Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e342e302f32342d3234203d3e203237373536.roa
File:                     3230302e3131352e342e302f32342d3234203d3e203237373536.roa (raw, json)
Hash identifier:          OyfVsVwVIFIlW8nYfn224IqzM0Fim2bZZ6sZ82Oxw40=
Subject key identifier:   10:DF:B3:58:5C:22:7B:80:29:53:BE:49:AF:20:28:25:2C:68:29:38
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       7AEFCCFFB41C35F22E7E8F2EAFB8D8BEB037C554
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e342e302f32342d3234203d3e203237373536.roa
Signing time:             Tue 15 Apr 2025 13:55:03 +0000
ROA not before:           Tue 15 Apr 2025 13:50:03 +0000
ROA not after:            Tue 14 Apr 2026 13:55:03 +0000
asID:                     27756
IP address blocks:        200.115.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ef:cc:ff:b4:1c:35:f2:2e:7e:8f:2e:af:b8:d8:be:b0:37:c5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Apr 15 13:50:03 2025 GMT
            Not After : Apr 14 13:55:03 2026 GMT
        Subject: CN=10DFB3585C227B802953BE49AF2028252C682938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:30:4c:ef:21:84:23:0d:5c:68:60:b1:5b:
                    1a:79:83:e0:bf:50:3a:b7:bf:80:20:92:e5:32:0a:
                    61:ae:ca:e6:a7:29:6d:32:4e:57:87:8e:4e:c0:21:
                    98:31:bf:a2:43:25:2a:49:b0:65:10:10:e1:f1:d5:
                    b9:79:5f:85:e6:a7:f7:76:3c:1c:e2:45:95:6e:ed:
                    bb:7f:9a:62:de:4d:d7:60:ce:8f:c5:4b:02:9d:1f:
                    a7:16:e1:8a:d8:c5:99:47:b3:9f:c3:ab:26:df:81:
                    f2:75:54:e3:74:cc:43:a8:41:e5:28:39:b2:7b:83:
                    4b:5a:7f:b8:ed:59:28:d0:02:b2:4a:0f:9c:5b:bc:
                    a4:db:12:18:3a:94:4a:17:22:cc:8a:a3:4d:37:47:
                    db:fa:aa:b8:61:f2:bb:59:ef:0c:46:be:0e:dd:3c:
                    22:86:ae:d5:ac:3b:de:c0:af:4f:26:e8:10:4b:35:
                    2d:b8:c9:aa:3c:9d:52:6b:33:f5:ed:bf:a1:32:26:
                    fa:6c:2c:66:89:bd:c2:b7:02:7d:60:70:93:01:c8:
                    4c:f0:12:32:b3:7f:48:af:b3:b8:a5:d2:95:f7:6a:
                    b2:eb:42:56:19:74:aa:49:33:68:1e:b6:d1:63:a4:
                    bc:80:1a:6e:a9:2f:b2:c5:6c:ec:4d:b4:5d:12:84:
                    8b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DF:B3:58:5C:22:7B:80:29:53:BE:49:AF:20:28:25:2C:68:29:38
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e342e302f32342d3234203d3e203237373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c6:78:6c:a6:22:7f:4d:51:39:ab:5c:a9:16:d7:c1:37:e7:
         d4:12:b9:da:d1:f2:dc:13:4b:04:50:57:ff:e6:bb:a8:dd:0c:
         68:17:14:af:a6:15:e3:6b:33:76:5f:d8:2a:ca:7d:7a:5f:6d:
         e7:98:84:d4:6c:93:3a:d3:9a:40:98:47:29:61:bf:7a:e9:9a:
         b8:73:bb:8d:e5:08:ab:07:2d:d4:dc:6b:e4:7e:23:e0:e4:c8:
         0b:4e:b2:1d:5a:9e:a7:3f:fd:ff:80:8c:c5:09:2b:65:5f:0e:
         a5:46:01:ff:59:75:fd:5c:40:6f:35:5b:6a:9f:ae:6d:74:aa:
         9b:ca:56:0e:80:ed:d0:8e:bc:36:c0:83:39:20:92:c5:2d:1b:
         91:96:fe:a4:38:9d:e8:31:2a:7a:46:4d:de:bc:92:2d:bb:bd:
         8f:af:9f:66:59:a1:12:47:c3:9f:5e:66:06:95:42:c7:9c:95:
         f3:72:25:b1:43:83:d9:cc:d4:f1:b0:a5:02:e2:3b:62:b8:dc:
         b0:fa:05:dc:6a:4a:fe:92:bb:75:6c:43:4b:b6:b4:bf:cc:9b:
         dc:24:de:47:78:93:40:ed:03:be:7d:b7:4f:be:b0:a9:4e:a4:
         a2:f1:35:81:c4:f7:4b:32:02:3f:5e:a4:37:31:dd:4d:5b:fd:
         e0:ff:94:b1
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUeu/M/7QcNfIufo8ur7jYvrA3xVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4QTlEQTczMTIwNkM3MzkwQzhBNkVCMTZBQ0VFMjg1
REFEQ0UwMzAeFw0yNTA0MTUxMzUwMDNaFw0yNjA0MTQxMzU1MDNaMDMxMTAvBgNV
BAMTKDEwREZCMzU4NUMyMjdCODAyOTUzQkU0OUFGMjAyODI1MkM2ODI5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22zBM7yGEIw1caGCxWxp5g+C/
UDq3v4AgkuUyCmGuyuanKW0yTleHjk7AIZgxv6JDJSpJsGUQEOHx1bl5X4Xmp/d2
PBziRZVu7bt/mmLeTddgzo/FSwKdH6cW4YrYxZlHs5/DqybfgfJ1VON0zEOoQeUo
ObJ7g0taf7jtWSjQArJKD5xbvKTbEhg6lEoXIsyKo003R9v6qrhh8rtZ7wxGvg7d
PCKGrtWsO97Ar08m6BBLNS24yao8nVJrM/Xtv6EyJvpsLGaJvcK3An1gcJMByEzw
EjKzf0ivs7il0pX3arLrQlYZdKpJM2gettFjpLyAGm6pL7LFbOxNtF0ShItVAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUEN+zWFwie4ApU75JryAoJSxoKTgwHwYDVR0j
BBgwFoAUpIqdpzEgbHOQyKbrFqzuKF2tzgMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82N0NFNTg1NTQzN0E1RThGQTA5QUFFQzdEMkQ3MzI5MEMw
NjdDQzhFQjIwRTA0RUMwOTJDRDM3NDFEOUE2RDgyLzAvQTQ4QTlEQTczMTIwNkM3
MzkwQzhBNkVCMTZBQ0VFMjg1REFEQ0UwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDhBOURBNzMxMjA2QzczOTBD
OEE2RUIxNkFDRUUyODVEQURDRTAzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjdDRTU4NTU0MzdBNUU4RkEwOUFBRUM3RDJENzMyOTBDMDY3Q0M4RUIy
MEUwNEVDMDkyQ0QzNzQxRDlBNkQ4Mi8wLzMyMzAzMDJlMzEzMTM1MmUzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNzM1MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIcwQwDQYJ
KoZIhvcNAQELBQADggEBAHXGeGymIn9NUTmrXKkW18E359QSudrR8twTSwRQV//m
u6jdDGgXFK+mFeNrM3Zf2CrKfXpfbeeYhNRskzrTmkCYRylhv3rpmrhzu43lCKsH
LdTca+R+I+DkyAtOsh1anqc//f+AjMUJK2VfDqVGAf9Zdf1cQG81W2qfrm10qpvK
Vg6A7dCOvDbAgzkgksUtG5GW/qQ4negxKnpGTd68ki27vY+vn2ZZoRJHw59eZgaV
QseclfNyJbFDg9nM1PGwpQLiO2K43LD6BdxqSv6Su3VsQ0u2tL/Mm9wk3kd4k0Dt
A759t0++sKlOpKLxNYHE90syAj9epDcx3U1b/eD/lLE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net