Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e203131353536.roa
File:                     3230312e3133312e3134382e302f32322d3234203d3e203131353536.roa (raw, json)
Hash identifier:          SHLwl+ZuUDtstaEs3OCGnJMrIGgJe5ZDGFKqCtAq4ZU=
Subject key identifier:   C7:9A:93:60:BF:DE:C3:6F:24:B3:47:FC:88:0A:7F:A9:34:E7:87:EF
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       0C6CEEBB6F81C9C2B024ADD8B18579FD56CAAC60
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e203131353536.roa
Signing time:             Fri 14 Mar 2025 14:20:00 +0000
ROA not before:           Fri 14 Mar 2025 14:15:00 +0000
ROA not after:            Fri 13 Mar 2026 14:20:00 +0000
asID:                     11556
IP address blocks:        201.131.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6c:ee:bb:6f:81:c9:c2:b0:24:ad:d8:b1:85:79:fd:56:ca:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Mar 14 14:15:00 2025 GMT
            Not After : Mar 13 14:20:00 2026 GMT
        Subject: CN=C79A9360BFDEC36F24B347FC880A7FA934E787EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:3f:89:6d:5d:97:7e:ab:f3:62:34:dc:b3:
                    f3:aa:f5:df:82:f0:06:9b:c8:19:64:d5:2a:26:f9:
                    98:0b:2f:ff:b3:b2:90:72:51:7c:05:82:50:28:b1:
                    4d:01:e1:07:7c:90:ea:2f:06:32:1e:70:3c:d7:a0:
                    60:4f:2d:59:c8:f4:55:6c:47:88:b0:0c:2b:b7:da:
                    2a:76:cc:35:fc:6a:68:20:b8:2d:e1:27:3a:3a:6d:
                    9d:7a:e3:69:64:2c:72:1c:98:e2:d8:fc:bf:8e:4f:
                    05:ec:b6:a2:4c:fe:0d:02:39:9a:74:d9:28:bb:2d:
                    ef:b0:f3:6a:62:b2:3b:0f:b9:53:75:fc:85:c9:ac:
                    18:8d:89:86:00:82:06:6d:0d:b3:02:6a:36:c1:c6:
                    7a:f0:99:65:97:c5:22:53:11:5e:3d:30:ff:c2:e5:
                    7e:2f:7e:b3:88:1e:6b:4a:13:ee:69:32:5d:f0:8e:
                    4d:c1:57:16:2f:12:90:09:27:4d:4b:ad:ca:28:19:
                    db:6d:b1:b4:29:d1:a9:cb:ea:a2:f9:19:bd:ae:74:
                    91:c4:76:ed:04:dc:97:8c:28:4b:a8:24:61:0c:6c:
                    e6:dc:51:78:49:01:95:58:8e:e5:c4:57:51:f2:5c:
                    44:12:91:fb:a9:06:d2:af:32:39:6f:bb:53:30:2f:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9A:93:60:BF:DE:C3:6F:24:B3:47:FC:88:0A:7F:A9:34:E7:87:EF
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:cb:1b:13:c5:67:16:8b:d2:79:d1:3b:4e:12:20:cc:a1:e2:
         08:22:9a:89:88:08:ce:02:75:bc:51:7d:7a:fd:06:90:32:5b:
         41:83:28:fe:cd:1b:a4:4e:d8:fa:3a:b1:b2:20:44:eb:79:7f:
         b4:77:2c:6b:69:75:87:9d:ab:09:cc:46:a4:59:4e:fe:1f:ae:
