Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02A782CF51105B4D558C62725939992184923C45FB4BFFA5667DF6943594161B/0/3139322e3130302e3137312e302f32342d3234203d3e20323633323334.roa
File:                     3139322e3130302e3137312e302f32342d3234203d3e20323633323334.roa (raw, json)
Hash identifier:          InXXO64oJzGbb6F3ABsLtm1KzzafaZuAciZfEPrroAI=
Subject key identifier:   68:C0:E4:33:87:F9:22:3A:88:45:9D:A6:0C:27:82:EF:9A:B5:85:91
Certificate issuer:       /CN=AAA6C176BDCB93B8E5D70769829BC3646C03A46D
Certificate serial:       60B7573079C72E84E00C78AB6876129E0F57F898
Authority key identifier: AA:A6:C1:76:BD:CB:93:B8:E5:D7:07:69:82:9B:C3:64:6C:03:A4:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAA6C176BDCB93B8E5D70769829BC3646C03A46D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02A782CF51105B4D558C62725939992184923C45FB4BFFA5667DF6943594161B/0/3139322e3130302e3137312e302f32342d3234203d3e20323633323334.roa
Signing time:             Tue 04 Feb 2025 19:59:50 +0000
ROA not before:           Tue 04 Feb 2025 19:54:50 +0000
ROA not after:            Tue 03 Feb 2026 19:59:50 +0000
asID:                     263234
IP address blocks:        192.100.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/02A782CF51105B4D558C62725939992184923C45FB4BFFA5667DF6943594161B/0/AAA6C176BDCB93B8E5D70769829BC3646C03A46D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/02A782CF51105B4D558C62725939992184923C45FB4BFFA5667DF6943594161B/0/AAA6C176BDCB93B8E5D70769829BC3646C03A46D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAA6C176BDCB93B8E5D70769829BC3646C03A46D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b7:57:30:79:c7:2e:84:e0:0c:78:ab:68:76:12:9e:0f:57:f8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAA6C176BDCB93B8E5D70769829BC3646C03A46D
        Validity
            Not Before: Feb  4 19:54:50 2025 GMT
            Not After : Feb  3 19:59:50 2026 GMT
        Subject: CN=68C0E43387F9223A88459DA60C2782EF9AB58591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:6b:ac:ed:ee:48:1d:85:8a:fb:e2:72:6b:
                    b3:b3:d3:e5:5f:7d:9b:97:58:4a:76:f4:8d:42:2f:
                    b1:ec:98:8b:de:72:31:b8:c6:12:ad:1b:b1:74:3d:
                    b5:a1:bb:2f:b6:a4:0e:00:10:38:41:39:e1:0f:4c:
                    d2:53:31:b6:28:99:4a:1f:75:f3:a1:1a:6a:aa:2d:
                    54:14:b2:6c:c7:76:88:d7:ec:f2:23:35:06:e1:f0:
                    99:da:e4:0a:7b:ba:83:51:64:e5:94:1a:e1:d1:cd:
                    ca:fc:2c:f2:25:aa:ef:3f:60:06:61:5f:44:6c:c3:
                    6a:36:d2:71:ab:57:91:77:8d:e3:2f:43:2d:61:fa:
                    4c:23:1a:54:a2:d2:95:5d:2e:66:4d:58:4a:e4:09:
                    8f:db:f8:1d:2f:b5:04:ad:3c:d2:85:90:b0:d2:43:
                    a8:4c:9c:fc:05:f6:e1:d5:21:ea:dc:73:c9:a6:bf:
                    01:2f:9b:04:61:de:1a:65:ff:9d:92:bd:8c:8a:c6:
                    7d:3e:3d:0c:61:fb:12:84:47:5d:14:34:3f:3b:c8:
                    05:af:34:5e:17:f7:3e:c5:03:0f:b7:f2:c2:59:ca:
                    6a:3a:0d:50:ec:e7:8c:3d:a5:86:ac:ed:a0:37:b4:
                    a8:0a:c5:ad:2e:b5:a4:a9:d5:6e:db:5c:33:d0:81:
                    ae:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C0:E4:33:87:F9:22:3A:88:45:9D:A6:0C:27:82:EF:9A:B5:85:91
            X509v3 Authority Key Identifier:
                keyid:AA:A6:C1:76:BD:CB:93:B8:E5:D7:07:69:82:9B:C3:64:6C:03:A4:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02A782CF51105B4D558C62725939992184923C45FB4BFFA5667DF6943594161B/0/AAA6C176BDCB93B8E5D70769829BC3646C03A46D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAA6C176BDCB93B8E5D70769829BC3646C03A46D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02A782CF51105B4D558C62725939992184923C45FB4BFFA5667DF6943594161B/0/3139322e3130302e3137312e302f32342d3234203d3e20323633323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:70:71:aa:3d:98:20:75:26:5d:05:6c:18:3b:ee:21:d1:9f:
         66:23:b0:16:7a:eb:15:6d:b5:20:8c:14:e1:f2:c0:7d:78:9c:
         3e:d7:0a:ae:c5:ac:a4:59:01:11:59:d3:fd:db:f7:ed:cc:8c:
         e9:b0:87:29:8e:b3:e7:a5:d8:e0:70:54:cb:24:a3:13:08:ac:
         ed:bc:78:cf:aa:8f:04:85:69:9c:63:1c:c7:d2:0e:7c:07:d5:
         77:93:db:94:59:14:41:3e:74:cd:ac:23:21:72:dd:19:65:19:
         f7:10:38:bd:f4:c7:cc:d5:ad:ca:e2:49:b9:b8:55:6f:ce:6b:
         97:87:d8:91:ad:e8:51:e6:41:54:42:c3:c4:0f:77:bd:ae:5e:
         66:50:ca:98:e2:db:31:ad:9e:c1:de:ab:a0:1b:06:0e:c8:7c:
         b5:29:c6:2c:f1:e1:69:11:80:ea:2a:47:1a:8b:1a:12:43:c5:
         66:07:8f:b2:74:38:bb:19:b7:9a:72:2e:21:b2:90:60:43:13:
         0a:04:bf:30:48:63:cf:d0:53:c1:2c:94:bf:89:d5:e2:92:a5:
         d4:24:6f:92:33:bf:d1:e7:3b:a4:ef:7f:a7:f4:c4:63:df:44:
         f9:15:6b:1f:33:d7:af:cb:ec:e6:80:ad:97:1b:8c:cd:36:c9:
         fe:a7:f4:b4
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUYLdXMHnHLoTgDHiraHYSng9X+JgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFBNkMxNzZCRENCOTNCOEU1RDcwNzY5ODI5QkMzNjQ2
QzAzQTQ2RDAeFw0yNTAyMDQxOTU0NTBaFw0yNjAyMDMxOTU5NTBaMDMxMTAvBgNV
BAMTKDY4QzBFNDMzODdGOTIyM0E4ODQ1OURBNjBDMjc4MkVGOUFCNTg1OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vWus7e5IHYWK++Jya7Oz0+Vf
fZuXWEp29I1CL7HsmIvecjG4xhKtG7F0PbWhuy+2pA4AEDhBOeEPTNJTMbYomUof
dfOhGmqqLVQUsmzHdojX7PIjNQbh8Jna5Ap7uoNRZOWUGuHRzcr8LPIlqu8/YAZh
X0Rsw2o20nGrV5F3jeMvQy1h+kwjGlSi0pVdLmZNWErkCY/b+B0vtQStPNKFkLDS
Q6hMnPwF9uHVIercc8mmvwEvmwRh3hpl/52SvYyKxn0+PQxh+xKER10UND87yAWv
NF4X9z7FAw+38sJZymo6DVDs54w9pYas7aA3tKgKxa0utaSp1W7bXDPQga5lAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUaMDkM4f5IjqIRZ2mDCeC75q1hZEwHwYDVR0j
BBgwFoAUqqbBdr3Lk7jl1wdpgpvDZGwDpG0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMkE3ODJDRjUxMTA1QjRENTU4QzYyNzI1OTM5OTkyMTg0
OTIzQzQ1RkI0QkZGQTU2NjdERjY5NDM1OTQxNjFCLzAvQUFBNkMxNzZCRENCOTNC
OEU1RDcwNzY5ODI5QkMzNjQ2QzAzQTQ2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUE2QzE3NkJEQ0I5M0I4RTVE
NzA3Njk4MjlCQzM2NDZDMDNBNDZELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDJBNzgyQ0Y1MTEwNUI0RDU1OEM2MjcyNTkzOTk5MjE4NDkyM0M0NUZC
NEJGRkE1NjY3REY2OTQzNTk0MTYxQi8wLzMxMzkzMjJlMzEzMDMwMmUzMTM3MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzMjMzMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADA
ZKswDQYJKoZIhvcNAQELBQADggEBADxwcao9mCB1Jl0FbBg77iHRn2YjsBZ66xVt
tSCMFOHywH14nD7XCq7FrKRZARFZ0/3b9+3MjOmwhymOs+el2OBwVMskoxMIrO28
eM+qjwSFaZxjHMfSDnwH1XeT25RZFEE+dM2sIyFy3RllGfcQOL30x8zVrcriSbm4
VW/Oa5eH2JGt6FHmQVRCw8QPd72uXmZQypji2zGtnsHeq6AbBg7IfLUpxizx4WkR
gOoqRxqLGhJDxWYHj7J0OLsZt5pyLiGykGBDEwoEvzBIY8/QU8EslL+J1eKSpdQk
b5Izv9HnO6Tvf6f0xGPfRPkVax8z16/L7OaArZcbjM02yf6n9LQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:09 2025 by rpki-client