Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e382e302f32312d3231203d3e203233313430.roa
File:                     3134362e38332e382e302f32312d3231203d3e203233313430.roa (raw, json)
Hash identifier:          H9PrZH8B+f/QjK/+5j1xQtgmRypONp9KqLuV11BrOng=
Subject key identifier:   D9:66:0F:57:AA:EB:A2:8A:64:D8:3F:E4:6A:54:C1:C4:68:D0:01:ED
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       4CCCD21570FC8513126DC01EF521C2E7C373B7D9
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e382e302f32312d3231203d3e203233313430.roa
Signing time:             Tue 04 Feb 2025 18:09:49 +0000
ROA not before:           Tue 04 Feb 2025 18:04:49 +0000
ROA not after:            Tue 03 Feb 2026 18:09:49 +0000
asID:                     23140
IP address blocks:        146.83.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:cc:d2:15:70:fc:85:13:12:6d:c0:1e:f5:21:c2:e7:c3:73:b7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Feb  4 18:04:49 2025 GMT
            Not After : Feb  3 18:09:49 2026 GMT
        Subject: CN=D9660F57AAEBA28A64D83FE46A54C1C468D001ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:b5:3f:e2:bd:d0:3a:18:e7:8a:f6:b3:80:
                    8e:54:19:8f:30:d0:d9:a5:e2:f1:27:14:95:c3:66:
                    42:33:32:5b:1c:e0:97:8d:24:f5:37:28:01:ef:52:
                    40:62:f9:45:28:2d:cf:a5:90:52:ad:45:be:9c:78:
                    21:0c:a7:80:12:08:f4:73:ae:67:f8:97:ad:8f:c2:
                    35:93:b9:04:61:8c:bf:a3:db:d3:2c:b7:1e:f2:f1:
                    98:60:bc:64:b1:90:66:ce:b0:8a:d4:c2:15:ef:76:
                    cc:b7:be:f9:d4:8d:75:74:1c:09:cc:fc:12:ae:5d:
                    16:d4:ad:32:74:33:bf:46:04:47:2d:03:cf:6e:94:
                    6a:62:c9:e0:a5:a8:e0:56:c4:d6:ea:d5:bd:3c:4e:
                    20:0e:d4:2b:79:5a:42:a0:e7:f7:91:8d:f1:a2:ae:
                    3a:cd:4c:fb:2f:91:ce:ec:64:a4:c0:32:d7:f2:6a:
                    bb:93:d4:19:c8:1d:68:28:17:db:8f:90:fd:bb:12:
                    40:4e:1e:de:3f:72:a0:c9:04:71:bc:3d:2d:46:50:
                    b4:1c:1c:64:c6:69:8a:ee:aa:ec:45:9a:f0:91:8e:
                    39:ca:55:42:80:01:2a:bb:02:e1:ca:80:5b:a4:4f:
                    d8:5e:8d:09:07:81:4f:83:8a:73:70:23:0a:d6:20:
                    33:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:66:0F:57:AA:EB:A2:8A:64:D8:3F:E4:6A:54:C1:C4:68:D0:01:ED
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e382e302f32312d3231203d3e203233313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:c3:a7:d9:15:bb:3d:3b:e0:73:dc:80:5f:1b:5d:f5:e9:fd:
         2d:fe:33:68:50:21:5c:31:7c:6a:cc:4d:f4:bb:6c:7f:dd:84:
