Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31362d3234203d3e20323632323237.roa
File:                     3138312e3137382e302e302f31362d3234203d3e20323632323237.roa (raw, json)
Hash identifier:          QInIEb0V0GSMKPpkU4baMlEl6ZzrF1ppHBXFvtDR5W4=
Subject key identifier:   64:36:FF:0B:2B:DF:74:F9:DD:CA:05:F4:F7:85:D5:CA:13:4C:44:CB
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       30DAEEDC03C57402861F43E6B24A3E84FA392401
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31362d3234203d3e20323632323237.roa
Signing time:             Thu 13 Mar 2025 23:20:00 +0000
ROA not before:           Thu 13 Mar 2025 23:15:00 +0000
ROA not after:            Thu 12 Mar 2026 23:20:00 +0000
asID:                     262227
IP address blocks:        181.178.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:da:ee:dc:03:c5:74:02:86:1f:43:e6:b2:4a:3e:84:fa:39:24:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Mar 13 23:15:00 2025 GMT
            Not After : Mar 12 23:20:00 2026 GMT
        Subject: CN=6436FF0B2BDF74F9DDCA05F4F785D5CA134C44CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:00:75:c9:bd:c0:0c:a2:04:23:16:0b:27:
                    8b:4a:69:80:a0:be:bd:97:c1:fb:a4:74:e0:e0:97:
                    61:ce:86:2c:71:ac:dc:4c:5b:bb:2c:86:22:e0:d1:
                    e7:54:27:9d:d3:82:80:80:bc:4c:43:b8:8b:e9:d3:
                    15:6e:5b:87:09:8b:f8:71:d3:02:fb:5c:09:73:c6:
                    6e:a0:72:61:f9:8b:50:fe:5c:c7:62:5d:67:79:7e:
                    33:ca:c3:7e:34:dd:5d:61:cf:09:4c:30:1b:24:f2:
                    10:2b:02:96:c8:ed:0b:12:c9:a9:26:a5:9b:a5:1a:
                    b3:7f:6b:bf:da:dd:68:e7:3a:02:63:8b:cf:72:fb:
                    fe:5c:6f:67:f8:54:dd:20:d6:4b:c2:dd:da:1b:ef:
                    4a:6f:f7:df:35:98:11:fa:46:2a:c9:59:95:bb:ed:
                    75:c1:2b:cd:89:43:20:ed:4c:a5:55:3e:95:93:7f:
                    64:98:e0:33:7c:7b:eb:c0:59:cf:a9:22:df:c1:84:
                    82:ca:ff:80:2f:f8:5d:07:e7:26:14:35:b3:19:ff:
                    55:c6:70:f0:5a:1e:e3:b1:bb:5e:a5:61:43:96:c6:
                    d3:1c:0b:a1:e0:93:ee:7b:36:16:b3:9e:3a:70:e0:
                    1c:2b:1d:d9:14:4a:0e:97:62:8c:88:75:f0:f2:7e:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:36:FF:0B:2B:DF:74:F9:DD:CA:05:F4:F7:85:D5:CA:13:4C:44:CB
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31362d3234203d3e20323632323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:e5:a9:94:9e:3d:2c:34:1e:57:75:4a:b4:d8:2b:fb:55:ab:
         50:50:89:01:bd:f2:5c:0c:64:08:70:38:fe:70:78:23:ab:15:
         8b:b9:87:37:59:c6:d6:25:fd:2f:d9:fe:a6:a1:77:54:6c:cd:
