Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e203134373534.roa
File:                     3230312e3133312e3134382e302f32322d3234203d3e203134373534.roa (raw, json)
Hash identifier:          ckEJnqcsUMrAVBc3qFM7kGOrMovx99f3+2hgg780eDI=
Subject key identifier:   43:40:B7:D2:79:6C:33:EC:A5:9A:8A:9A:F7:69:AB:54:B1:B5:23:AE
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       3562B5A787A77FEA7DF2D1BAB89F8AE06B086765
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 19:59:24 +0000
ROA not before:           Tue 04 Feb 2025 19:54:24 +0000
ROA not after:            Tue 03 Feb 2026 19:59:24 +0000
asID:                     14754
IP address blocks:        201.131.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:62:b5:a7:87:a7:7f:ea:7d:f2:d1:ba:b8:9f:8a:e0:6b:08:67:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Feb  4 19:54:24 2025 GMT
            Not After : Feb  3 19:59:24 2026 GMT
        Subject: CN=4340B7D2796C33ECA59A8A9AF769AB54B1B523AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:a5:b9:d7:b9:59:f3:4e:82:ae:35:d5:5a:
                    c0:df:85:fa:25:8d:22:6c:87:d0:a0:73:27:fb:18:
                    57:89:af:12:7b:6d:6d:0a:20:5e:45:d2:47:8f:0e:
                    75:b7:30:b7:a8:a2:8a:09:6a:fd:01:2a:d3:fe:3f:
                    ba:86:3d:cf:88:69:0c:17:11:f2:9a:55:df:4f:e1:
                    07:28:e8:98:d3:ab:b3:bb:dc:b1:ec:c7:2c:72:2d:
                    a1:56:3b:2f:7f:45:6c:6a:ab:10:34:c7:f1:18:84:
                    73:25:85:27:e2:7d:a2:5d:2f:f8:cb:98:69:66:1c:
                    18:c3:5b:15:90:cb:9f:4c:48:06:e4:f3:db:49:c6:
                    91:0c:66:c3:a8:e8:f9:f3:a8:d0:72:74:47:10:c2:
                    29:33:5a:ef:ea:db:72:a6:18:81:9c:df:ab:d5:03:
                    c4:d2:8e:d9:9a:b0:68:9a:b7:4c:18:06:7b:d2:cf:
                    fa:0d:40:4f:55:7a:d5:53:1f:76:37:f3:50:11:43:
                    44:a2:6c:0a:23:8e:60:40:5c:c4:ab:85:d9:9f:06:
                    44:9c:33:e3:b7:45:4b:32:c4:d6:26:6e:1b:87:d0:
                    6b:d7:68:90:91:98:1f:5e:2c:20:a5:9b:25:4b:94:
                    03:79:25:d9:0c:75:bb:df:f1:15:0e:b8:ef:c9:d4:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:40:B7:D2:79:6C:33:EC:A5:9A:8A:9A:F7:69:AB:54:B1:B5:23:AE
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:ba:c5:58:33:80:47:db:35:66:1e:a8:b5:ab:ac:db:44:1f:
         0a:9e:b0:0d:cb:16:d8:c5:c5:33:d6:1e:03:bc:90:73:6b:78:
         f0:11:ce:ce:cc:13:c2:66:66:4c:68:76:81:6c:95:63:76:44:
         ab:5d:8b:22:60:b6:2a:6d:52:7c:e8:d1:81:c8:5e:eb:d8:71:
