Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e38342e302e302f31372d3234203d3e2038303438.roa
File:                     3230302e38342e302e302f31372d3234203d3e2038303438.roa (raw, json)
Hash identifier:          nqrslC4wBh4vNnhtGMUrJIfjweBwDz2omLNbOYQ+BPA=
Subject key identifier:   C1:7A:78:8B:70:6F:23:7B:3C:10:8E:FE:29:F5:F2:33:C6:10:46:1C
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       1EC93FE758D08DA028F7E7A11A4E50434E7DEB97
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e38342e302e302f31372d3234203d3e2038303438.roa
Signing time:             Tue 13 May 2025 14:15:00 +0000
ROA not before:           Tue 13 May 2025 14:10:00 +0000
ROA not after:            Tue 12 May 2026 14:15:00 +0000
asID:                     8048
IP address blocks:        200.84.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c9:3f:e7:58:d0:8d:a0:28:f7:e7:a1:1a:4e:50:43:4e:7d:eb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: May 13 14:10:00 2025 GMT
            Not After : May 12 14:15:00 2026 GMT
        Subject: CN=C17A788B706F237B3C108EFE29F5F233C610461C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a1:47:2d:2e:61:d3:c9:5b:11:d9:71:48:b0:
                    03:3e:4c:25:7a:dd:5a:be:40:58:51:08:47:a0:76:
                    31:78:62:90:2b:43:1c:af:25:80:06:a7:5b:d5:f8:
                    b1:ac:78:eb:2b:8b:7e:81:20:af:0c:cc:44:41:ff:
                    46:9b:dc:f7:a4:d2:ce:c2:c9:ad:e1:dc:2a:c1:44:
                    2c:e2:f4:37:d8:d3:ef:1b:8d:8c:20:93:20:93:94:
                    1f:f5:16:46:91:16:ed:df:58:3e:83:ae:36:b9:3e:
                    2f:b7:84:d9:9f:0e:ac:99:11:88:a6:f6:fc:6a:0b:
                    2d:eb:c0:f3:f8:7e:03:c9:71:1c:cb:8b:53:69:11:
                    6d:53:95:cd:3e:0f:d4:ac:26:45:38:6d:e9:a8:90:
                    b1:1c:37:f6:cc:f9:f6:0d:07:27:87:72:8e:2f:53:
                    4a:9d:82:a4:ef:3e:58:ba:57:be:7f:90:30:1f:56:
                    c8:aa:10:e7:18:a0:2f:47:33:9b:ac:82:5c:0a:34:
                    16:7e:70:c5:63:1f:5a:66:59:d9:fe:92:ba:2a:c5:
                    48:3a:2a:a1:1f:08:b1:3c:e8:c8:6f:58:84:cb:68:
                    6d:33:8c:1c:78:23:64:65:79:7b:3d:c9:82:44:ba:
                    22:05:1e:fc:a5:1b:2b:be:51:99:11:4a:9f:21:e0:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7A:78:8B:70:6F:23:7B:3C:10:8E:FE:29:F5:F2:33:C6:10:46:1C
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e38342e302e302f31372d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.84.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         66:0b:3f:72:ce:cf:af:3d:2b:33:a9:c7:b8:86:47:fe:7c:cf:
         fd:b3:10:3a:fd:04:ac:8f:84:f3:63:5a:5f:b5:2f:30:e8:55:
         ee:5a:00:6c:a4:b0:43:28:c8:bf:18:ee:bf:b9:1d:d8:25:d3:
         97:62:f2:41:11:68:a6:de:fc:d8:6f:60:29:2d:80:1f:3a:44:
         c7:1d:c1:bd:c5:89:68:f3:17:3a:cb:69:fe:b5:a6:e7:30:31:
         ad:68:22:97:e2:c4:7f:1f:b7:5e:14:ad:bf:17:5f:88:74:69:
         15:46:67:ce:22:b6:39:3d:b5:71:cf:24:bd:1e:6d:b5:52:bf:
         af:22:85:d1:ba:47:d2:45:7a:71:d8:bc:aa:bc:e7:df:0c:bc:
         f1:e3:27:da:53:f5:4d:53:dc:b5:54:cf:bd:3c:e0:1a:f0:e7:
         37:a0:fe:23:08:a1:3a:46:06:ab:da:e0:37:e5:69:b6:35:ca:
         92:48:f7:32:7c:3e:1c:c5:bb:1c:72:2c:f2:ba:03:57:4d:f2:
         bc:21:20:49:1b:06:bb:21:a3:5e:85:48:2c:5d:a0:9b:73:a1:
         d1:ea:01:cb:a4:ca:5c:02:96:bb:00:f3:12:97:3b:69:e0:b1:
         53:55:e6:3a:f7:93:80:2b:09:b2:de:82:fd:e2:b6:6e:35:0f:
         35:98:11:8a
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUHsk/51jQjaAo9+ehGk5QQ05965cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1NkZDMjNBOEM1RkMwNjdCN0QwQkZENjA1QzBGNUEz
M0QwMzZCNDAeFw0yNTA1MTMxNDEwMDBaFw0yNjA1MTIxNDE1MDBaMDMxMTAvBgNV
BAMTKEMxN0E3ODhCNzA2RjIzN0IzQzEwOEVGRTI5RjVGMjMzQzYxMDQ2MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXoUctLmHTyVsR2XFIsAM+TCV6
3Vq+QFhRCEegdjF4YpArQxyvJYAGp1vV+LGseOsri36BIK8MzERB/0ab3Pek0s7C
ya3h3CrBRCzi9DfY0+8bjYwgkyCTlB/1FkaRFu3fWD6Drja5Pi+3hNmfDqyZEYim
9vxqCy3rwPP4fgPJcRzLi1NpEW1Tlc0+D9SsJkU4bemokLEcN/bM+fYNByeHco4v
U0qdgqTvPli6V75/kDAfVsiqEOcYoC9HM5usglwKNBZ+cMVjH1pmWdn+kroqxUg6
KqEfCLE86MhvWITLaG0zjBx4I2RleXs9yYJEuiIFHvylGyu+UZkRSp8h4OUTAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUwXp4i3BvI3s8EI7+KfXyM8YQRhwwHwYDVR0j
BBgwFoAUn1b8I6jF/AZ7fQv9YFwPWjPQNrQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80M0NDNTcwNDIzRkFGODE2M0Q4NkNDMjFGMUJBMDNEODk1
MDJBRTlDMTI0RkVGODlBRjYxRjQwMkVBRUU4QjgzLzAvOUY1NkZDMjNBOEM1RkMw
NjdCN0QwQkZENjA1QzBGNUEzM0QwMzZCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjU2RkMyM0E4QzVGQzA2N0I3
RDBCRkQ2MDVDMEY1QTMzRDAzNkI0LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDNDQzU3MDQyM0ZBRjgxNjNEODZDQzIxRjFCQTAzRDg5NTAyQUU5QzEy
NEZFRjg5QUY2MUY0MDJFQUVFOEI4My8wLzMyMzAzMDJlMzgzNDJlMzAyZTMwMmYz
MTM3MmQzMjM0MjAzZDNlMjAzODMwMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB8hUADANBgkqhkiG
9w0BAQsFAAOCAQEAZgs/cs7Prz0rM6nHuIZH/nzP/bMQOv0ErI+E82NaX7UvMOhV
7loAbKSwQyjIvxjuv7kd2CXTl2LyQRFopt782G9gKS2AHzpExx3BvcWJaPMXOstp
/rWm5zAxrWgil+LEfx+3XhStvxdfiHRpFUZnziK2OT21cc8kvR5ttVK/ryKF0bpH
0kV6cdi8qrzn3wy88eMn2lP1TVPctVTPvTzgGvDnN6D+IwihOkYGq9rgN+VptjXK
kkj3Mnw+HMW7HHIs8roDV03yvCEgSRsGuyGjXoVILF2gm3Oh0eoBy6TKXAKWuwDz
Epc7aeCxU1XmOveTgCsJst6C/eK2bjUPNZgRig==
-----END CERTIFICATE-----
Generated at Sun May 18 11:03:15 2025 by rpki-client