Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e31332e302f32342d3234203d3e203237373536.roa
File:                     3230302e3131352e31332e302f32342d3234203d3e203237373536.roa (raw, json)
Hash identifier:          koSDISQioLo8LPZPk2106+nkzoDt5IltRXZ5AAG7ab0=
Subject key identifier:   86:7F:46:0C:16:96:F9:CC:4A:13:45:E5:21:D8:0F:2A:37:93:B8:B6
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       3AE15A7430F1878A0F16961C9AB81F7D12F6528D
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e31332e302f32342d3234203d3e203237373536.roa
Signing time:             Tue 15 Apr 2025 13:55:02 +0000
ROA not before:           Tue 15 Apr 2025 13:50:02 +0000
ROA not after:            Tue 14 Apr 2026 13:55:02 +0000
asID:                     27756
IP address blocks:        200.115.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e1:5a:74:30:f1:87:8a:0f:16:96:1c:9a:b8:1f:7d:12:f6:52:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Apr 15 13:50:02 2025 GMT
            Not After : Apr 14 13:55:02 2026 GMT
        Subject: CN=867F460C1696F9CC4A1345E521D80F2A3793B8B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:76:eb:03:ae:40:e3:76:1b:7b:fd:4a:40:
                    b8:8f:3e:18:4b:f7:48:b8:4b:aa:21:bb:ad:77:12:
                    ca:b7:c4:dd:75:fd:95:34:0c:d1:92:4a:eb:6c:75:
                    f6:58:3e:a4:73:fc:c9:aa:fb:0f:88:65:a1:da:2c:
                    d6:ca:0c:b6:2c:a6:9c:43:65:15:37:92:38:d7:9e:
                    de:3e:2d:dc:98:e2:a9:bd:60:2c:34:b3:c4:f1:58:
                    d8:54:e4:ab:8b:df:b2:a7:20:02:1f:72:e0:00:ba:
                    21:c0:bb:a6:53:b5:6d:33:34:f0:1b:8c:81:2e:83:
                    c2:53:cd:80:27:74:9f:0e:27:20:16:5c:6f:64:91:
                    ed:fb:65:81:cb:b5:ef:ed:10:75:51:29:b5:3c:48:
                    5b:d5:e3:97:8c:15:25:01:31:7a:40:67:04:09:6d:
                    64:ea:70:41:48:a9:53:0b:51:d6:89:78:92:ef:a6:
                    d7:dd:58:41:c1:0c:7b:f8:ab:91:4f:9f:36:26:12:
                    cb:31:82:76:e4:b4:73:c9:6b:50:63:b6:50:eb:64:
                    ad:07:ce:1c:5c:ea:f9:52:9f:3e:bb:c4:1b:f1:a9:
                    24:1b:a3:f4:1c:6c:1b:f8:58:27:89:39:86:c0:4c:
                    3b:56:fb:55:b8:d1:d2:02:1d:bd:02:7e:a5:51:96:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7F:46:0C:16:96:F9:CC:4A:13:45:E5:21:D8:0F:2A:37:93:B8:B6
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e31332e302f32342d3234203d3e203237373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:8e:82:49:7f:19:29:78:d2:d9:b2:5e:91:f7:29:e6:98:42:
         80:49:a7:df:bc:62:5c:af:ed:96:74:1b:9e:ee:ed:d4:35:e7:
