Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/3230312e3232302e31302e302f32342d3234203d3e203230393430.roa
File:                     3230312e3232302e31302e302f32342d3234203d3e203230393430.roa (raw, json)
Hash identifier:          uqGPRtBgzdtgJAcD+zEbBC/WwpY862fb/9euzweoPlg=
Subject key identifier:   02:FF:75:00:0D:84:A7:F6:D6:7F:C2:6B:EC:D9:A8:62:F1:93:87:FB
Certificate issuer:       /CN=8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118
Certificate serial:       16A2A2276A0AB83A6B27167DDC81701AEE2ACC9F
Authority key identifier: 83:34:A3:FB:4A:FA:5A:2B:29:BE:AD:E3:3F:59:57:C1:DA:DE:51:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/3230312e3232302e31302e302f32342d3234203d3e203230393430.roa
Signing time:             Tue 04 Feb 2025 18:42:55 +0000
ROA not before:           Tue 04 Feb 2025 18:37:55 +0000
ROA not after:            Tue 03 Feb 2026 18:42:55 +0000
asID:                     20940
IP address blocks:        201.220.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a2:a2:27:6a:0a:b8:3a:6b:27:16:7d:dc:81:70:1a:ee:2a:cc:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118
        Validity
            Not Before: Feb  4 18:37:55 2025 GMT
            Not After : Feb  3 18:42:55 2026 GMT
        Subject: CN=02FF75000D84A7F6D67FC26BECD9A862F19387FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:84:93:73:c2:17:1c:05:75:20:fd:2f:3d:
                    16:53:12:a5:4d:f0:71:2e:2e:d8:0c:ae:82:ad:6e:
                    5f:4b:f8:23:98:78:9b:15:1b:55:c9:f3:62:68:a6:
                    65:63:2f:f0:74:5c:89:de:a3:b8:17:5e:16:70:74:
                    b0:46:84:c4:22:b7:a7:70:22:37:85:09:dc:73:20:
                    1f:65:c8:3c:b0:f3:eb:c7:3e:35:06:1a:94:fb:c4:
                    d0:09:db:e6:7e:0c:b5:b0:c9:bf:4e:63:65:7a:89:
                    8e:90:8b:3b:fe:03:f9:03:6a:0a:40:c5:86:39:28:
                    c8:c3:eb:d6:3d:7b:41:d0:37:6a:26:4e:36:89:8f:
                    06:9f:ea:50:09:ec:8b:b3:1c:43:97:8a:ab:78:f5:
                    08:26:c5:1e:13:ad:13:80:58:6e:dd:71:96:2e:92:
                    34:01:55:f3:08:a3:8d:8f:5a:d7:9a:7b:62:fc:f5:
                    71:c7:61:77:1c:ef:71:41:f0:85:af:07:6d:bd:fa:
                    2c:cb:1e:ee:17:0a:5a:db:11:e0:0b:cd:5a:c2:ca:
                    80:12:08:34:d4:ee:e4:20:8c:f5:46:76:42:ab:b3:
                    0e:4f:46:96:5d:b4:c0:8b:4d:b3:4b:99:a7:c2:78:
                    e7:94:85:28:2b:7a:6b:93:c4:77:48:61:08:7a:97:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FF:75:00:0D:84:A7:F6:D6:7F:C2:6B:EC:D9:A8:62:F1:93:87:FB
            X509v3 Authority Key Identifier:
                keyid:83:34:A3:FB:4A:FA:5A:2B:29:BE:AD:E3:3F:59:57:C1:DA:DE:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8334A3FB4AFA5A2B29BEADE33F5957C1DADE5118.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0676491906B64646146F2A6751BA0E3AA8E03937871ED392995BAE365D75449/0/3230312e3232302e31302e302f32342d3234203d3e203230393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:cf:67:87:47:b2:f0:de:39:78:92:a9:05:6d:90:41:1b:c9:
         cb:03:7e:b8:7a:31:f6:84:c0:34:2a:da:94:11:49:6c:ef:4b:
         cc:e1:79:48:06:f7:a4:24:31:ac:ae:20:c4:81:35:cf:1a:97:
         77:ea:19:f6:0b:f2:c8:d4:6f:17:08:b2:7a:8d:a4:ff:84:1e:
         b1:48:c3:8f:77:df:99:51:af:d4:fe:e1:61:fc:da:e6:93:2f:
         bf:d4:1e:ee:71:30:99:35:88:0d:93:17:9a:e3:84:8f:2f:33:
         49:97:fd:a1:6c:18:ed:00:d2:fb:fd:66:48:da:79:4c:f3:dc:
         01:88:92:c4:de:16:85:65:94:be:9c:00:af:0c:73:15:6c:4a:
         1d:7e:72:ec:84:78:c8:c8:72:29:e6:d5:b5:f9:f9:34:9c:8b:
         18:a4:b3:70:ba:92:c3:bc:af:4f:15:fd:43:1e:e4:4b:10:e5:
         42:ee:b6:e1:26:34:c5:b5:66:4a:24:e6:12:16:02:19:3c:d7:
         7c:c6:fd:09:94:e4:67:db:c6:a7:34:d9:ae:5d:06:d8:1d:9c:
         d8:0d:ff:d3:7a:20:a6:e0:5b:21:52:f5:c2:c8:ec:c6:40:e6:
         22:19:d5:38:71:e7:ac:2f:fe:0f:1a:d3:5a:96:a1:72:a0:42:
         5c:31:1d:df
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFqKiJ2oKuDprJxZ93IFwGu4qzJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMzNEEzRkI0QUZBNUEyQjI5QkVBREUzM0Y1OTU3QzFE
QURFNTExODAeFw0yNTAyMDQxODM3NTVaFw0yNjAyMDMxODQyNTVaMDMxMTAvBgNV
BAMTKDAyRkY3NTAwMEQ4NEE3RjZENjdGQzI2QkVDRDlBODYyRjE5Mzg3RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eYSTc8IXHAV1IP0vPRZTEqVN
8HEuLtgMroKtbl9L+COYeJsVG1XJ82JopmVjL/B0XIneo7gXXhZwdLBGhMQit6dw
IjeFCdxzIB9lyDyw8+vHPjUGGpT7xNAJ2+Z+DLWwyb9OY2V6iY6Qizv+A/kDagpA
xYY5KMjD69Y9e0HQN2omTjaJjwaf6lAJ7IuzHEOXiqt49QgmxR4TrROAWG7dcZYu
kjQBVfMIo42PWteae2L89XHHYXcc73FB8IWvB229+izLHu4XClrbEeALzVrCyoAS
CDTU7uQgjPVGdkKrsw5PRpZdtMCLTbNLmafCeOeUhSgremuTxHdIYQh6l1gXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUAv91AA2Ep/bWf8Jr7NmoYvGTh/swHwYDVR0j
BBgwFoAUgzSj+0r6Wispvq3jP1lXwdreURgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDY3NjQ5MTkwNkI2NDY0NjE0NkYyQTY3NTFCQTBFM0FB
OEUwMzkzNzg3MUVEMzkyOTk1QkFFMzY1RDc1NDQ5LzAvODMzNEEzRkI0QUZBNUEy
QjI5QkVBREUzM0Y1OTU3QzFEQURFNTExOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MzM0QTNGQjRBRkE1QTJCMjlC
RUFERTMzRjU5NTdDMURBREU1MTE4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2NzY0OTE5MDZCNjQ2NDYxNDZGMkE2NzUxQkEwRTNBQThFMDM5Mzc4
NzFFRDM5Mjk5NUJBRTM2NUQ3NTQ0OS8wLzMyMzAzMTJlMzIzMjMwMmUzMTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMncCjAN
BgkqhkiG9w0BAQsFAAOCAQEAlM9nh0ey8N45eJKpBW2QQRvJywN+uHox9oTANCra
lBFJbO9LzOF5SAb3pCQxrK4gxIE1zxqXd+oZ9gvyyNRvFwiyeo2k/4QesUjDj3ff
mVGv1P7hYfza5pMvv9Qe7nEwmTWIDZMXmuOEjy8zSZf9oWwY7QDS+/1mSNp5TPPc
AYiSxN4WhWWUvpwArwxzFWxKHX5y7IR4yMhyKebVtfn5NJyLGKSzcLqSw7yvTxX9
Qx7kSxDlQu624SY0xbVmSiTmEhYCGTzXfMb9CZTkZ9vGpzTZrl0G2B2c2A3/03og
puBbIVL1wsjsxkDmIhnVOHHnrC/+DxrTWpahcqBCXDEd3w==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:33:23 2025 by rpki-client