Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233382e302f32342d3234203d3e203238343332.roa
File:                     3230312e3133312e3233382e302f32342d3234203d3e203238343332.roa (raw, json)
Hash identifier:          Gkd6gDyDOGzVDztdq+BvYpGm2emC5octw0jWM9bNafg=
Subject key identifier:   03:93:9F:DE:89:A9:FF:CF:A0:F2:DC:30:05:CB:00:BF:B0:34:B4:D3
Certificate issuer:       /CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
Certificate serial:       35593344C2685C43AFF8A765F13EC39D16755618
Authority key identifier: 19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233382e302f32342d3234203d3e203238343332.roa
Signing time:             Tue 04 Feb 2025 18:25:51 +0000
ROA not before:           Tue 04 Feb 2025 18:20:51 +0000
ROA not after:            Tue 03 Feb 2026 18:25:51 +0000
asID:                     28432
IP address blocks:        201.131.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 23:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:59:33:44:c2:68:5c:43:af:f8:a7:65:f1:3e:c3:9d:16:75:56:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
        Validity
            Not Before: Feb  4 18:20:51 2025 GMT
            Not After : Feb  3 18:25:51 2026 GMT
        Subject: CN=03939FDE89A9FFCFA0F2DC3005CB00BFB034B4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f5:76:13:47:52:6f:d9:6d:1f:a6:30:f4:4d:
                    52:af:40:d6:06:f0:4e:da:95:de:e8:08:4e:6c:9a:
                    ee:ed:1e:2e:2b:5c:e6:ac:9c:7b:15:52:22:f9:27:
                    69:2d:38:61:d5:51:b3:08:aa:d8:d4:e0:b4:f0:ef:
                    79:ca:0b:84:7d:4b:c0:8f:fa:81:5c:32:90:31:87:
                    a4:d3:17:9f:a7:c7:e0:21:0b:97:e2:17:88:35:d9:
                    41:8e:04:1b:c8:c4:d5:6f:da:70:fd:23:c0:6c:c0:
                    18:78:33:e2:ce:87:79:c9:1f:62:7a:7b:a7:e8:f7:
                    af:5e:28:90:98:a1:e0:cf:42:6c:83:4a:2d:6a:67:
                    8a:4c:f9:dc:a3:2c:00:55:f1:a4:a9:88:2a:f7:d7:
                    05:97:9b:ef:a9:d2:52:c4:c6:2d:a2:da:63:33:5e:
                    66:19:a7:40:ce:f8:32:36:c5:dd:90:29:2c:b0:71:
                    fa:8a:e8:be:c9:2e:28:ca:fd:d2:9b:61:d5:6f:29:
                    69:ea:0f:d4:d4:d1:b8:38:ca:96:e4:7a:82:15:d6:
                    6e:e1:fd:f6:6b:28:09:9a:1b:91:f2:72:d5:c4:ce:
                    89:ae:fc:0a:79:80:05:fe:6d:82:55:78:a6:67:f7:
                    fa:9c:70:ff:45:e2:4f:d8:61:81:b0:29:c4:b9:0a:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:93:9F:DE:89:A9:FF:CF:A0:F2:DC:30:05:CB:00:BF:B0:34:B4:D3
            X509v3 Authority Key Identifier:
                keyid:19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233382e302f32342d3234203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:88:30:43:06:60:1f:b1:b7:16:27:ff:8f:8a:ac:0d:74:88:
         90:59:26:16:56:3d:48:56:89:ad:62:6c:35:56:cd:8a:fe:8c:
         cb:8b:4d:36:aa:82:cd:ab:68:13:82:78:d5:7e:e9:c2:40:49:
         9a:65:3c:3f:db:cc:ab:e5:20:7f:88:f1:4e:1d:5d:3c:4f:20:
         5b:12:da:88:3f:8f:8e:f6:d1:8a:02:53:29:ab:93:21:5d:2e:
         39:2a:a5:e4:9f:7c:f0:61:82:dc:03:c7:82:5b:17:e7:9f:d6:
         4a:03:d1:9e:e0:32:94:36:61:86:16:e8:df:48:d5:35:46:8f:
         f3:fa:91:8c:b0:2f:17:5e:fc:24:a3:d4:c6:9e:64:a3:ef:82:
         35:2b:a9:ac:82:18:ba:18:1f:60:3a:65:2a:2f:aa:3b:96:59:
         84:2c:28:10:1c:b1:a4:dc:ef:7c:7a:f2:5f:e9:68:42:52:1f:
         9d:c4:f4:34:07:3c:73:ee:62:8c:79:79:8c:e5:48:68:97:23:
         72:e4:75:f4:c8:82:4f:cc:ff:3b:02:80:6b:02:1f:db:83:fa:
         39:39:1c:80:cd:43:3e:32:2c:ae:a6:f0:5b:83:57:5d:5d:7e:
         7b:67:32:eb:97:33:4c:29:0c:99:ad:bd:30:12:94:73:42:f9:
         4e:b8:e0:ec
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNVkzRMJoXEOv+Kdl8T7DnRZ1VhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlCRjM1NUEzODI2M0RBQzBDNEYzRDgyNEYyQTQyRTg4
Qjc4QTFCNjAeFw0yNTAyMDQxODIwNTFaFw0yNjAyMDMxODI1NTFaMDMxMTAvBgNV
BAMTKDAzOTM5RkRFODlBOUZGQ0ZBMEYyREMzMDA1Q0IwMEJGQjAzNEI0RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj9XYTR1Jv2W0fpjD0TVKvQNYG
8E7ald7oCE5smu7tHi4rXOasnHsVUiL5J2ktOGHVUbMIqtjU4LTw73nKC4R9S8CP
+oFcMpAxh6TTF5+nx+AhC5fiF4g12UGOBBvIxNVv2nD9I8BswBh4M+LOh3nJH2J6
e6fo969eKJCYoeDPQmyDSi1qZ4pM+dyjLABV8aSpiCr31wWXm++p0lLExi2i2mMz
XmYZp0DO+DI2xd2QKSywcfqK6L7JLijK/dKbYdVvKWnqD9TU0bg4ypbkeoIV1m7h
/fZrKAmaG5HyctXEzomu/Ap5gAX+bYJVeKZn9/qccP9F4k/YYYGwKcS5Cv1rAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUA5Of3omp/8+g8twwBcsAv7A0tNMwHwYDVR0j
BBgwFoAUGb81WjgmPawMTz2CTypC6It4obYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEM0NDk5QzEzODcxQzAxQ0MxM0M0RDMyNzNBOEFDRjEx
NjcxRjA3MTMwMDI5Mzk4ODJFREFEREREQzU3NUQ1LzAvMTlCRjM1NUEzODI2M0RB
QzBDNEYzRDgyNEYyQTQyRTg4Qjc4QTFCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOUJGMzU1QTM4MjYzREFDMEM0
RjNEODI0RjJBNDJFODhCNzhBMUI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRDNDQ5OUMxMzg3MUMwMUNDMTNDNEQzMjczQThBQ0YxMTY3MUYwNzEz
MDAyOTM5ODgyRURBREREREM1NzVENS8wLzMyMzAzMTJlMzEzMzMxMmUzMjMzMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzMzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyYPu
MA0GCSqGSIb3DQEBCwUAA4IBAQBqiDBDBmAfsbcWJ/+PiqwNdIiQWSYWVj1IVomt
Ymw1Vs2K/ozLi002qoLNq2gTgnjVfunCQEmaZTw/28yr5SB/iPFOHV08TyBbEtqI
P4+O9tGKAlMpq5MhXS45KqXkn3zwYYLcA8eCWxfnn9ZKA9Ge4DKUNmGGFujfSNU1
Ro/z+pGMsC8XXvwko9TGnmSj74I1K6msghi6GB9gOmUqL6o7llmELCgQHLGk3O98
evJf6WhCUh+dxPQ0Bzxz7mKMeXmM5UholyNy5HX0yIJPzP87AoBrAh/bg/o5ORyA
zUM+MiyupvBbg1ddXX57ZzLrlzNMKQyZrb0wEpRzQvlOuODs
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:31:01 2025 by rpki-client