Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e3230342e302e302f31362d3136203d3e2038303635.roa
File:                     3138312e3230342e302e302f31362d3136203d3e2038303635.roa (raw, json)
Hash identifier:          FOgIO9WCm4A9RifDGSi/dG2CEUPjklASthwjaObOEig=
Subject key identifier:   66:8A:37:5E:E6:DF:B5:7F:DB:12:FD:85:C4:89:5A:ED:68:2A:C6:D1
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       16190521954AFCEE7B2659C527D9041A9B58105B
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e3230342e302e302f31362d3136203d3e2038303635.roa
Signing time:             Tue 04 Feb 2025 18:22:33 +0000
ROA not before:           Tue 04 Feb 2025 18:17:33 +0000
ROA not after:            Tue 03 Feb 2026 18:22:33 +0000
asID:                     8065
IP address blocks:        181.204.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:19:05:21:95:4a:fc:ee:7b:26:59:c5:27:d9:04:1a:9b:58:10:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Feb  4 18:17:33 2025 GMT
            Not After : Feb  3 18:22:33 2026 GMT
        Subject: CN=668A375EE6DFB57FDB12FD85C4895AED682AC6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:49:70:fb:cb:e3:91:45:2c:80:2c:46:fe:
                    99:fa:30:94:f5:eb:60:2b:e2:f2:24:52:5d:00:30:
                    1b:14:25:ce:00:3b:48:a7:e2:9d:68:89:5e:dc:8f:
                    88:5f:b4:11:00:77:d2:61:c9:8a:2c:5b:2d:67:ec:
                    3c:37:22:2a:29:d7:3a:8f:82:93:92:3a:b9:d2:9f:
                    e7:cf:4f:06:ce:a3:ca:7c:83:0e:03:6c:54:5b:68:
                    92:ff:a9:5c:c3:d4:3e:4e:91:bb:4e:28:7d:8b:ff:
                    5d:c6:ab:00:7d:d1:38:33:35:c8:65:c5:3a:79:3e:
                    c0:71:c9:f8:29:4b:88:8c:7c:e9:83:0d:93:33:4d:
                    7e:60:5f:68:13:1d:83:49:fb:93:0f:41:b3:ec:8f:
                    7e:e4:d2:11:ef:90:66:e7:be:7f:45:45:b2:1a:e4:
                    70:58:a0:bc:d7:e7:c9:34:99:c8:95:f7:9b:c9:44:
                    be:24:69:35:f6:bb:00:86:6a:b1:88:99:b9:83:6e:
                    e4:8f:b6:2d:18:41:ba:34:72:5e:45:a9:2c:fa:d7:
                    10:d1:fe:f2:bb:82:11:6a:18:ac:20:c6:26:5f:35:
                    49:6b:ce:a4:d6:a8:e5:42:5d:df:14:22:60:9e:3b:
                    30:ff:4a:4a:5c:a1:06:5e:4b:ef:4b:15:3a:d0:51:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8A:37:5E:E6:DF:B5:7F:DB:12:FD:85:C4:89:5A:ED:68:2A:C6:D1
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e3230342e302e302f31362d3136203d3e2038303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.204.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d5:9a:f4:bd:4e:b1:14:bd:03:f0:f8:49:40:4a:e7:25:6d:c8:
         d2:9e:02:87:dc:cf:05:7a:21:fe:d7:e3:23:6b:e7:9a:11:5f:
         9f:0d:56:a0:75:c8:56:02:2b:60:a2:12:ca:00:fa:09:1c:f9:
         ef:5a:61:a9:46:2a:85:01:89:72:25:37:00:b3:53:b8:24:2a:
         aa:c0:6c:f4:1b:65:12:cf:0d:cc:e3:aa:2e:ff:1d:de:b6:a5:
         27:f2:0f:b4:58:15:c2:17:6d:6e:5c:bd:c9:2a:49:30:93:92:
         f0:e5:a0:3e:41:45:82:ed:99:5e:e9:bf:f4:32:57:27:00:4f:
         c3:ab:5b:e0:c7:84:1f:83:e9:c9:41:77:a3:22:53:45:3a:4a:
         1f:2d:5b:42:4d:73:bd:9c:9e:f4:ee:1a:fb:9a:fb:21:f6:ad:
         85:ee:70:a5:62:e4:8d:1c:b7:86:c5:7a:7c:eb:b7:30:4c:ad:
         a0:56:0e:22:55:8d:b3:a9:b6:36:d3:0b:83:aa:17:64:b6:58:
         be:59:04:6d:bf:66:b5:02:f5:4a:78:31:75:7f:45:d3:8c:ab:
         03:58:f9:9f:6c:8f:c2:10:c5:47:04:a2:72:6f:2a:e0:26:4b:
         06:8a:78:32:d4:71:70:3c:60:88:d0:2a:f4:ca:4c:95:bc:6a:
         6c:50:82:59
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUFhkFIZVK/O57JlnFJ9kEGptYEFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y0MjZGNjU3QzlENkJGNjcyOEI1RDgwQjREMDNGRTI0
NUJDRDk3RTAeFw0yNTAyMDQxODE3MzNaFw0yNjAyMDMxODIyMzNaMDMxMTAvBgNV
BAMTKDY2OEEzNzVFRTZERkI1N0ZEQjEyRkQ4NUM0ODk1QUVENjgyQUM2RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qElw+8vjkUUsgCxG/pn6MJT1
62Ar4vIkUl0AMBsUJc4AO0in4p1oiV7cj4hftBEAd9JhyYosWy1n7Dw3Iiop1zqP
gpOSOrnSn+fPTwbOo8p8gw4DbFRbaJL/qVzD1D5OkbtOKH2L/13GqwB90TgzNchl
xTp5PsBxyfgpS4iMfOmDDZMzTX5gX2gTHYNJ+5MPQbPsj37k0hHvkGbnvn9FRbIa
5HBYoLzX58k0mciV95vJRL4kaTX2uwCGarGImbmDbuSPti0YQbo0cl5FqSz61xDR
/vK7ghFqGKwgxiZfNUlrzqTWqOVCXd8UImCeOzD/SkpcoQZeS+9LFTrQUX0XAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUZoo3XubftX/bEv2FxIla7WgqxtEwHwYDVR0j
BBgwFoAUP0JvZXyda/Zyi12AtNA/4kW82X4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0JFRTc5MkEyRDk3ODlGMjY5NDBDNEZBNUFEMDJBMkVG
MTlFRENBNjk2ODI4QTgxOEIwNUQyRUZFODBCNjVGLzAvM0Y0MjZGNjU3QzlENkJG
NjcyOEI1RDgwQjREMDNGRTI0NUJDRDk3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjQyNkY2NTdDOUQ2QkY2NzI4
QjVEODBCNEQwM0ZFMjQ1QkNEOTdFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNCRUU3OTJBMkQ5Nzg5RjI2OTQwQzRGQTVBRDAyQTJFRjE5RURDQTY5
NjgyOEE4MThCMDVEMkVGRTgwQjY1Ri8wLzMxMzgzMTJlMzIzMDM0MmUzMDJlMzAy
ZjMxMzYyZDMxMzYyMDNkM2UyMDM4MzAzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAtcwwDQYJKoZI
hvcNAQELBQADggEBANWa9L1OsRS9A/D4SUBK5yVtyNKeAofczwV6If7X4yNr55oR
X58NVqB1yFYCK2CiEsoA+gkc+e9aYalGKoUBiXIlNwCzU7gkKqrAbPQbZRLPDczj
qi7/Hd62pSfyD7RYFcIXbW5cvckqSTCTkvDloD5BRYLtmV7pv/QyVycAT8OrW+DH
hB+D6clBd6MiU0U6Sh8tW0JNc72cnvTuGvua+yH2rYXucKVi5I0ct4bFenzrtzBM
raBWDiJVjbOptjbTC4OqF2S2WL5ZBG2/ZrUC9Up4MXV/RdOMqwNY+Z9sj8IQxUcE
onJvKuAmSwaKeDLUcXA8YIjQKvTKTJW8amxQglk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:43 2025 by rpki-client