         ac:34:9e:64:f7:da:14:bb:06:2e:ce:e6:5d:3e:66:49:1a:11:
         01:e2:b3:01:19:9f:a3:60:6a:14:8c:ca:e3:94:61:57:23:55:
         c8:fa:39:a7:c5:6d:28:8c:07:d5:75:d3:e6:a5:a5:81:b4:2a:
         af:b0:f2:78:15:6e:9a:ba:a2:4e:b8:57:97:4f:a9:77:27:1d:
         fd:db:b6:8d:87:fe:11:66:5d:9b:2d:80:2d:ad:5d:75:54:30:
         6d:89:4b:bd:dd:be:ca:c1:0a:e0:f9:48:bb:1c:f7:e2:8d:3e:
         1d:55:ff:9f:09:a3:83:dc:f8:77:73:68:c0:49:13:c1:16:5a:
         f5:dd:fe:90:74:e1:7f:a1:5d:cc:88:58:8c:56:45:d3:82:1c:
         9f:b1:ea:4e:b1:70:5b:d6:89:9a:c8:5b:02:32:cf:9c:c2:d9:
         13:95:3a:4b:a7:38:bf:e8:99:d6:98:59:b6:b2:ec:05:4b:34:
         36:bb:58:d6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDGzuu2+BycKwJK3YsYV5/VbKrGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3QUMyQzMzMTNENzRGMjI1ODUzODkyNDFCM0JFMkE3
Qjg5RDdCRjAeFw0yNTAzMTQxNDE1MDBaFw0yNjAzMTMxNDIwMDBaMDMxMTAvBgNV
BAMTKEM3OUE5MzYwQkZERUMzNkYyNEIzNDdGQzg4MEE3RkE5MzRFNzg3RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqiD+JbV2XfqvzYjTcs/Oq9d+C
8AabyBlk1Som+ZgLL/+zspByUXwFglAosU0B4Qd8kOovBjIecDzXoGBPLVnI9FVs
R4iwDCu32ip2zDX8amgguC3hJzo6bZ1642lkLHIcmOLY/L+OTwXstqJM/g0COZp0
2Si7Le+w82pisjsPuVN1/IXJrBiNiYYAggZtDbMCajbBxnrwmWWXxSJTEV49MP/C
5X4vfrOIHmtKE+5pMl3wjk3BVxYvEpAJJ01LrcooGdttsbQp0anL6qL5Gb2udJHE
du0E3JeMKEuoJGEMbObcUXhJAZVYjuXEV1HyXEQSkfupBtKvMjlvu1MwLxEFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUx5qTYL/ew28ks0f8iAp/qTTnh+8wHwYDVR0j
BBgwFoAU8HrCwzE9dPIlhTiSQbO+KnuJ178wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEIyNTg1QjFERTVFRjRFRjdDRjA3MjBENzhENTIxNDYx
RjM2RDczMjg2MjE4NURFNzVCRDhCNTg5NkZEMjQyLzAvRjA3QUMyQzMzMTNENzRG
MjI1ODUzODkyNDFCM0JFMkE3Qjg5RDdCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDdBQzJDMzMxM0Q3NEYyMjU4
NTM4OTI0MUIzQkUyQTdCODlEN0JGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRCMjU4NUIxREU1RUY0RUY3Q0YwNzIwRDc4RDUyMTQ2MUYzNkQ3MzI4
NjIxODVERTc1QkQ4QjU4OTZGRDI0Mi8wLzMyMzAzMTJlMzEzMzMxMmUzMTM0Mzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMxMzUzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyYOU
MA0GCSqGSIb3DQEBCwUAA4IBAQAgyxsTxWcWi9J50TtOEiDMoeIIIpqJiAjOAnW8
UX16/QaQMltBgyj+zRukTtj6OrGyIETreX+0dyxraXWHnasJzEakWU7+H66sNJ5k
99oUuwYuzuZdPmZJGhEB4rMBGZ+jYGoUjMrjlGFXI1XI+jmnxW0ojAfVddPmpaWB
tCqvsPJ4FW6auqJOuFeXT6l3Jx3927aNh/4RZl2bLYAtrV11VDBtiUu93b7KwQrg
+Ui7HPfijT4dVf+fCaOD3Ph3c2jASRPBFlr13f6QdOF/oV3MiFiMVkXTghyfsepO
sXBb1omayFsCMs+cwtkTlTpLpzi/6JnWmFm2suwFSzQ2u1jW
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:33 2025 by rpki-client