Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36392e302f32342d3234203d3e20323733393432.roa
File:                     3230302e3130372e36392e302f32342d3234203d3e20323733393432.roa (raw, json)
Hash identifier:          0T2dLqt/TUvnop6cGTA0fPGw2qljoJd5TDHlXGVqgHQ=
Subject key identifier:   AA:F0:44:61:7E:F7:87:A6:BB:49:BE:61:ED:64:69:06:75:F1:E0:B2
Certificate issuer:       /CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
Certificate serial:       31027E7B39B131C3C1880F99074A0582B9AB97BF
Authority key identifier: 93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36392e302f32342d3234203d3e20323733393432.roa
Signing time:             Fri 23 May 2025 03:00:00 +0000
ROA not before:           Fri 23 May 2025 02:55:00 +0000
ROA not after:            Fri 22 May 2026 03:00:00 +0000
asID:                     273942
IP address blocks:        200.107.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 21:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:02:7e:7b:39:b1:31:c3:c1:88:0f:99:07:4a:05:82:b9:ab:97:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
        Validity
            Not Before: May 23 02:55:00 2025 GMT
            Not After : May 22 03:00:00 2026 GMT
        Subject: CN=AAF044617EF787A6BB49BE61ED64690675F1E0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:2b:44:d3:0d:71:d5:ab:49:fa:35:38:5a:
                    75:93:ff:a9:1a:ab:5d:41:6a:21:b0:4f:64:06:04:
                    f4:19:5b:87:5d:6d:ff:6a:42:d7:a2:b4:90:88:80:
                    bb:59:b6:3d:9b:3e:f7:87:57:cb:e3:2a:f6:54:fa:
                    57:94:e9:4d:55:4b:70:4f:ab:0f:4a:de:d3:f9:b4:
                    db:e2:d9:ee:73:09:29:4b:af:6f:a5:31:d3:2c:aa:
                    f5:a9:28:c5:3a:ba:30:9d:0b:0e:46:b7:e1:68:5d:
                    39:c7:63:21:25:a1:7f:c3:a3:1f:cb:52:ee:ab:05:
                    08:fd:9c:2a:64:32:3d:85:b3:d1:a8:5b:76:6a:be:
                    db:3d:36:65:67:00:8a:af:52:08:70:8b:1e:ec:7f:
                    64:88:af:db:bf:5b:e9:01:c4:5d:0a:77:6b:e0:7e:
                    95:04:8e:f7:d5:27:c0:3a:28:72:7f:7f:32:a9:67:
                    83:da:3f:d2:c4:f6:a9:62:6b:b1:99:1d:bc:84:1c:
                    30:cd:bb:ad:30:d5:18:43:ef:96:2f:b7:54:58:dc:
                    eb:48:23:e0:a2:16:87:0b:12:2f:17:ae:3f:1d:fa:
                    fd:4d:8c:89:5c:9b:b7:b4:44:4b:63:34:43:95:a2:
                    5b:a5:fb:1c:d9:f0:90:09:e5:78:9a:51:0f:0d:52:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F0:44:61:7E:F7:87:A6:BB:49:BE:61:ED:64:69:06:75:F1:E0:B2
            X509v3 Authority Key Identifier:
                keyid:93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36392e302f32342d3234203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:76:1b:5a:17:02:b2:bc:4c:79:09:4a:2c:4c:88:c4:1c:8e:
         ee:86:45:7b:00:a4:af:10:48:78:95:98:d6:50:07:8f:9f:9a:
         18:0f:90:19:d7:81:28:88:5c:c5:35:3f:60:fe:7b:a2:ad:3a:
         a3:6d:f3:f2:33:4a:88:f0:c3:7b:cc:43:bf:6b:88:dc:2b:de:
         22:aa:a3:54:a7:0f:99:89:47:e0:3a:05:aa:b3:1e:50:ac:fd:
         f5:b0:ee:a6:62:68:03:73:4a:ee:e7:75:55:e9:3a:5b:ba:8c:
         c8:88:6c:5c:b5:02:8b:d6:ae:e3:d7:ed:d6:59:40:5d:41:9e:
         03:cc:05:25:2e:06:fc:68:d5:b2:d8:73:c5:ee:76:77:92:b7:
         45:74:7a:a5:fd:98:f5:d1:fe:15:bc:38:15:ad:de:97:d8:51:
         82:33:f4:07:f6:93:6a:62:7d:98:de:6b:73:c4:ef:1c:7e:83:
         fa:b7:33:9a:3e:7f:e9:5b:fd:08:ec:e1:ad:c1:90:2b:b3:a7:
         02:c4:54:20:ca:42:d5:00:57:ce:a7:78:5d:d5:7b:aa:f5:07:
         1d:fa:10:89:3e:2d:b2:de:ce:ee:d6:9d:eb:dc:46:87:0e:ee:
         4c:5d:15:43:e2:c9:e1:3c:50:6d:ad:69:a6:c5:38:0e:a2:2b:
         97:58:36:c2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMQJ+ezmxMcPBiA+ZB0oFgrmrl78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMxNDFCNjcyQzZEM0FFQjcxMjY5MkJCQzZCRkNGMThB
NDJDNzU0OTAeFw0yNTA1MjMwMjU1MDBaFw0yNjA1MjIwMzAwMDBaMDMxMTAvBgNV
BAMTKEFBRjA0NDYxN0VGNzg3QTZCQjQ5QkU2MUVENjQ2OTA2NzVGMUUwQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbitE0w1x1atJ+jU4WnWT/6ka
q11BaiGwT2QGBPQZW4ddbf9qQteitJCIgLtZtj2bPveHV8vjKvZU+leU6U1VS3BP
qw9K3tP5tNvi2e5zCSlLr2+lMdMsqvWpKMU6ujCdCw5Gt+FoXTnHYyEloX/Dox/L
Uu6rBQj9nCpkMj2Fs9GoW3Zqvts9NmVnAIqvUghwix7sf2SIr9u/W+kBxF0Kd2vg
fpUEjvfVJ8A6KHJ/fzKpZ4PaP9LE9qlia7GZHbyEHDDNu60w1RhD75Yvt1RY3OtI
I+CiFocLEi8Xrj8d+v1NjIlcm7e0REtjNEOVolul+xzZ8JAJ5XiaUQ8NUjc/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUqvBEYX73h6a7Sb5h7WRpBnXx4LIwHwYDVR0j
BBgwFoAUkxQbZyxtOutxJpK7xr/PGKQsdUkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RUY1RTY3N0M0N0FGMjYwOEU4RENDOUIzNUNFMTM1MjJD
QTFDN0Y1NDI4NEY1ODIxQTlDQ0I5OEQ4MUY4Nzg3LzAvOTMxNDFCNjcyQzZEM0FF
QjcxMjY5MkJCQzZCRkNGMThBNDJDNzU0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MzE0MUI2NzJDNkQzQUVCNzEy
NjkyQkJDNkJGQ0YxOEE0MkM3NTQ5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEVGNUU2NzdDNDdBRjI2MDhFOERDQzlCMzVDRTEzNTIyQ0ExQzdGNTQy
ODRGNTgyMUE5Q0NCOThEODFGODc4Ny8wLzMyMzAzMDJlMzEzMDM3MmUzNjM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzkzNDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGtF
MA0GCSqGSIb3DQEBCwUAA4IBAQAKdhtaFwKyvEx5CUosTIjEHI7uhkV7AKSvEEh4
lZjWUAePn5oYD5AZ14EoiFzFNT9g/nuirTqjbfPyM0qI8MN7zEO/a4jcK94iqqNU
pw+ZiUfgOgWqsx5QrP31sO6mYmgDc0ru53VV6TpbuozIiGxctQKL1q7j1+3WWUBd
QZ4DzAUlLgb8aNWy2HPF7nZ3krdFdHql/Zj10f4VvDgVrd6X2FGCM/QH9pNqYn2Y
3mtzxO8cfoP6tzOaPn/pW/0I7OGtwZArs6cCxFQgykLVAFfOp3hd1Xuq9Qcd+hCJ
Pi2y3s7u1p3r3EaHDu5MXRVD4snhPFBtrWmmxTgOoiuXWDbC
-----END CERTIFICATE-----
Generated at Sat Jul 5 07:00:09 2025 by rpki-client