NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWyV6qhKAXyrUHeqVkrIDR5veS
2F2R0/sQdpL4mDWo9DuDNEp0N+OMb1NOM/rBn6MLzSwtJddu/sNhw9TPXRYa0xYI
SdvKeh7JR4XAy1MiNFXd5XUxz5UHLov9TuBGn0X2BoS0JW/WS4clRGclgWSyn9UM
cqY/T605+hB3goNtkOXgyQZRe21v89TsyWQpk5++HNlSa2rxfsb1K8/M3EQPiQso
ZuwKqme5yGHw0NhKwNVUburDt+DBlnEkofNQs4PCqeG5aku0/0BeY2p7oM66nBsQ
zK+eMmH7vLZrQ6nhdJLov+/HFvZWNh0OHhHWqSPKyAia+gEaHc14xqbSHcGJAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUauCglBpxuWm8cKmk1tc8htPmtFQwHwYDVR0j
BBgwFoAUEgcubBpIrsGVBRgNFF0dVtcpgPMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODRCM0UxNjE2Qjg0M0E1OTQzRTNFOTA4MkEwRDI2QUZB
RUJDOEVGOUVGMjBFMjZBQUQ0OTUzMUMzREM5NDk0LzAvMTIwNzJFNkMxQTQ4QUVD
MTk1MDUxODBEMTQ1RDFENTZENzI5ODBGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjA3MkU2QzFBNDhBRUMxOTUw
NTE4MEQxNDVEMUQ1NkQ3Mjk4MEYzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg0QjNFMTYxNkI4NDNBNTk0M0UzRTkwODJBMEQyNkFGQUVCQzhFRjlF
RjIwRTI2QUFENDk1MzFDM0RDOTQ5NC8wLzMyMzAzMDJlMzEyZTMxMzEzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIAXQwDQYJ
KoZIhvcNAQELBQADggEBAETbGhvnUAdeVv6PIXewIrTitzPie+9s21+5p+zUqCAJ
medlo9XBJWLU4eOW6qIPhQcs7g57YbqpjwQrqlFTUkueOqGm94rQ3kF9EMtjwXvA
wPyEpTPNeAuHQqxhuN2lk6G2RHEgmDepMg5ByWic7PrFsrnEteSQYdX/WI6CSQwQ
/hdE+l46y5W5ip394UaLe88G0oicnoT96REbGkqqBCl1G8SkfjLkxQZbpCEYfTwm
JhJkq6UrBKpE3FuD6lRAUWW/vO3Q7Vx/90sIcc8Du0Xms7iZeqBcL7lnKMa0Q8MS
iW4AmBQIpbO68OmuTGMNHysI0Stiq1woNlQfVm7Ccc4=
-----END CERTIFICATE-----
Generated at Sat May 10 14:32:30 2025 by rpki-client