Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35332e302f32342d3234203d3e203631343832.roa
File:                     3230302e3132362e35332e302f32342d3234203d3e203631343832.roa (raw, json)
Hash identifier:          5opnb9J4q7a/XNg5eX5mEghs/Ixo2yQ3dQf5osKcvPs=
Subject key identifier:   4E:85:FA:0E:93:CF:1B:EF:58:DA:51:E4:10:38:BB:37:57:39:F2:AB
Certificate issuer:       /CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
Certificate serial:       6C7D6324B08BB78C956256DE416A34969D0B977E
Authority key identifier: 27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35332e302f32342d3234203d3e203631343832.roa
Signing time:             Thu 26 Jun 2025 17:23:43 +0000
ROA not before:           Thu 26 Jun 2025 17:18:43 +0000
ROA not after:            Thu 25 Jun 2026 17:23:43 +0000
asID:                     61482
IP address blocks:        200.126.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7d:63:24:b0:8b:b7:8c:95:62:56:de:41:6a:34:96:9d:0b:97:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
        Validity
            Not Before: Jun 26 17:18:43 2025 GMT
            Not After : Jun 25 17:23:43 2026 GMT
        Subject: CN=4E85FA0E93CF1BEF58DA51E41038BB375739F2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:b9:45:12:e5:21:e5:ec:6e:92:fb:0a:2f:
                    ff:18:5e:1e:c5:c4:c6:a3:c8:98:78:a6:e5:f5:a9:
                    6c:fe:46:02:e2:24:37:78:a3:33:6e:c8:a1:59:09:
                    ce:8a:cd:ef:ab:e4:a6:94:b0:53:40:e4:f5:75:36:
                    92:93:ba:ea:03:3f:a4:bf:9f:49:c3:55:74:6c:c0:
                    f0:8d:19:6a:d7:a3:06:d7:93:0d:c0:26:e9:5e:48:
                    0d:5e:31:2c:a6:45:82:3e:3b:ea:1c:e0:38:c3:67:
                    93:64:50:f0:08:f9:74:95:41:c7:57:e3:78:b9:71:
                    cf:92:d9:71:0c:cf:38:52:85:0d:87:fa:66:1b:8d:
                    78:eb:f7:9c:3b:7e:51:c1:d4:4b:7b:b9:41:b2:54:
                    4f:03:86:8a:c4:8c:38:27:bd:5a:02:28:b8:ef:ff:
                    ab:d9:74:4a:04:5c:d0:f5:0d:df:39:8e:b7:3c:c4:
                    fe:70:52:9b:af:dc:43:f3:77:1b:22:95:9f:a0:54:
                    ac:c7:a3:54:7a:58:79:9e:87:19:23:15:41:9b:0f:
                    84:56:57:15:a6:de:a0:2a:bd:41:6b:fb:eb:e3:16:
                    d8:38:90:87:32:54:6c:01:27:db:f6:a9:68:aa:b6:
                    c6:e4:5e:59:87:65:2f:46:ae:45:f2:62:f7:5e:e0:
                    cd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:85:FA:0E:93:CF:1B:EF:58:DA:51:E4:10:38:BB:37:57:39:F2:AB
            X509v3 Authority Key Identifier:
                keyid:27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35332e302f32342d3234203d3e203631343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:be:80:f8:81:cc:20:2a:81:b8:0c:c1:ba:e2:30:8e:14:b5:
         e4:fb:5a:93:0b:8a:c4:17:78:d2:b1:74:5c:f3:b0:b7:f0:66:
         88:31:2c:14:40:d4:84:75:4a:99:f3:ba:00:66:67:63:85:ce:
         08:65:0b:5e:9a:5a:97:04:d6:c5:7d:b3:1a:85:77:da:71:12:
         ed:68:f9:dd:0c:64:97:09:58:4e:fe:57:10:79:2c:18:1d:eb:
         38:d6:e2:2f:07:09:4d:a0:cd:1f:c1:97:09:fe:d1:36:ca:44:
         ea:4e:7f:1f:65:e3:b4:b0:67:17:eb:1d:62:11:9c:fe:e6:aa:
         87:7f:2b:9b:ab:f9:e9:b9:a6:2a:6c:76:db:46:12:9f:7f:ce:
         30:db:27:8c:6a:3e:41:a0:af:be:e1:d2:63:10:6b:de:b0:55:
         6c:d9:6a:4e:9e:74:8b:27:a2:e3:21:32:5e:29:63:97:0e:e6:
         9a:b2:4e:09:76:e4:c1:f1:1b:c9:88:1d:05:30:5e:5d:96:39:
         b8:99:ff:00:92:aa:8e:5c:8d:89:a1:4d:3c:24:32:df:15:4e:
         e1:22:1c:45:70:a5:f2:c3:0b:a9:3e:5f:75:b1:76:28:10:8c:
         49:ff:68:dc:0a:b6:c2:5f:81:17:6b:89:4d:08:9b:c3:f2:77:
         18:2e:b0:2a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbH1jJLCLt4yVYlbeQWo0lp0Ll34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcxNUUzMTU5MTI2NTNCNjVGOTdDRjlDNEM1NDFCNURD
MkFGRDgzMjAeFw0yNTA2MjYxNzE4NDNaFw0yNjA2MjUxNzIzNDNaMDMxMTAvBgNV
BAMTKDRFODVGQTBFOTNDRjFCRUY1OERBNTFFNDEwMzhCQjM3NTczOUYyQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8blFEuUh5exukvsKL/8YXh7F
xMajyJh4puX1qWz+RgLiJDd4ozNuyKFZCc6Kze+r5KaUsFNA5PV1NpKTuuoDP6S/
n0nDVXRswPCNGWrXowbXkw3AJuleSA1eMSymRYI+O+oc4DjDZ5NkUPAI+XSVQcdX
43i5cc+S2XEMzzhShQ2H+mYbjXjr95w7flHB1Et7uUGyVE8DhorEjDgnvVoCKLjv
/6vZdEoEXND1Dd85jrc8xP5wUpuv3EPzdxsilZ+gVKzHo1R6WHmehxkjFUGbD4RW
VxWm3qAqvUFr++vjFtg4kIcyVGwBJ9v2qWiqtsbkXlmHZS9GrkXyYvde4M1HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUToX6DpPPG+9Y2lHkEDi7N1c58qswHwYDVR0j
BBgwFoAUJxXjFZEmU7Zfl8+cTFQbXcKv2DIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDFERUZCRkVEMzU0MTg5QjZCODlDMUM2RDEwQjQwRjQ2
NEQzRDhBNzJFMjQ1ODg5RjE5MzhGMjFCODMwMjRELzAvMjcxNUUzMTU5MTI2NTNC
NjVGOTdDRjlDNEM1NDFCNURDMkFGRDgzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzE1RTMxNTkxMjY1M0I2NUY5
N0NGOUM0QzU0MUI1REMyQUZEODMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQxREVGQkZFRDM1NDE4OUI2Qjg5QzFDNkQxMEI0MEY0NjREM0Q4QTcy
RTI0NTg4OUYxOTM4RjIxQjgzMDI0RC8wLzMyMzAzMDJlMzEzMjM2MmUzNTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM0MzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMh+NTAN
BgkqhkiG9w0BAQsFAAOCAQEAab6A+IHMICqBuAzBuuIwjhS15PtakwuKxBd40rF0
XPOwt/BmiDEsFEDUhHVKmfO6AGZnY4XOCGULXppalwTWxX2zGoV32nES7Wj53Qxk
lwlYTv5XEHksGB3rONbiLwcJTaDNH8GXCf7RNspE6k5/H2XjtLBnF+sdYhGc/uaq
h38rm6v56bmmKmx220YSn3/OMNsnjGo+QaCvvuHSYxBr3rBVbNlqTp50iyei4yEy
Xiljlw7mmrJOCXbkwfEbyYgdBTBeXZY5uJn/AJKqjlyNiaFNPCQy3xVO4SIcRXCl
8sMLqT5fdbF2KBCMSf9o3Aq2wl+BF2uJTQibw/J3GC6wKg==
-----END CERTIFICATE-----
Generated at Fri Jul 4 09:29:21 2025 by rpki-client