Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/3136302e32302e39322e302f32322d3234203d3e20323635373134.roa
File:                     3136302e32302e39322e302f32322d3234203d3e20323635373134.roa (raw, json)
Hash identifier:          YsjWIWWoxK83sqOjkiMKgl9CxwXJc7q+QgpHrosYrP8=
Subject key identifier:   C0:E6:38:A5:50:46:5D:F8:3D:51:11:FE:9D:F9:FC:9E:29:C8:96:56
Certificate issuer:       /CN=25B35CCB197A59589C3EC69A6379A2D5D692BFE4
Certificate serial:       565D654406EB7D9F5720D112287C483E5729AA0B
Authority key identifier: 25:B3:5C:CB:19:7A:59:58:9C:3E:C6:9A:63:79:A2:D5:D6:92:BF:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/3136302e32302e39322e302f32322d3234203d3e20323635373134.roa
Signing time:             Tue 13 May 2025 04:18:40 +0000
ROA not before:           Tue 13 May 2025 04:13:40 +0000
ROA not after:            Tue 12 May 2026 04:18:40 +0000
asID:                     265714
IP address blocks:        160.20.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 15:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5d:65:44:06:eb:7d:9f:57:20:d1:12:28:7c:48:3e:57:29:aa:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B35CCB197A59589C3EC69A6379A2D5D692BFE4
        Validity
            Not Before: May 13 04:13:40 2025 GMT
            Not After : May 12 04:18:40 2026 GMT
        Subject: CN=C0E638A550465DF83D5111FE9DF9FC9E29C89656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:75:a4:3a:9e:4b:9e:f8:cb:d8:19:6f:66:
                    6a:ed:50:f3:7f:f1:8b:d1:b9:16:ee:31:b8:10:1a:
                    fe:b5:b0:34:44:3e:e8:bd:fd:06:75:31:95:5e:19:
                    c1:f0:35:53:11:8c:f8:29:4d:24:64:fc:f2:fa:a6:
                    90:6e:91:a5:95:7e:01:c0:29:6a:17:a5:e8:0a:e0:
                    b9:6b:22:31:14:42:7e:56:14:03:af:b6:46:a9:05:
                    f7:cc:5f:73:89:99:1e:b8:35:44:90:c6:3b:ac:a8:
                    69:2b:25:df:35:2e:15:71:5b:b0:bc:15:71:62:4b:
                    22:bf:21:a3:52:63:b1:7f:04:4e:36:ce:95:fd:6b:
                    ae:87:b4:17:96:06:20:c1:ef:38:ce:0a:f6:11:01:
                    98:01:e7:f8:9c:6e:21:7b:28:9e:54:2f:02:b1:c9:
                    f7:c5:78:20:32:c3:68:2d:ba:19:a1:1d:5e:fc:b0:
                    09:4c:e7:f9:ac:3e:44:42:dd:43:52:b7:fd:2f:15:
                    67:02:df:e9:4d:b0:92:08:d0:e8:79:ef:c0:2f:c8:
                    c1:6f:ed:c4:f8:3b:5a:61:40:79:03:a5:5c:63:f4:
                    a7:54:8d:06:92:90:11:22:31:61:be:e2:75:82:cf:
                    39:74:2d:08:e6:b4:8c:4b:b9:59:79:ca:57:64:02:
                    f7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E6:38:A5:50:46:5D:F8:3D:51:11:FE:9D:F9:FC:9E:29:C8:96:56
            X509v3 Authority Key Identifier:
                keyid:25:B3:5C:CB:19:7A:59:58:9C:3E:C6:9A:63:79:A2:D5:D6:92:BF:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25B35CCB197A59589C3EC69A6379A2D5D692BFE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99C29EB10A1AE0ED03F2378E272A4A3F5EF16E58FFD92CC3086B4DFCD57C50B2/0/3136302e32302e39322e302f32322d3234203d3e20323635373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:d2:ce:20:dc:b1:2a:4f:3e:fe:83:7a:1b:ac:ab:e0:0a:
