Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235342e302f32342d3234203d3e203631353532.roa
File:                     3133382e3230342e3235342e302f32342d3234203d3e203631353532.roa (raw, json)
Hash identifier:          ADuA3xOrncSpY+fOK2FLTMBY3T8bktuNnEVg4FyCNMA=
Subject key identifier:   C8:53:A3:0F:3A:49:96:97:81:A5:2C:18:FD:19:4E:98:0F:35:90:6A
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       7AB2AD113BAF38A2CD659AB9BA3C5DDEA381F929
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235342e302f32342d3234203d3e203631353532.roa
Signing time:             Tue 04 Feb 2025 18:35:08 +0000
ROA not before:           Tue 04 Feb 2025 18:30:08 +0000
ROA not after:            Tue 03 Feb 2026 18:35:08 +0000
asID:                     61552
IP address blocks:        138.204.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b2:ad:11:3b:af:38:a2:cd:65:9a:b9:ba:3c:5d:de:a3:81:f9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:08 2025 GMT
            Not After : Feb  3 18:35:08 2026 GMT
        Subject: CN=C853A30F3A49969781A52C18FD194E980F35906A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:05:5e:65:49:17:2b:bf:81:4a:1c:72:01:
                    31:62:55:88:9a:f8:c8:41:59:9c:e0:34:4b:87:ae:
                    18:7d:20:16:34:fc:75:a1:8d:8b:4f:b6:1b:93:ec:
                    69:94:c8:e1:7f:ae:84:9b:7e:8f:9c:2d:97:5f:9f:
                    79:0f:ca:ea:ee:6c:7c:ab:20:5a:16:39:2b:a6:9b:
                    7f:bf:cc:d2:b8:3a:3c:ab:05:b6:fe:2b:3e:7c:ed:
                    eb:d8:e1:57:df:20:3a:cd:f2:fa:63:a3:9d:6c:ee:
                    94:f1:4e:eb:b7:bf:87:1c:f3:34:be:88:e1:ef:61:
                    8b:dc:10:d6:19:54:08:a2:60:cb:cb:e7:e8:27:ca:
                    68:92:ed:f3:a3:dc:18:1b:51:5e:e6:f3:b5:64:c2:
                    99:9a:05:ba:85:13:a9:e6:27:d0:69:d1:f5:b4:42:
                    b9:7e:ee:c8:bb:57:68:be:26:6b:b1:85:31:91:b6:
                    d8:41:5d:4f:09:7b:1a:ac:52:44:57:d4:0e:82:9f:
                    41:11:31:3f:b5:37:fc:92:c9:1a:fe:7f:bb:1a:9f:
                    e3:69:38:82:71:d6:c2:e1:1c:af:97:01:be:a2:f4:
                    1e:39:fe:b2:2e:b3:75:52:9a:d6:6d:20:27:f8:d1:
                    9d:0c:cd:d0:d7:13:f8:15:f0:25:da:2c:76:d1:16:
                    5f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:53:A3:0F:3A:49:96:97:81:A5:2C:18:FD:19:4E:98:0F:35:90:6A
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235342e302f32342d3234203d3e203631353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e4:a9:97:41:c7:11:a7:ad:82:22:4d:71:5d:4a:59:94:ac:
         d2:fe:bd:e8:d0:5a:96:1a:c6:d8:3f:20:bb:dc:66:42:6c:a1:
         c9:8c:64:96:e1:42:78:3b:4d:36:7f:69:76:54:0d:dd:ab:09:
         79:7c:28:1a:0c:8d:b7:16:22:0b:66:4e:0e:a2:bb:3b:f9:b6:
         40:ba:b0:2c:80:3e:39:a6:62:37:00:f5:48:2b:d5:07:25:2f:
         71:9e:0b:a8:be:1a:19:6c:af:e5:2e:d7:11:ba:4a:b7:1a:d1:
         eb:12:42:3b:66:92:4f:44:2a:9f:d8:2f:7a:d9:44:64:dc:12:
         bc:58:dd:95:f0:04:43:74:11:6e:c8:ae:25:97:78:4d:18:5a:
         6d:48:aa:1c:70:27:81:a9:74:a0:1f:0b:60:9f:3e:5f:74:25:
         1d:cb:43:dd:a9:7a:97:a2:cf:8b:f6:48:c8:87:51:e8:a3:db:
         e1:73:90:dc:ee:21:ee:f7:36:90:1a:2d:ff:8c:d5:c8:c0:9f:
         83:2a:cf:35:71:45:c5:5e:43:4b:90:7e:48:e7:13:5f:98:41:
         4b:7a:14:f7:c0:17:54:54:34:8d:e8:fa:44:4a:73:87:02:6f:
         70:38:6e:2c:10:85:8e:5b:3b:59:60:a6:3b:77:a9:f6:e1:45:
         31:cc:0f:7c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUerKtETuvOKLNZZq5ujxd3qOB+SkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNTAyMDQxODMwMDhaFw0yNjAyMDMxODM1MDhaMDMxMTAvBgNV
BAMTKEM4NTNBMzBGM0E0OTk2OTc4MUE1MkMxOEZEMTk0RTk4MEYzNTkwNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdpQVeZUkXK7+BShxyATFiVYia
+MhBWZzgNEuHrhh9IBY0/HWhjYtPthuT7GmUyOF/roSbfo+cLZdfn3kPyurubHyr
IFoWOSumm3+/zNK4OjyrBbb+Kz587evY4VffIDrN8vpjo51s7pTxTuu3v4cc8zS+
iOHvYYvcENYZVAiiYMvL5+gnymiS7fOj3BgbUV7m87VkwpmaBbqFE6nmJ9Bp0fW0
Qrl+7si7V2i+JmuxhTGRtthBXU8JexqsUkRX1A6Cn0ERMT+1N/ySyRr+f7san+Np
OIJx1sLhHK+XAb6i9B45/rIus3VSmtZtICf40Z0MzdDXE/gV8CXaLHbRFl8TAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUyFOjDzpJlpeBpSwY/RlOmA81kGowHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMxMzMzODJlMzIzMDM0MmUzMjM1MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzUzNTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAisz+
MA0GCSqGSIb3DQEBCwUAA4IBAQBj5KmXQccRp62CIk1xXUpZlKzS/r3o0FqWGsbY
PyC73GZCbKHJjGSW4UJ4O002f2l2VA3dqwl5fCgaDI23FiILZk4Oors7+bZAurAs
gD45pmI3APVIK9UHJS9xnguovhoZbK/lLtcRukq3GtHrEkI7ZpJPRCqf2C962URk
3BK8WN2V8ARDdBFuyK4ll3hNGFptSKoccCeBqXSgHwtgnz5fdCUdy0PdqXqXos+L
9kjIh1Hoo9vhc5Dc7iHu9zaQGi3/jNXIwJ+DKs81cUXFXkNLkH5I5xNfmEFLehT3
wBdUVDSN6PpESnOHAm9wOG4sEIWOWztZYKY7d6n24UUxzA98
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:36 2025 by rpki-client