Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e32342e302f32312d3234203d3e2037303439.roa
File:                     3230302e36312e32342e302f32312d3234203d3e2037303439.roa (raw, json)
Hash identifier:          aVi6f9djtD0F6b4DPk2yjtEfixkPXBxxuDA8Mz6eFDs=
Subject key identifier:   35:67:03:A7:CE:8B:23:BE:32:F8:80:E8:1D:78:49:59:9F:80:FB:A5
Certificate issuer:       /CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
Certificate serial:       3021DF98E9B937EBE784AF255C2AED072D50BF39
Authority key identifier: 22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e32342e302f32312d3234203d3e2037303439.roa
Signing time:             Fri 25 Apr 2025 13:40:00 +0000
ROA not before:           Fri 25 Apr 2025 13:35:00 +0000
ROA not after:            Fri 24 Apr 2026 13:40:00 +0000
asID:                     7049
IP address blocks:        200.61.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:21:df:98:e9:b9:37:eb:e7:84:af:25:5c:2a:ed:07:2d:50:bf:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
        Validity
            Not Before: Apr 25 13:35:00 2025 GMT
            Not After : Apr 24 13:40:00 2026 GMT
        Subject: CN=356703A7CE8B23BE32F880E81D7849599F80FBA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:28:23:31:ad:f6:e9:36:de:0b:88:3c:86:
                    37:eb:a4:28:ae:32:e2:45:c9:72:15:1f:d8:b5:5e:
                    45:34:ff:eb:76:32:61:38:cc:c8:a3:0a:92:c8:b6:
                    6a:7d:26:32:87:fe:26:18:30:86:81:1a:eb:23:90:
                    f9:21:fb:68:2f:fa:39:21:e4:9a:7a:8a:ec:23:e3:
                    de:f5:13:3a:4d:93:dc:96:f3:31:37:c3:ae:e6:e6:
                    04:fd:b9:53:35:15:f7:a5:24:7e:35:a3:cb:5d:82:
                    d0:26:c1:22:15:a1:85:ed:01:f9:02:22:3f:e1:85:
                    1a:e9:dc:a2:5f:26:33:7d:c9:87:9f:8a:b9:e1:70:
                    cc:97:36:a4:29:1f:1f:c8:7a:30:9a:17:a6:61:6d:
                    a8:10:0a:f2:7f:7d:91:cf:23:a5:97:1b:53:23:ef:
                    b3:a5:60:da:5a:69:79:ff:70:1b:fa:bf:bd:86:c5:
                    d5:e4:ce:48:98:e5:1a:9f:ea:e6:25:1e:05:10:5b:
                    60:99:bb:bd:93:74:13:60:c9:aa:2e:5d:5a:4f:30:
                    51:72:1e:3d:e4:83:7b:ee:3a:a7:1e:8f:d7:b5:ca:
                    93:a1:1c:40:74:f2:ee:73:6a:01:d2:ac:d2:c0:d1:
                    1d:47:e3:84:81:38:9f:3e:ce:ac:a8:b2:3a:4f:92:
                    f9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:67:03:A7:CE:8B:23:BE:32:F8:80:E8:1D:78:49:59:9F:80:FB:A5
            X509v3 Authority Key Identifier:
                keyid:22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e32342e302f32312d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:7a:61:0b:73:72:c3:01:37:1c:55:ea:11:38:47:67:d7:d7:
