Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136342e302f32322d3234203d3e203134353933.roa
File:                     3134392e31392e3136342e302f32322d3234203d3e203134353933.roa (raw, json)
Hash identifier:          pkq8MDbNnhPmmzgzFU9xPzQJprkEIdR7h9ijJ/jQQAY=
Subject key identifier:   F4:D1:21:6F:58:12:07:41:7C:E7:16:3E:E5:98:4F:F0:23:86:42:DB
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       64CA22D7EF344D7453720187CA553FBE3FD48116
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136342e302f32322d3234203d3e203134353933.roa
Signing time:             Tue 04 Feb 2025 18:13:59 +0000
ROA not before:           Tue 04 Feb 2025 18:08:59 +0000
ROA not after:            Tue 03 Feb 2026 18:13:59 +0000
asID:                     14593
IP address blocks:        149.19.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ca:22:d7:ef:34:4d:74:53:72:01:87:ca:55:3f:be:3f:d4:81:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Feb  4 18:08:59 2025 GMT
            Not After : Feb  3 18:13:59 2026 GMT
        Subject: CN=F4D1216F581207417CE7163EE5984FF0238642DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:a6:17:a0:ac:f5:a5:83:67:25:2b:7f:96:
                    5a:7f:8a:49:e5:59:57:6a:ba:73:7f:b0:57:51:5c:
                    a7:90:a6:5e:01:f8:f1:e3:5e:49:2a:3e:5b:bf:4b:
                    e5:ee:77:00:f5:a4:ce:91:3e:7a:f9:5e:d2:f2:82:
                    e4:35:17:27:62:37:bf:dc:e4:2c:ce:74:aa:97:a8:
                    26:ee:9d:85:bb:e4:73:31:f2:14:d4:7c:15:ae:3f:
                    4e:15:e4:88:97:c2:ed:e7:8e:04:60:2d:53:0f:20:
                    55:84:23:28:a6:77:0d:26:24:2d:b0:6a:8d:05:35:
                    58:43:a3:1d:f1:f5:be:f4:13:aa:03:06:97:ad:1d:
                    fe:be:e7:98:c4:6a:ac:87:e6:41:47:ee:ce:3e:65:
                    ab:cd:7c:9b:b6:84:47:f5:25:33:95:23:28:1e:f7:
                    22:50:53:21:98:76:1e:10:95:91:73:3d:23:51:82:
                    30:0a:d2:89:c1:6d:2d:44:60:30:ef:36:79:73:81:
                    ad:ef:82:e2:97:28:89:28:12:8d:f0:76:38:46:0e:
                    ae:9e:26:6e:97:09:9c:ed:10:b9:51:f8:2e:ca:82:
                    8c:ea:8e:48:8b:94:f1:4c:eb:1e:26:ac:03:7d:e1:
                    ea:08:16:40:8d:83:f1:0e:97:6e:83:e5:1d:90:6b:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D1:21:6F:58:12:07:41:7C:E7:16:3E:E5:98:4F:F0:23:86:42:DB
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134392e31392e3136342e302f32322d3234203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:72:5e:a1:77:45:61:c4:13:b2:6c:6e:e1:af:0f:f4:6c:38:
         bb:59:31:3f:98:bc:f8:62:5c:c0:e9:d6:73:fd:1f:2d:19:d4:
         e0:ad:fa:61:1c:1e:f7:9e:f7:b4:6f:f4:65:fd:8a:74:24:8f:
         e1:6a:46:c6:ea:5a:5a:6d:3e:b0:42:17:e7:d4:43:1b:56:00:
         d6:08:2b:c3:5e:fb:a7:27:bc:cd:a5:99:b9:16:ee:29:18:ed:
         38:91:d2:aa:95:3e:a4:85:d0:ee:e4:e7:ee:02:24:79:b4:b0:
         06:83:fd:c0:d5:05:43:17:3a:b5:23:31:52:06:57:ab:c1:ee:
         27:61:71:3c:e0:a2:a2:a3:77:93:72:8a:7f:33:1c:7b:bf:a8:
         c0:27:d2:15:08:60:bc:e1:ae:dd:ef:86:5d:10:26:5a:a9:6c:
         71:e2:42:93:55:79:30:1f:15:04:ff:fd:bd:cc:f6:77:07:00:
         0b:d2:fc:46:7a:df:e1:ad:ba:a5:53:7c:cf:37:71:9e:a6:5b:
         80:d1:98:47:03:04:e2:25:c5:e4:22:fe:6d:a0:dc:ab:7b:d9:
         a6:0b:5d:ef:60:a2:7d:8b:18:4d:06:5e:71:33:92:2e:cc:d0:
         08:87:23:46:d4:2b:ff:5f:a3:5c:41:21:a0:df:de:20:4a:d5:
         29:61:85:81
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZMoi1+80TXRTcgGHylU/vj/UgRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVEQTE3MUQ1QUUwOUU1NUE3MjgwREMyMjc2MTBEODJB
MkFCMDM1NjAeFw0yNTAyMDQxODA4NTlaFw0yNjAyMDMxODEzNTlaMDMxMTAvBgNV
BAMTKEY0RDEyMTZGNTgxMjA3NDE3Q0U3MTYzRUU1OTg0RkYwMjM4NjQyREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFe6YXoKz1pYNnJSt/llp/iknl
WVdqunN/sFdRXKeQpl4B+PHjXkkqPlu/S+XudwD1pM6RPnr5XtLyguQ1FydiN7/c
5CzOdKqXqCbunYW75HMx8hTUfBWuP04V5IiXwu3njgRgLVMPIFWEIyimdw0mJC2w
ao0FNVhDox3x9b70E6oDBpetHf6+55jEaqyH5kFH7s4+ZavNfJu2hEf1JTOVIyge
9yJQUyGYdh4QlZFzPSNRgjAK0onBbS1EYDDvNnlzga3vguKXKIkoEo3wdjhGDq6e
Jm6XCZztELlR+C7KgozqjkiLlPFM6x4mrAN94eoIFkCNg/EOl26D5R2Qa1rPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU9NEhb1gSB0F85xY+5ZhP8COGQtswHwYDVR0j
BBgwFoAUFdoXHVrgnlWnKA3CJ2ENgqKrA1YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDgzNzdCOEY4MTBFNjlCMUU2REUzRjIyOTg0OEFCMzQ0
RkI3ODY0OTQyRjc2Q0NDQ0JFNUMyNTZCMjNENkJGLzAvMTVEQTE3MUQ1QUUwOUU1
NUE3MjgwREMyMjc2MTBEODJBMkFCMDM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNURBMTcxRDVBRTA5RTU1QTcy
ODBEQzIyNzYxMEQ4MkEyQUIwMzU2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ4Mzc3QjhGODEwRTY5QjFFNkRFM0YyMjk4NDhBQjM0NEZCNzg2NDk0
MkY3NkNDQ0NCRTVDMjU2QjIzRDZCRi8wLzMxMzQzOTJlMzEzOTJlMzEzNjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNDM1MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApUTpDAN
BgkqhkiG9w0BAQsFAAOCAQEAdnJeoXdFYcQTsmxu4a8P9Gw4u1kxP5i8+GJcwOnW
c/0fLRnU4K36YRwe9573tG/0Zf2KdCSP4WpGxupaWm0+sEIX59RDG1YA1ggrw177
pye8zaWZuRbuKRjtOJHSqpU+pIXQ7uTn7gIkebSwBoP9wNUFQxc6tSMxUgZXq8Hu
J2FxPOCioqN3k3KKfzMce7+owCfSFQhgvOGu3e+GXRAmWqlsceJCk1V5MB8VBP/9
vcz2dwcAC9L8Rnrf4a26pVN8zzdxnqZbgNGYRwME4iXF5CL+baDcq3vZpgtd72Ci
fYsYTQZecTOSLszQCIcjRtQr/1+jXEEhoN/eIErVKWGFgQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 17:31:08 2025 by rpki-client