Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136302e302f32312d3234203d3e203139333733.roa
File:                     3230302e35372e3136302e302f32312d3234203d3e203139333733.roa (raw, json)
Hash identifier:          FEnMTGDosqOS6NHQjHtNN8Ve1HTLlr8Ih1CwCPNzqHA=
Subject key identifier:   70:A0:43:31:80:13:E0:B6:77:5E:5A:2A:3C:EE:25:4D:44:26:42:0A
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       1AB4219257071187629F0664EBB8FB9E0DC5F206
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136302e302f32312d3234203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:40:05 +0000
ROA not before:           Sun 16 Feb 2025 06:35:05 +0000
ROA not after:            Sun 15 Feb 2026 06:40:05 +0000
asID:                     19373
IP address blocks:        200.57.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b4:21:92:57:07:11:87:62:9f:06:64:eb:b8:fb:9e:0d:c5:f2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:35:05 2025 GMT
            Not After : Feb 15 06:40:05 2026 GMT
        Subject: CN=70A043318013E0B6775E5A2A3CEE254D4426420A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fa:17:56:2d:ef:a9:6a:51:df:8d:de:07:81:
                    e9:24:f5:a5:b8:7b:02:72:57:84:9f:d1:31:95:84:
                    f1:e8:4d:b7:38:bf:c4:90:f9:c5:75:e5:f8:2a:b6:
                    54:8a:35:84:6f:d9:2f:3e:1a:d7:17:49:94:cf:f8:
                    de:30:69:5b:b9:5c:e1:2c:c5:fb:67:60:dc:56:4a:
                    0e:02:97:98:0d:06:43:f9:3e:84:10:6a:c3:25:22:
                    02:b3:d9:0a:d6:61:6e:b1:64:99:19:25:be:a7:70:
                    ac:df:b3:e7:6a:48:60:3b:41:eb:69:d9:33:cd:b6:
                    a3:2f:e4:93:35:65:13:8e:4a:c6:48:43:06:85:a2:
                    b9:45:7c:9d:cb:34:7f:aa:62:9e:c8:d7:f0:fe:55:
                    24:7b:c5:e1:95:e9:42:04:10:b4:e8:86:76:85:eb:
                    9f:b9:86:d7:08:19:80:c0:3c:24:2c:ac:15:a7:66:
                    46:89:d7:86:3e:76:7f:83:fc:4c:f5:90:28:62:fc:
                    c5:37:e3:c4:16:9b:21:18:f2:ed:f4:80:2c:8e:60:
                    9a:98:4a:22:a4:ef:33:67:1c:b4:7d:9d:95:4f:e2:
                    5d:cf:86:f8:5d:d0:67:99:3b:b3:2f:55:38:d5:72:
                    9d:37:cd:05:52:49:37:6f:db:b2:38:87:fb:ef:d2:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A0:43:31:80:13:E0:B6:77:5E:5A:2A:3C:EE:25:4D:44:26:42:0A
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136302e302f32312d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:f1:ce:eb:e5:91:cf:61:3a:62:58:88:a4:b9:93:80:07:1b:
         1e:0f:d7:a5:36:ec:3a:b5:3c:ec:99:ce:28:1f:15:93:84:36:
         4e:d9:9d:52:a1:42:fd:7d:f2:aa:07:bb:39:fb:17:23:3d:8d:
         93:ca:48:a1:37:cf:79:48:c8:9c:dc:58:67:28:77:ee:db:24:
         23:7d:85:1f:fd:76:af:46:e5:f9:a7:d0:77:34:7b:15:6f:4b:
         6d:c7:28:4d:f2:f1:b5:7e:3a:64:87:38:d8:17:7b:db:99:04:
         02:60:4a:63:56:3c:93:ba:54:dd:12:26:df:04:99:1d:cd:be:
         80:84:1c:21:7f:80:ff:36:08:93:e9:2d:3c:f6:a0:3a:a3:7d:
         87:8e:1b:61:10:80:a8:f8:5d:e2:8d:9d:e1:87:db:7a:c5:43:
         50:49:97:7e:d5:a9:83:cd:ce:1c:f2:76:75:d9:d0:10:a8:6c:
         91:ac:b5:e3:40:6e:77:0d:7b:61:ac:70:7c:66:bf:a1:ec:28:
         b8:a4:37:2a:93:1e:26:6f:c5:09:c5:42:e4:19:7b:60:32:85:
         d5:03:b4:e6:df:d7:f7:e6:57:5f:6e:62:c7:ae:fd:cf:1b:97:
         ac:f2:a1:ca:a1:01:e8:d7:b0:62:70:9f:bb:85:2a:32:03:a1:
         a3:d0:50:c3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGrQhklcHEYdinwZk67j7ng3F8gYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBNjI4NjNCNUVCREY2QzI3QjU2NzQxQzNCOEIyNjI0
RTM3OTExOTAeFw0yNTAyMTYwNjM1MDVaFw0yNjAyMTUwNjQwMDVaMDMxMTAvBgNV
BAMTKDcwQTA0MzMxODAxM0UwQjY3NzVFNUEyQTNDRUUyNTRENDQyNjQyMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+hdWLe+palHfjd4Hgekk9aW4
ewJyV4Sf0TGVhPHoTbc4v8SQ+cV15fgqtlSKNYRv2S8+GtcXSZTP+N4waVu5XOEs
xftnYNxWSg4Cl5gNBkP5PoQQasMlIgKz2QrWYW6xZJkZJb6ncKzfs+dqSGA7Qetp
2TPNtqMv5JM1ZROOSsZIQwaForlFfJ3LNH+qYp7I1/D+VSR7xeGV6UIEELTohnaF
65+5htcIGYDAPCQsrBWnZkaJ14Y+dn+D/Ez1kChi/MU348QWmyEY8u30gCyOYJqY
SiKk7zNnHLR9nZVP4l3Phvhd0GeZO7MvVTjVcp03zQVSSTdv27I4h/vv0l0pAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcKBDMYAT4LZ3XloqPO4lTUQmQgowHwYDVR0j
BBgwFoAUVKYoY7Xr32wntWdBw7iyYk43kRkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjBEODY0OTA0NjBCN0Q2MzEzMzhGNzA5MUU2NjBCMzM3
RjlDRDExMkYyNUJEOTBFMEYzMUVFREEyMjgzNURCLzAvNTRBNjI4NjNCNUVCREY2
QzI3QjU2NzQxQzNCOEIyNjI0RTM3OTExOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEE2Mjg2M0I1RUJERjZDMjdC
NTY3NDFDM0I4QjI2MjRFMzc5MTE5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTYwRDg2NDkwNDYwQjdENjMxMzM4RjcwOTFFNjYwQjMzN0Y5Q0QxMTJG
MjVCRDkwRTBGMzFFRURBMjI4MzVEQi8wLzMyMzAzMDJlMzUzNzJlMzEzNjMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzOTMzMzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8g5oDAN
BgkqhkiG9w0BAQsFAAOCAQEAj/HO6+WRz2E6YliIpLmTgAcbHg/XpTbsOrU87JnO
KB8Vk4Q2TtmdUqFC/X3yqge7OfsXIz2Nk8pIoTfPeUjInNxYZyh37tskI32FH/12
r0bl+afQdzR7FW9LbccoTfLxtX46ZIc42Bd725kEAmBKY1Y8k7pU3RIm3wSZHc2+
gIQcIX+A/zYIk+ktPPagOqN9h44bYRCAqPhd4o2d4YfbesVDUEmXftWpg83OHPJ2
ddnQEKhskay140Budw17YaxwfGa/oewouKQ3KpMeJm/FCcVC5Bl7YDKF1QO05t/X
9+ZXX25ix679zxuXrPKhyqEB6NewYnCfu4UqMgOho9BQww==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:26 2025 by rpki-client on console.sobornost.net