Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3133382e39372e3135362e302f32322d3232203d3e203532343439.roa
File:                     3133382e39372e3135362e302f32322d3232203d3e203532343439.roa (raw, json)
Hash identifier:          +pPDF8EXxokMlnpi80Qc1KRbekpILJ5RAKk2fbQdP1w=
Subject key identifier:   6F:E5:58:E7:80:12:2B:29:64:E8:C9:B5:E7:2B:9D:56:7C:54:FE:C9
Certificate issuer:       /CN=A6092CA6DF0448374137DE890AB584D961C1028E
Certificate serial:       219251F0B07827532180C6C1CC698EA8AB69C808
Authority key identifier: A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3133382e39372e3135362e302f32322d3232203d3e203532343439.roa
Signing time:             Tue 04 Feb 2025 18:34:02 +0000
ROA not before:           Tue 04 Feb 2025 18:29:02 +0000
ROA not after:            Tue 03 Feb 2026 18:34:02 +0000
asID:                     52449
IP address blocks:        138.97.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:92:51:f0:b0:78:27:53:21:80:c6:c1:cc:69:8e:a8:ab:69:c8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6092CA6DF0448374137DE890AB584D961C1028E
        Validity
            Not Before: Feb  4 18:29:02 2025 GMT
            Not After : Feb  3 18:34:02 2026 GMT
        Subject: CN=6FE558E780122B2964E8C9B5E72B9D567C54FEC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:0a:29:8d:e5:80:65:d7:81:a3:b8:fa:59:
                    40:c2:09:3a:0f:09:7f:eb:05:96:6e:d6:75:f8:2d:
                    ac:b5:fb:06:ee:99:14:ee:fd:97:ff:2b:d9:5f:d7:
                    9e:b4:16:b9:32:33:3e:1b:a1:6c:ab:a0:e6:58:35:
                    d1:e3:99:98:72:a2:7e:d3:55:b4:b7:c7:0a:c5:3a:
                    33:72:72:63:3e:83:b2:de:2c:98:d7:4e:b9:8b:e5:
                    7a:95:35:7c:e4:8d:2e:62:85:b7:9b:58:28:47:ad:
                    c4:a5:34:aa:f8:3b:67:94:cc:c9:81:f4:f5:b9:fe:
                    4f:6b:50:0c:e1:cf:9b:94:71:26:6a:a9:26:66:f8:
                    63:e2:e6:df:69:76:be:54:8e:13:bd:97:08:4e:4e:
                    b5:2e:9f:19:12:13:7f:53:36:5c:49:aa:7c:8c:04:
                    1f:ef:e3:82:58:0c:27:44:b1:a7:de:1e:f7:98:29:
                    38:b9:98:14:a7:09:33:eb:b4:9b:b9:cc:08:e5:bb:
                    7f:d3:d8:1d:6e:90:12:65:2e:71:f4:f5:b0:eb:d6:
                    5c:33:48:6d:a7:56:84:17:cc:c6:9d:62:47:b8:e5:
                    a6:f7:01:49:bf:56:18:ff:52:c0:ea:28:bb:47:4e:
                    33:e3:d4:31:91:21:88:19:72:dd:02:20:5f:1d:f9:
                    e2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E5:58:E7:80:12:2B:29:64:E8:C9:B5:E7:2B:9D:56:7C:54:FE:C9
            X509v3 Authority Key Identifier:
                keyid:A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3133382e39372e3135362e302f32322d3232203d3e203532343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:49:f2:2e:1a:ec:ea:54:7a:b4:30:f7:eb:f5:2f:30:8f:ec:
         bf:41:31:8b:e2:32:02:82:61:29:8c:1f:db:e8:a2:20:09:c1:
         32:0c:2a:60:18:75:bb:1d:35:28:13:48:57:4e:60:93:7e:0e:
         3f:2e:26:12:d9:a0:e5:b2:db:1a:5d:bd:62:f6:38:c0:5b:ea:
         3f:0c:89:6c:b2:92:c9:25:01:e3:b1:55:02:df:4b:da:5f:e5:
         14:c6:e3:63:16:f5:59:49:64:4d:9f:0f:69:ef:ac:84:b7:91:
         da:62:2a:82:11:16:bd:e0:ac:61:58:dc:92:c4:8e:f6:48:1d:
         54:3a:dd:72:3a:85:2c:b0:21:5c:66:f3:8a:be:e0:5d:ad:3d:
         39:eb:67:0d:30:9c:22:5a:be:d1:e2:d2:67:93:dc:51:09:53:
         98:bc:63:c9:16:3f:a7:89:e9:45:cc:c3:56:ab:82:0c:da:b1:
         d2:21:76:0e:29:f2:a6:a5:7c:c0:eb:0c:b5:e9:90:6d:f9:cb:
         51:ff:ff:9f:d4:6a:89:7d:03:68:7b:40:61:91:8f:65:de:c3:
         04:b9:28:3a:25:6c:54:f5:e8:5a:a2:72:9f:12:8e:e4:40:57:
         30:e8:e8:2f:d5:16:ab:56:b6:c5:54:f2:88:2a:32:23:a5:7f:
         9f:4f:b7:8d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIZJR8LB4J1MhgMbBzGmOqKtpyAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTJDQTZERjA0NDgzNzQxMzdERTg5MEFCNTg0RDk2
MUMxMDI4RTAeFw0yNTAyMDQxODI5MDJaFw0yNjAyMDMxODM0MDJaMDMxMTAvBgNV
BAMTKDZGRTU1OEU3ODAxMjJCMjk2NEU4QzlCNUU3MkI5RDU2N0M1NEZFQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03gopjeWAZdeBo7j6WUDCCToP
CX/rBZZu1nX4Lay1+wbumRTu/Zf/K9lf1560FrkyMz4boWyroOZYNdHjmZhyon7T
VbS3xwrFOjNycmM+g7LeLJjXTrmL5XqVNXzkjS5ihbebWChHrcSlNKr4O2eUzMmB
9PW5/k9rUAzhz5uUcSZqqSZm+GPi5t9pdr5UjhO9lwhOTrUunxkSE39TNlxJqnyM
BB/v44JYDCdEsafeHveYKTi5mBSnCTPrtJu5zAjlu3/T2B1ukBJlLnH09bDr1lwz
SG2nVoQXzMadYke45ab3AUm/Vhj/UsDqKLtHTjPj1DGRIYgZct0CIF8d+eIVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUb+VY54ASKylk6Mm15yudVnxU/skwHwYDVR0j
BBgwFoAUpgkspt8ESDdBN96JCrWE2WHBAo4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTI1RjgwOUE2REVEREU2RDEwQUIwNkFGQTNEMzZFNzlB
NzM3OTU5MTJDOTBGNDdGQ0U3ODE3QTU0Q0E0MUM5LzAvQTYwOTJDQTZERjA0NDgz
NzQxMzdERTg5MEFCNTg0RDk2MUMxMDI4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjA5MkNBNkRGMDQ0ODM3NDEz
N0RFODkwQUI1ODREOTYxQzEwMjhFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTEyNUY4MDlBNkRFRERFNkQxMEFCMDZBRkEzRDM2RTc5QTczNzk1OTEy
QzkwRjQ3RkNFNzgxN0E1NENBNDFDOS8wLzMxMzMzODJlMzkzNzJlMzEzNTM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM0MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAophnDAN
BgkqhkiG9w0BAQsFAAOCAQEAr0nyLhrs6lR6tDD36/UvMI/sv0Exi+IyAoJhKYwf
2+iiIAnBMgwqYBh1ux01KBNIV05gk34OPy4mEtmg5bLbGl29YvY4wFvqPwyJbLKS
ySUB47FVAt9L2l/lFMbjYxb1WUlkTZ8Pae+shLeR2mIqghEWveCsYVjcksSO9kgd
VDrdcjqFLLAhXGbzir7gXa09OetnDTCcIlq+0eLSZ5PcUQlTmLxjyRY/p4npRczD
VquCDNqx0iF2DinypqV8wOsMtemQbfnLUf//n9RqiX0DaHtAYZGPZd7DBLkoOiVs
VPXoWqJynxKO5EBXMOjoL9UWq1a2xVTyiCoyI6V/n0+3jQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:23:22 2025 by rpki-client