         8c:89:52:e8:c6:94:6b:8d:66:27:d8:bf:a8:51:b3:93:8a:10:
         fc:68:82:58:51:85:d2:73:cb:8a:04:6c:4b:77:b8:29:1f:33:
         b0:da:73:50:46:7b:43:a5:32:08:7f:45:97:77:df:18:1c:00:
         e3:8b:4a:ec:37:a5:9f:0e:f2:cb:35:00:86:11:68:9b:24:48:
         d2:00:32:97:a0:67:83:b2:6b:3b:3e:12:34:19:ba:d3:9a:b3:
         fe:c5:28:fa:4a:1d:51:de:19:a2:dc:ad:0c:ca:6c:0c:40:f7:
         b6:a0:32:1e:8d:07:56:0b:b8:15:ce:fd:cc:6b:a6:e8:47:a5:
         0b:fc:94:9c:43:eb:a5:10:2b:a9:f2:db:07:d5:ab:d3:1d:66:
         66:3c:c8:e2:7a:a6:66:00:fe:52:b6:07:73:e2:f1:51:26:88:
         b4:2d:fa:10:71:9e:fc:df:1d:e2:9a:d1:35:82:3b:29:d2:89:
         18:b5:1d:c2:79:d9:a8:a3:f3:e4:99:a2:bb:94:ed:11:66:37:
         2a:ca:8a:79:b5:00:bf:4b:a1:7d:05:5a:7d:10:09:77:ca:de:
         6d:8f:3b:f8:c6:f2:5e:34:4e:36:85:de:a2:34:a9:fb:40:94:
         83:73:8a:6a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVl1lRAbrfZ9XINESKHxIPlcpqgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVCMzVDQ0IxOTdBNTk1ODlDM0VDNjlBNjM3OUEyRDVE
NjkyQkZFNDAeFw0yNTA1MTMwNDEzNDBaFw0yNjA1MTIwNDE4NDBaMDMxMTAvBgNV
BAMTKEMwRTYzOEE1NTA0NjVERjgzRDUxMTFGRTlERjlGQzlFMjlDODk2NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsrXWkOp5LnvjL2BlvZmrtUPN/
8YvRuRbuMbgQGv61sDREPui9/QZ1MZVeGcHwNVMRjPgpTSRk/PL6ppBukaWVfgHA
KWoXpegK4LlrIjEUQn5WFAOvtkapBffMX3OJmR64NUSQxjusqGkrJd81LhVxW7C8
FXFiSyK/IaNSY7F/BE42zpX9a66HtBeWBiDB7zjOCvYRAZgB5/icbiF7KJ5ULwKx
yffFeCAyw2gtuhmhHV78sAlM5/msPkRC3UNSt/0vFWcC3+lNsJII0Oh578AvyMFv
7cT4O1phQHkDpVxj9KdUjQaSkBEiMWG+4nWCzzl0LQjmtIxLuVl5yldkAvfpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUwOY4pVBGXfg9URH+nfn8ninIllYwHwYDVR0j
BBgwFoAUJbNcyxl6WVicPsaaY3mi1daSv+QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OUMyOUVCMTBBMUFFMEVEMDNGMjM3OEUyNzJBNEEzRjVF
RjE2RTU4RkZEOTJDQzMwODZCNERGQ0Q1N0M1MEIyLzAvMjVCMzVDQ0IxOTdBNTk1
ODlDM0VDNjlBNjM3OUEyRDVENjkyQkZFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUIzNUNDQjE5N0E1OTU4OUMz
RUM2OUE2Mzc5QTJENUQ2OTJCRkU0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTlDMjlFQjEwQTFBRTBFRDAzRjIzNzhFMjcyQTRBM0Y1RUYxNkU1OEZG
RDkyQ0MzMDg2QjRERkNENTdDNTBCMi8wLzMxMzYzMDJlMzIzMDJlMzkzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTM3MzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqAUXDAN
BgkqhkiG9w0BAQsFAAOCAQEADrDSziDcsSpPPv6Dehusq+AKjIlS6MaUa41mJ9i/
qFGzk4oQ/GiCWFGF0nPLigRsS3e4KR8zsNpzUEZ7Q6UyCH9Fl3ffGBwA44tK7Del
nw7yyzUAhhFomyRI0gAyl6Bng7JrOz4SNBm605qz/sUo+kodUd4ZotytDMpsDED3
tqAyHo0HVgu4Fc79zGum6EelC/yUnEPrpRArqfLbB9Wr0x1mZjzI4nqmZgD+UrYH
c+LxUSaItC36EHGe/N8d4prRNYI7KdKJGLUdwnnZqKPz5Jmiu5TtEWY3KsqKebUA
v0uhfQVafRAJd8rebY87+MbyXjRONoXeojSp+0CUg3OKag==
-----END CERTIFICATE-----
Generated at Sun May 18 14:49:47 2025 by rpki-client