Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203139393035.roa
File:                     3230302e3131302e33322e302f32302d3234203d3e203139393035.roa (raw, json)
Hash identifier:          tNX7wvAl3eGw8xsF7Pq9lRUuxlZFZ0I6vN6424C3wgE=
Subject key identifier:   5E:BD:F0:56:79:C2:98:8A:3A:34:C5:B6:F4:73:6C:6A:99:96:93:93
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       622C0925AC8EF3FBDC9198D412CC16CD88D11A91
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203139393035.roa
Signing time:             Tue 04 Feb 2025 18:18:11 +0000
ROA not before:           Tue 04 Feb 2025 18:13:11 +0000
ROA not after:            Tue 03 Feb 2026 18:18:11 +0000
asID:                     19905
IP address blocks:        200.110.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2c:09:25:ac:8e:f3:fb:dc:91:98:d4:12:cc:16:cd:88:d1:1a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Feb  4 18:13:11 2025 GMT
            Not After : Feb  3 18:18:11 2026 GMT
        Subject: CN=5EBDF05679C2988A3A34C5B6F4736C6A99969393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:11:6c:fd:29:f8:6d:13:e8:57:3f:d1:d4:
                    a2:0c:b9:e4:94:4e:d3:4f:36:47:73:8d:f0:c9:ba:
                    85:e2:d5:c8:77:7c:1b:7d:e0:21:60:69:b3:95:f1:
                    01:a8:9e:ef:07:79:55:5c:5b:a5:26:86:77:e6:0c:
                    9c:2c:03:b1:40:49:c0:c9:6e:76:5c:9d:47:e6:d9:
                    af:86:6c:f5:6a:48:e1:6a:02:59:2a:a5:05:b2:3b:
                    73:c2:f7:78:e6:cc:d9:99:05:be:f1:21:05:ce:8f:
                    0c:2a:0e:5b:7b:eb:5f:c3:fd:f5:14:c2:2c:d8:d3:
                    f0:ce:80:b5:36:fb:c1:bb:70:77:0f:02:74:33:20:
                    31:71:2e:20:7d:3b:61:ff:83:3e:68:5a:f8:f0:f0:
                    c3:68:72:5b:e7:e3:ab:3b:42:e2:bd:58:6c:6c:be:
                    4f:23:ea:97:be:9c:7e:74:cb:1c:54:e0:f6:bd:ef:
                    f5:55:b2:57:9e:fc:ec:c8:ee:c4:bc:a9:61:a2:f3:
                    e9:63:fe:15:8f:08:5a:e5:18:b1:a1:ae:2e:f4:e9:
                    8a:09:97:04:14:5e:6f:b5:b2:f2:8d:a4:35:bf:c5:
                    f4:7e:6a:2f:62:63:05:af:5c:10:5a:98:33:db:09:
                    f8:18:fc:63:49:df:31:8c:54:a6:94:40:b5:91:19:
                    55:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BD:F0:56:79:C2:98:8A:3A:34:C5:B6:F4:73:6C:6A:99:96:93:93
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:50:a4:03:51:cb:6d:9f:70:43:f4:2e:bc:38:4a:3d:00:0b:
         ea:df:e3:97:66:41:a5:04:76:8b:64:bb:62:fc:18:31:72:57:
         1f:c2:7d:ec:a0:fd:d6:a5:0b:8b:8f:e4:9d:2d:ea:a4:de:77:
         2c:4d:56:d9:79:02:0d:93:d7:2a:a9:50:d8:56:50:fe:66:0a:
         48:20:1b:9a:37:00:50:31:45:5d:d6:65:8e:c9:5b:41:79:de:
         24:94:5f:db:24:ff:98:12:96:5b:c2:86:b6:9a:17:99:52:c4:
         44:df:fc:f1:b6:a4:1e:bc:bf:f8:3f:5c:25:4e:df:73:3f:58:
         dd:7c:c1:74:91:16:74:ec:06:23:61:60:c9:3b:36:20:af:02:
         2f:1b:73:19:94:70:80:e8:85:93:97:1b:c4:e2:ad:bd:69:aa:
         8c:a6:84:69:d1:78:93:bc:57:34:e0:19:95:eb:e4:04:76:0a:
         33:5e:8d:f9:4f:88:b1:05:c7:6c:40:6f:ac:4d:60:9c:07:44:
         4f:2d:20:60:4a:07:71:5a:f3:ed:4d:09:7e:91:de:33:28:2a:
         ea:0e:60:68:ab:e6:bf:38:16:3d:94:9e:9e:b5:2b:51:29:69:
         df:e4:97:e6:ea:76:99:5f:8a:99:2b:1e:53:e3:0e:cc:45:32:
         91:8e:d0:58
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYiwJJayO8/vckZjUEswWzYjRGpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNTAyMDQxODEzMTFaFw0yNjAyMDMxODE4MTFaMDMxMTAvBgNV
BAMTKDVFQkRGMDU2NzlDMjk4OEEzQTM0QzVCNkY0NzM2QzZBOTk5NjkzOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnhFs/Sn4bRPoVz/R1KIMueSU
TtNPNkdzjfDJuoXi1ch3fBt94CFgabOV8QGonu8HeVVcW6UmhnfmDJwsA7FAScDJ
bnZcnUfm2a+GbPVqSOFqAlkqpQWyO3PC93jmzNmZBb7xIQXOjwwqDlt761/D/fUU
wizY0/DOgLU2+8G7cHcPAnQzIDFxLiB9O2H/gz5oWvjw8MNoclvn46s7QuK9WGxs
vk8j6pe+nH50yxxU4Pa97/VVslee/OzI7sS8qWGi8+lj/hWPCFrlGLGhri706YoJ
lwQUXm+1svKNpDW/xfR+ai9iYwWvXBBamDPbCfgY/GNJ3zGMVKaUQLWRGVVtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXr3wVnnCmIo6NMW29HNsapmWk5MwHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMyMzAzMDJlMzEzMTMwMmUzMzMyMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzOTM5MzAzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMhuIDAN
BgkqhkiG9w0BAQsFAAOCAQEALVCkA1HLbZ9wQ/QuvDhKPQAL6t/jl2ZBpQR2i2S7
YvwYMXJXH8J97KD91qULi4/knS3qpN53LE1W2XkCDZPXKqlQ2FZQ/mYKSCAbmjcA
UDFFXdZljslbQXneJJRf2yT/mBKWW8KGtpoXmVLERN/88bakHry/+D9cJU7fcz9Y
3XzBdJEWdOwGI2FgyTs2IK8CLxtzGZRwgOiFk5cbxOKtvWmqjKaEadF4k7xXNOAZ
levkBHYKM16N+U+IsQXHbEBvrE1gnAdETy0gYEoHcVrz7U0JfpHeMygq6g5gaKvm
vzgWPZSenrUrUSlp3+SX5up2mV+KmSseU+MOzEUykY7QWA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:44:12 2025 by rpki-client