         64:b6:6c:3c:60:ab:15:70:2e:e4:7a:26:6b:42:6f:59:3a:40:
         48:ec:8d:32:d1:17:52:f3:65:68:8e:75:72:6b:3a:a3:5b:ef:
         f4:8f:81:c1:40:69:4d:ee:06:4c:b3:f0:cc:12:a5:16:7f:bb:
         e6:97:f8:41:45:db:f3:2e:76:bd:10:25:17:88:9f:ac:7b:2b:
         51:8d:77:3d:3a:c6:98:ac:26:17:b7:34:6c:15:1a:91:fd:c7:
         91:7f:de:c9:b2:36:00:78:ef:11:b6:a1:14:24:a2:0a:b3:e1:
         26:39:74:fb:e8:2c:7b:e2:cf:70:a9:2a:ed:40:6f:29:f2:bf:
         02:72:e3:5b:27:b9:a5:57:8a:c6:8b:9a:db:bf:fa:2a:06:9b:
         26:3b:4e:2d:3e:0d:b8:b7:ea:17:c2:9c:8e:55:09:40:5f:d9:
         45:5d:c6:b4:88:d8:5a:ec:ce:59:1e:8d:9d:c1:5c:38:1c:d0:
         22:1d:35:7e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNWK1p4enf+p98tG6uJ+K4GsIZ2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3QUMyQzMzMTNENzRGMjI1ODUzODkyNDFCM0JFMkE3
Qjg5RDdCRjAeFw0yNTAyMDQxOTU0MjRaFw0yNjAyMDMxOTU5MjRaMDMxMTAvBgNV
BAMTKDQzNDBCN0QyNzk2QzMzRUNBNTlBOEE5QUY3NjlBQjU0QjFCNTIzQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbX6W517lZ806CrjXVWsDfhfol
jSJsh9Cgcyf7GFeJrxJ7bW0KIF5F0kePDnW3MLeooooJav0BKtP+P7qGPc+IaQwX
EfKaVd9P4Qco6JjTq7O73LHsxyxyLaFWOy9/RWxqqxA0x/EYhHMlhSfifaJdL/jL
mGlmHBjDWxWQy59MSAbk89tJxpEMZsOo6PnzqNBydEcQwikzWu/q23KmGIGc36vV
A8TSjtmasGiat0wYBnvSz/oNQE9VetVTH3Y381ARQ0SibAojjmBAXMSrhdmfBkSc
M+O3RUsyxNYmbhuH0GvXaJCRmB9eLCClmyVLlAN5JdkMdbvf8RUOuO/J1JSRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQ0C30nlsM+ylmoqa92mrVLG1I64wHwYDVR0j
BBgwFoAU8HrCwzE9dPIlhTiSQbO+KnuJ178wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEIyNTg1QjFERTVFRjRFRjdDRjA3MjBENzhENTIxNDYx
RjM2RDczMjg2MjE4NURFNzVCRDhCNTg5NkZEMjQyLzAvRjA3QUMyQzMzMTNENzRG
MjI1ODUzODkyNDFCM0JFMkE3Qjg5RDdCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDdBQzJDMzMxM0Q3NEYyMjU4
NTM4OTI0MUIzQkUyQTdCODlEN0JGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRCMjU4NUIxREU1RUY0RUY3Q0YwNzIwRDc4RDUyMTQ2MUYzNkQ3MzI4
NjIxODVERTc1QkQ4QjU4OTZGRDI0Mi8wLzMyMzAzMTJlMzEzMzMxMmUzMTM0Mzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM0MzczNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyYOU
MA0GCSqGSIb3DQEBCwUAA4IBAQASusVYM4BH2zVmHqi1q6zbRB8KnrANyxbYxcUz
1h4DvJBza3jwEc7OzBPCZmZMaHaBbJVjdkSrXYsiYLYqbVJ86NGByF7r2HFktmw8
YKsVcC7keiZrQm9ZOkBI7I0y0RdS82VojnVyazqjW+/0j4HBQGlN7gZMs/DMEqUW
f7vml/hBRdvzLna9ECUXiJ+seytRjXc9OsaYrCYXtzRsFRqR/ceRf97JsjYAeO8R
tqEUJKIKs+EmOXT76Cx74s9wqSrtQG8p8r8CcuNbJ7mlV4rGi5rbv/oqBpsmO04t
Pg24t+oXwpyOVQlAX9lFXca0iNha7M5ZHo2dwVw4HNAiHTV+
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:39 2025 by rpki-client