         a9:52:1b:fd:36:f7:8d:3a:e2:d5:64:88:78:1e:a3:05:7b:19:
         0c:39:b9:cc:0a:9b:84:16:e9:87:64:48:cb:87:fa:38:f3:15:
         bf:62:de:c7:43:ba:b3:21:0a:b2:07:9c:76:72:04:70:1e:b2:
         e8:85:ea:9b:f1:ae:92:e7:0f:ef:ab:1e:03:42:09:a8:9d:84:
         f9:d6:b0:de:1d:f1:15:a5:80:0f:33:97:5a:6c:80:7a:e6:4f:
         77:8b:2d:51:d0:cd:b5:80:f8:66:30:8d:00:34:d7:b2:05:f3:
         da:ab:56:1b:9a:80:95:c1:ed:f8:0d:f7:e8:94:bd:0c:5e:99:
         4f:8b:3b:a9:e3:e6:d6:81:fb:55:72:31:2f:0a:7f:73:23:92:
         1f:88:63:86:db:80:f6:20:02:83:f0:e6:94:30:0f:c4:83:d1:
         1d:6f:1d:db:bd:98:dc:f2:d3:ce:2f:cf:1c:18:94:6b:63:d7:
         ee:09:04:2d:1b:c8:79:0e:04:1a:08:62:ba:c4:3c:30:05:5b:
         c1:68:1f:11:5f:24:05:91:1e:10:f2:8e:64:32:a9:31:ea:5e:
         58:ce:b9:03
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUTMzSFXD8hRMSbcAe9SHC58Nzt9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFFNEVGQTk3NUIwNDI0OEU3MjE4QTNCQ0NGNEY3QzNE
QjlENjkxMDAeFw0yNTAyMDQxODA0NDlaFw0yNjAyMDMxODA5NDlaMDMxMTAvBgNV
BAMTKEQ5NjYwRjU3QUFFQkEyOEE2NEQ4M0ZFNDZBNTRDMUM0NjhEMDAxRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0rU/4r3QOhjnivazgI5UGY8w
0Nml4vEnFJXDZkIzMlsc4JeNJPU3KAHvUkBi+UUoLc+lkFKtRb6ceCEMp4ASCPRz
rmf4l62PwjWTuQRhjL+j29Mstx7y8ZhgvGSxkGbOsIrUwhXvdsy3vvnUjXV0HAnM
/BKuXRbUrTJ0M79GBEctA89ulGpiyeClqOBWxNbq1b08TiAO1Ct5WkKg5/eRjfGi
rjrNTPsvkc7sZKTAMtfyaruT1BnIHWgoF9uPkP27EkBOHt4/cqDJBHG8PS1GULQc
HGTGaYruquxFmvCRjjnKVUKAASq7AuHKgFukT9hejQkHgU+DinNwIwrWIDMpAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU2WYPV6rroopk2D/kalTBxGjQAe0wHwYDVR0j
BBgwFoAUGuTvqXWwQkjnIYo7zPT3w9udaRAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzRGNTJEQTIyMEMwMkNEN0JFRjAxODJCRTBENEJEN0U0
QTE0MEZEODA1RjFDNzVBRURCNzhDNTFDNTA1NUE0LzAvMUFFNEVGQTk3NUIwNDI0
OEU3MjE4QTNCQ0NGNEY3QzNEQjlENjkxMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQUU0RUZBOTc1QjA0MjQ4RTcy
MThBM0JDQ0Y0RjdDM0RCOUQ2OTEwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUM0RjUyREEyMjBDMDJDRDdCRUYwMTgyQkUwRDRCRDdFNEExNDBGRDgw
NUYxQzc1QUVEQjc4QzUxQzUwNTVBNC8wLzMxMzQzNjJlMzgzMzJlMzgyZTMwMmYz
MjMxMmQzMjMxMjAzZDNlMjAzMjMzMzEzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDklMIMA0GCSqG
SIb3DQEBCwUAA4IBAQC0w6fZFbs9O+Bz3IBfG1316f0t/jNoUCFcMXxqzE30u2x/
3YSpUhv9NveNOuLVZIh4HqMFexkMObnMCpuEFumHZEjLh/o48xW/Yt7HQ7qzIQqy
B5x2cgRwHrLoheqb8a6S5w/vqx4DQgmonYT51rDeHfEVpYAPM5dabIB65k93iy1R
0M21gPhmMI0ANNeyBfPaq1YbmoCVwe34DffolL0MXplPizup4+bWgftVcjEvCn9z
I5IfiGOG24D2IAKD8OaUMA/Eg9Edbx3bvZjc8tPOL88cGJRrY9fuCQQtG8h5DgQa
CGK6xDwwBVvBaB8RXyQFkR4Q8o5kMqkx6l5YzrkD
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:50 2025 by rpki-client