         6b:b2:8a:b3:03:f3:48:d3:1d:3b:f3:9e:2b:9a:9d:2b:56:4e:
         13:bb:75:d8:33:24:8f:6f:c0:81:93:18:c8:84:a7:da:93:24:
         0b:92:11:ce:8c:fe:d9:0a:2a:16:93:40:29:a0:c1:34:00:d7:
         9d:03:c6:ed:94:79:0d:41:e8:fb:45:e9:d4:51:c0:d2:65:ac:
         a2:23:a0:92:07:19:23:38:e4:ae:48:99:35:d5:74:0c:5f:61:
         0a:6f:85:6c:92:b3:18:1c:28:68:5c:28:73:02:7b:10:9d:c2:
         6d:6c:09:0e:25:56:0b:92:a4:91:00:f1:93:53:ad:f3:ce:c3:
         cc:6b:55:7e:79:34:47:1f:a0:ec:a3:ab:7c:3d:46:5c:a9:d2:
         bd:30:94:f6:9d:24:ff:1e:14:a6:c3:c2:da:f4:c6:89:9d:23:
         cd:73:a8:00:fe:52:de:f1:06:af:84:b1:f8:78:8e:81:99:c1:
         e2:b0:1f:e3:95:ba:b9:f8:51:94:5f:68:61:6e:e8:90:b3:bf:
         e3:4b:74:ce:b0:3b:4e:41:d0:15:10:dd:84:a8:a1:18:68:3d:
         71:d5:8c:8d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOuFadDDxh4oPFpYcmrgffRL2Uo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4QTlEQTczMTIwNkM3MzkwQzhBNkVCMTZBQ0VFMjg1
REFEQ0UwMzAeFw0yNTA0MTUxMzUwMDJaFw0yNjA0MTQxMzU1MDJaMDMxMTAvBgNV
BAMTKDg2N0Y0NjBDMTY5NkY5Q0M0QTEzNDVFNTIxRDgwRjJBMzc5M0I4QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMHbrA65A43Ybe/1KQLiPPhhL
90i4S6ohu613Esq3xN11/ZU0DNGSSutsdfZYPqRz/Mmq+w+IZaHaLNbKDLYsppxD
ZRU3kjjXnt4+LdyY4qm9YCw0s8TxWNhU5KuL37KnIAIfcuAAuiHAu6ZTtW0zNPAb
jIEug8JTzYAndJ8OJyAWXG9kke37ZYHLte/tEHVRKbU8SFvV45eMFSUBMXpAZwQJ
bWTqcEFIqVMLUdaJeJLvptfdWEHBDHv4q5FPnzYmEssxgnbktHPJa1BjtlDrZK0H
zhxc6vlSnz67xBvxqSQbo/QcbBv4WCeJOYbATDtW+1W40dICHb0CfqVRlk5jAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhn9GDBaW+cxKE0XlIdgPKjeTuLYwHwYDVR0j
BBgwFoAUpIqdpzEgbHOQyKbrFqzuKF2tzgMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82N0NFNTg1NTQzN0E1RThGQTA5QUFFQzdEMkQ3MzI5MEMw
NjdDQzhFQjIwRTA0RUMwOTJDRDM3NDFEOUE2RDgyLzAvQTQ4QTlEQTczMTIwNkM3
MzkwQzhBNkVCMTZBQ0VFMjg1REFEQ0UwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDhBOURBNzMxMjA2QzczOTBD
OEE2RUIxNkFDRUUyODVEQURDRTAzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjdDRTU4NTU0MzdBNUU4RkEwOUFBRUM3RDJENzMyOTBDMDY3Q0M4RUIy
MEUwNEVDMDkyQ0QzNzQxRDlBNkQ4Mi8wLzMyMzAzMDJlMzEzMTM1MmUzMTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhzDTAN
BgkqhkiG9w0BAQsFAAOCAQEAOI6CSX8ZKXjS2bJekfcp5phCgEmn37xiXK/tlnQb
nu7t1DXna7KKswPzSNMdO/OeK5qdK1ZOE7t12DMkj2/AgZMYyISn2pMkC5IRzoz+
2QoqFpNAKaDBNADXnQPG7ZR5DUHo+0Xp1FHA0mWsoiOgkgcZIzjkrkiZNdV0DF9h
Cm+FbJKzGBwoaFwocwJ7EJ3CbWwJDiVWC5KkkQDxk1Ot887DzGtVfnk0Rx+g7KOr
fD1GXKnSvTCU9p0k/x4UpsPC2vTGiZ0jzXOoAP5S3vEGr4Sx+HiOgZnB4rAf45W6
ufhRlF9oYW7okLO/40t0zrA7TkHQFRDdhKihGGg9cdWMjQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net