         54:20:74:a5:bc:1d:7e:ad:01:48:9a:33:82:0f:bf:a5:74:51:
         f2:a1:d0:45:82:cb:fd:7f:cd:fb:96:dc:93:b8:eb:4b:5b:bf:
         82:5c:e5:c9:7e:0e:86:c9:ca:c9:61:e3:1d:59:84:09:86:2e:
         0f:f0:63:58:b9:68:78:98:10:30:db:a7:7c:dc:ee:84:9f:43:
         4a:0e:ea:4d:d6:2c:d5:70:26:9b:42:84:00:01:9b:fc:4a:36:
         63:7b:ed:41:bd:07:a1:44:ab:ed:ad:3d:9e:7e:e1:b3:4c:e7:
         e1:eb:4a:54:db:c3:d4:1e:86:49:60:9b:5c:d3:26:95:d3:ce:
         bf:04:2c:28:46:01:43:b8:90:6b:fe:8e:28:36:0b:a9:61:d6:
         ec:16:76:06:c2:88:97:9c:2e:c7:99:ff:70:fb:d7:c8:30:5b:
         04:5e:bb:af:0e:28:62:27:20:5a:f6:de:e7:67:72:eb:60:60:
         b9:f7:da:03:6f:b7:3c:00:12:b6:60:ea:c8:4f:f4:36:82:ad:
         9d:98:a0:8c
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUMNru3APFdAKGH0Pmsko+hPo5JAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3QUMyQzMzMTNENzRGMjI1ODUzODkyNDFCM0JFMkE3
Qjg5RDdCRjAeFw0yNTAzMTMyMzE1MDBaFw0yNjAzMTIyMzIwMDBaMDMxMTAvBgNV
BAMTKDY0MzZGRjBCMkJERjc0RjlERENBMDVGNEY3ODVENUNBMTM0QzQ0Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3EQB1yb3ADKIEIxYLJ4tKaYCg
vr2XwfukdODgl2HOhixxrNxMW7sshiLg0edUJ53TgoCAvExDuIvp0xVuW4cJi/hx
0wL7XAlzxm6gcmH5i1D+XMdiXWd5fjPKw3403V1hzwlMMBsk8hArApbI7QsSyakm
pZulGrN/a7/a3WjnOgJji89y+/5cb2f4VN0g1kvC3dob70pv9981mBH6RirJWZW7
7XXBK82JQyDtTKVVPpWTf2SY4DN8e+vAWc+pIt/BhILK/4Av+F0H5yYUNbMZ/1XG
cPBaHuOxu16lYUOWxtMcC6Hgk+57Nhaznjpw4BwrHdkUSg6XYoyIdfDyfttdAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUZDb/CyvfdPndygX094XVyhNMRMswHwYDVR0j
BBgwFoAU8HrCwzE9dPIlhTiSQbO+KnuJ178wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEIyNTg1QjFERTVFRjRFRjdDRjA3MjBENzhENTIxNDYx
RjM2RDczMjg2MjE4NURFNzVCRDhCNTg5NkZEMjQyLzAvRjA3QUMyQzMzMTNENzRG
MjI1ODUzODkyNDFCM0JFMkE3Qjg5RDdCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDdBQzJDMzMxM0Q3NEYyMjU4
NTM4OTI0MUIzQkUyQTdCODlEN0JGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRCMjU4NUIxREU1RUY0RUY3Q0YwNzIwRDc4RDUyMTQ2MUYzNkQ3MzI4
NjIxODVERTc1QkQ4QjU4OTZGRDI0Mi8wLzMxMzgzMTJlMzEzNzM4MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzYzMjMyMzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALWyMA0G
CSqGSIb3DQEBCwUAA4IBAQCq5amUnj0sNB5XdUq02Cv7VatQUIkBvfJcDGQIcDj+
cHgjqxWLuYc3WcbWJf0v2f6moXdUbM1UIHSlvB1+rQFImjOCD7+ldFHyodBFgsv9
f837ltyTuOtLW7+CXOXJfg6GycrJYeMdWYQJhi4P8GNYuWh4mBAw26d83O6En0NK
DupN1izVcCabQoQAAZv8SjZje+1BvQehRKvtrT2efuGzTOfh60pU28PUHoZJYJtc
0yaV086/BCwoRgFDuJBr/o4oNgupYdbsFnYGwoiXnC7Hmf9w+9fIMFsEXruvDihi
JyBa9t7nZ3LrYGC599oDb7c8ABK2YOrIT/Q2gq2dmKCM
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:47 2025 by rpki-client