Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/3230312e3133312e37382e302f32342d3234203d3e20323633373331.roa
File:                     3230312e3133312e37382e302f32342d3234203d3e20323633373331.roa (raw, json)
Hash identifier:          QgtQrY4/lzvmTleGXLWNv4fSuJvJxRiwQPAsuBZHqlg=
Subject key identifier:   5E:CF:3D:22:FD:BE:69:87:90:88:0D:AB:2E:7A:DC:13:0A:2E:DC:1B
Certificate issuer:       /CN=10E5944B62A6E9D7EDE86FCB17B8822C2404639F
Certificate serial:       33268B955AA4A69C04AF41180B0FFDDD29823164
Authority key identifier: 10:E5:94:4B:62:A6:E9:D7:ED:E8:6F:CB:17:B8:82:2C:24:04:63:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/3230312e3133312e37382e302f32342d3234203d3e20323633373331.roa
Signing time:             Tue 04 Feb 2025 20:01:55 +0000
ROA not before:           Tue 04 Feb 2025 19:56:55 +0000
ROA not after:            Tue 03 Feb 2026 20:01:55 +0000
asID:                     263731
IP address blocks:        201.131.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:26:8b:95:5a:a4:a6:9c:04:af:41:18:0b:0f:fd:dd:29:82:31:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10E5944B62A6E9D7EDE86FCB17B8822C2404639F
        Validity
            Not Before: Feb  4 19:56:55 2025 GMT
            Not After : Feb  3 20:01:55 2026 GMT
        Subject: CN=5ECF3D22FDBE698790880DAB2E7ADC130A2EDC1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:16:97:b9:d1:84:17:da:3f:61:7c:6a:1f:
                    50:8e:da:5b:d3:c1:ed:3e:2a:67:b2:1d:cd:cf:cf:
                    d8:83:a0:67:a8:69:44:1a:db:cd:5a:28:ff:3b:0d:
                    9d:d1:7e:9c:6b:db:a2:95:4c:01:11:9d:97:f6:3a:
                    47:1f:5d:97:8d:79:38:05:5f:4d:ba:5e:4d:34:0b:
                    59:67:14:4c:3d:a4:e0:72:4e:90:e3:62:23:62:d2:
                    22:17:14:f9:18:a4:60:63:3b:6f:33:b3:8e:ab:0e:
                    db:7d:f9:36:fa:de:9f:0a:97:f9:f9:a8:ff:3d:72:
                    30:dc:97:c4:09:fb:cf:63:f7:77:bc:2d:9f:59:1b:
                    0d:e0:21:5a:4a:5d:ac:92:4d:98:f2:d9:c2:2e:ab:
                    35:a7:2c:e4:4e:9a:ab:ca:22:c1:dd:1d:ee:de:1d:
                    f0:7f:6f:51:2a:81:b4:85:a1:76:f9:97:e3:bf:b1:
                    36:de:1a:19:71:d0:fd:cc:99:aa:5f:30:27:da:3b:
                    72:f5:98:93:1b:01:b8:91:0d:c2:0d:fb:d7:ba:b3:
                    4d:67:a7:ce:28:c9:e5:d7:c4:c2:0b:85:20:09:35:
                    d6:92:81:51:84:b7:e0:79:25:93:99:23:a8:e8:07:
                    ab:b9:a0:4c:00:d4:64:dd:95:a9:a0:d3:56:21:51:
                    f7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CF:3D:22:FD:BE:69:87:90:88:0D:AB:2E:7A:DC:13:0A:2E:DC:1B
            X509v3 Authority Key Identifier:
                keyid:10:E5:94:4B:62:A6:E9:D7:ED:E8:6F:CB:17:B8:82:2C:24:04:63:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10E5944B62A6E9D7EDE86FCB17B8822C2404639F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/161231FC53447A775B9AAEB53545F376BC9B078D3A0DAA2D5A552EBAFBEC6753/0/3230312e3133312e37382e302f32342d3234203d3e20323633373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:8d:a3:71:e2:bb:e5:77:5c:37:be:34:51:71:bb:fe:be:af:
         b6:dc:0d:12:46:0b:f8:b7:ec:70:2d:a4:6c:19:3e:ba:e9:bf:
         7f:5c:3c:b8:ce:b5:84:c0:7d:0e:b4:64:a1:46:74:e5:f5:4c:
         d0:be:74:07:c4:90:90:fd:cc:61:90:fe:98:ae:a9:85:63:95:
         7c:19:fd:1e:30:b1:3b:8a:b8:61:1d:e6:e5:b1:6f:7d:db:14:
         ad:6e:1b:f2:00:1c:6e:1c:da:a8:72:29:d5:9b:90:6e:fc:16:
         b1:97:91:a1:7c:6c:15:b7:83:7f:7b:ca:bb:78:44:6d:e9:82:
         43:1d:57:fc:da:51:6b:b1:2f:61:ec:51:d7:25:97:72:6a:8e:
         0b:a5:e5:7d:68:5c:08:98:bf:58:e1:59:cb:a3:5b:63:87:09:
         9f:19:55:a9:e0:21:72:a9:53:78:cb:f0:43:ac:6e:13:d0:e5:
         0e:c4:a0:18:c1:bf:cd:40:93:82:6b:fd:51:01:9a:62:07:18:
         7c:62:69:6e:f6:1e:c3:44:62:89:3a:a3:2e:c6:c5:83:d5:57:
         7e:06:cb:b7:c3:82:d3:97:9e:70:45:61:1a:28:97:df:9d:54:
         4f:a6:ad:f0:e2:89:34:b5:e2:d2:41:04:1c:62:c6:54:41:80:
         6e:7f:db:17
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMyaLlVqkppwEr0EYCw/93SmCMWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBFNTk0NEI2MkE2RTlEN0VERTg2RkNCMTdCODgyMkMy
NDA0NjM5RjAeFw0yNTAyMDQxOTU2NTVaFw0yNjAyMDMyMDAxNTVaMDMxMTAvBgNV
BAMTKDVFQ0YzRDIyRkRCRTY5ODc5MDg4MERBQjJFN0FEQzEzMEEyRURDMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYhxaXudGEF9o/YXxqH1CO2lvT
we0+KmeyHc3Pz9iDoGeoaUQa281aKP87DZ3Rfpxr26KVTAERnZf2OkcfXZeNeTgF
X026Xk00C1lnFEw9pOByTpDjYiNi0iIXFPkYpGBjO28zs46rDtt9+Tb63p8Kl/n5
qP89cjDcl8QJ+89j93e8LZ9ZGw3gIVpKXaySTZjy2cIuqzWnLOROmqvKIsHdHe7e
HfB/b1EqgbSFoXb5l+O/sTbeGhlx0P3MmapfMCfaO3L1mJMbAbiRDcIN+9e6s01n
p84oyeXXxMILhSAJNdaSgVGEt+B5JZOZI6joB6u5oEwA1GTdlamg01YhUfcPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXs89Iv2+aYeQiA2rLnrcEwou3BswHwYDVR0j
BBgwFoAUEOWUS2Km6dft6G/LF7iCLCQEY58wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNjEyMzFGQzUzNDQ3QTc3NUI5QUFFQjUzNTQ1RjM3NkJD
OUIwNzhEM0EwREFBMkQ1QTU1MkVCQUZCRUM2NzUzLzAvMTBFNTk0NEI2MkE2RTlE
N0VERTg2RkNCMTdCODgyMkMyNDA0NjM5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMEU1OTQ0QjYyQTZFOUQ3RURF
ODZGQ0IxN0I4ODIyQzI0MDQ2MzlGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTYxMjMxRkM1MzQ0N0E3NzVCOUFBRUI1MzU0NUYzNzZCQzlCMDc4RDNB
MERBQTJENUE1NTJFQkFGQkVDNjc1My8wLzMyMzAzMTJlMzEzMzMxMmUzNzM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzczMzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyYNO
MA0GCSqGSIb3DQEBCwUAA4IBAQBhjaNx4rvld1w3vjRRcbv+vq+23A0SRgv4t+xw
LaRsGT666b9/XDy4zrWEwH0OtGShRnTl9UzQvnQHxJCQ/cxhkP6YrqmFY5V8Gf0e
MLE7irhhHeblsW992xStbhvyABxuHNqocinVm5Bu/Baxl5GhfGwVt4N/e8q7eERt
6YJDHVf82lFrsS9h7FHXJZdyao4LpeV9aFwImL9Y4VnLo1tjhwmfGVWp4CFyqVN4
y/BDrG4T0OUOxKAYwb/NQJOCa/1RAZpiBxh8Ymlu9h7DRGKJOqMuxsWD1Vd+Bsu3
w4LTl55wRWEaKJffnVRPpq3w4ok0teLSQQQcYsZUQYBuf9sX
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:06 2025 by rpki-client