         18:a6:06:c1:45:c3:8b:5f:13:17:23:27:2f:59:fc:20:42:00:
         02:2d:b2:f4:30:92:8f:3b:6d:17:ac:ef:d0:3b:78:6b:ad:4a:
         ef:67:f4:54:f5:af:9e:5d:e0:74:5b:5d:6a:84:e0:36:0f:b4:
         4d:1a:7d:bb:e2:e1:df:95:d7:fa:47:9c:ef:f0:14:3f:56:e8:
         2e:d1:56:cb:cb:ed:80:76:a2:8e:49:a9:56:68:de:4a:4c:e2:
         14:d3:e1:9e:7b:c5:59:48:36:6f:b3:d9:23:8f:b4:4c:a3:30:
         c8:98:ab:4e:ac:17:2f:43:fe:5c:2d:39:a4:64:a4:a4:34:97:
         8b:21:92:d8:28:2b:d6:b8:61:12:30:75:30:de:bc:20:c8:8b:
         6e:77:01:69:53:f3:21:29:cb:69:29:3e:db:cf:c9:0a:0a:2a:
         1c:e9:3c:fb:7e:4e:78:8a:ae:12:0b:56:3a:1e:cb:63:37:16:
         bf:84:6e:11:1a:0a:1a:ce:ed:98:a9:f5:e4:ad:5c:c0:f7:bc:
         2f:97:91:8d:14:a9:76:17:aa:a3:17:6b:79:66:5c:88:54:6d:
         fa:5c:e6:ec:f6:4b:83:68:73:13:1f:26:f9:9c:3b:f3:d1:03:
         f9:76:ca:a4
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUMCHfmOm5N+vnhK8lXCrtBy1QvzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI2QzY0QkJCMkJCRTE5NTdCNTgxNTY3NTlGNjlEMkFD
MjE0NjRGNDAeFw0yNTA0MjUxMzM1MDBaFw0yNjA0MjQxMzQwMDBaMDMxMTAvBgNV
BAMTKDM1NjcwM0E3Q0U4QjIzQkUzMkY4ODBFODFENzg0OTU5OUY4MEZCQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZSgjMa326TbeC4g8hjfrpCiu
MuJFyXIVH9i1XkU0/+t2MmE4zMijCpLItmp9JjKH/iYYMIaBGusjkPkh+2gv+jkh
5Jp6iuwj4971EzpNk9yW8zE3w67m5gT9uVM1FfelJH41o8tdgtAmwSIVoYXtAfkC
Ij/hhRrp3KJfJjN9yYefirnhcMyXNqQpHx/IejCaF6ZhbagQCvJ/fZHPI6WXG1Mj
77OlYNpaaXn/cBv6v72GxdXkzkiY5Rqf6uYlHgUQW2CZu72TdBNgyaouXVpPMFFy
Hj3kg3vuOqcej9e1ypOhHEB08u5zagHSrNLA0R1H44SBOJ8+zqyosjpPkvk9AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUNWcDp86LI74y+IDoHXhJWZ+A+6UwHwYDVR0j
BBgwFoAUImxku7K74ZV7WBVnWfadKsIUZPQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GOUVGRUVENkI3QTFERUQ2MjVENzcyQTY2N0E2NjJDMDIx
QTdFRTYxQUE4NzJDRTQ3OTc4N0JBNkREMkVGMTkzLzAvMjI2QzY0QkJCMkJCRTE5
NTdCNTgxNTY3NTlGNjlEMkFDMjE0NjRGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMjZDNjRCQkIyQkJFMTk1N0I1
ODE1Njc1OUY2OUQyQUMyMTQ2NEY0LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjlFRkVFRDZCN0ExREVENjI1RDc3MkE2NjdBNjYyQzAyMUE3RUU2MUFB
ODcyQ0U0Nzk3ODdCQTZERDJFRjE5My8wLzMyMzAzMDJlMzYzMTJlMzIzNDJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDM3MzAzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyD0YMA0GCSqG
SIb3DQEBCwUAA4IBAQACemELc3LDATccVeoROEdn19cYpgbBRcOLXxMXIycvWfwg
QgACLbL0MJKPO20XrO/QO3hrrUrvZ/RU9a+eXeB0W11qhOA2D7RNGn274uHfldf6
R5zv8BQ/Vugu0VbLy+2AdqKOSalWaN5KTOIU0+Gee8VZSDZvs9kjj7RMozDImKtO
rBcvQ/5cLTmkZKSkNJeLIZLYKCvWuGESMHUw3rwgyItudwFpU/MhKctpKT7bz8kK
Cioc6Tz7fk54iq4SC1Y6HstjNxa/hG4RGgoazu2YqfXkrVzA97wvl5GNFKl2F6qj
F2t5ZlyIVG36XObs9kuDaHMTHyb5nDvz0QP5dsqk
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:23 2025 by rpki-client on console.sobornost.net