Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133392e302f32342d3234203d3e203532353039.roa
File:                     3230312e3138322e3133392e302f32342d3234203d3e203532353039.roa (raw, json)
Hash identifier:          iKpoS5C9z0/hAMUTnu9uyaFKUOmHjRR9hmuzhjsSXTQ=
Subject key identifier:   86:9C:11:96:81:ED:55:08:EE:69:34:C1:D8:8E:F0:DA:48:A5:23:41
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       184C86C4A33F125E28FCB00DCA4C5290D9368ADC
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133392e302f32342d3234203d3e203532353039.roa
Signing time:             Tue 04 Feb 2025 18:35:24 +0000
ROA not before:           Tue 04 Feb 2025 18:30:24 +0000
ROA not after:            Tue 03 Feb 2026 18:35:24 +0000
asID:                     52509
IP address blocks:        201.182.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4c:86:c4:a3:3f:12:5e:28:fc:b0:0d:ca:4c:52:90:d9:36:8a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:24 2025 GMT
            Not After : Feb  3 18:35:24 2026 GMT
        Subject: CN=869C119681ED5508EE6934C1D88EF0DA48A52341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8a:53:67:5a:a9:10:34:e4:cb:7c:98:9c:12:
                    3f:ab:2a:de:ae:df:8d:22:12:0e:52:c9:4b:2c:a1:
                    0b:73:05:21:69:f4:c3:c4:74:35:33:5a:f6:95:32:
                    d7:16:ff:5a:1d:15:5e:d1:73:3b:bc:42:2e:b0:c5:
                    ce:39:c7:80:d7:e9:bc:18:a3:fc:4c:8b:6c:03:e4:
                    4c:2b:b5:e3:a1:33:39:e6:6d:19:8d:1e:38:3b:1c:
                    da:d9:13:0f:d1:05:37:13:51:dc:72:fe:b2:55:c1:
                    77:71:7d:65:e0:64:6d:57:7c:ac:3e:83:2b:6c:ee:
                    b1:96:6c:d4:02:17:7d:a7:e1:28:d2:14:53:0f:ae:
                    f5:49:45:77:a6:79:de:c4:67:d2:5b:90:a7:b1:ad:
                    fa:56:d9:36:cf:86:b9:58:57:94:35:cf:12:b0:ac:
                    cf:a2:84:7a:2a:b4:bb:97:02:64:09:ac:f9:c6:d7:
                    a6:ca:ab:7f:00:a6:b4:b0:ce:ca:b5:ec:1f:dd:66:
                    74:19:71:05:b7:c3:38:69:55:16:bc:78:a8:e8:9a:
                    d0:82:76:a3:46:c2:64:f9:29:34:28:fe:04:3f:0b:
                    b7:26:09:a7:13:3b:86:82:b2:47:fa:07:15:4f:3d:
                    fc:89:c2:d4:8c:18:2d:38:25:0c:26:54:1c:e7:4c:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9C:11:96:81:ED:55:08:EE:69:34:C1:D8:8E:F0:DA:48:A5:23:41
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133392e302f32342d3234203d3e203532353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:19:ac:12:b1:f9:a8:c7:6e:11:78:3f:e6:3a:30:0a:b0:6d:
         4c:85:2f:c7:08:3a:55:11:26:db:80:50:e4:58:23:52:01:7b:
         35:e7:55:f0:ad:9d:2d:b4:97:54:b7:56:5c:24:b2:0f:62:d1:
         28:f7:d6:f4:77:69:d7:8c:1d:b6:9d:46:f3:cd:03:59:79:7a:
         df:20:a5:65:18:7c:3e:fc:81:42:55:4c:22:ae:0d:49:b2:85:
         e4:eb:25:8a:89:b0:ef:52:1e:3c:d9:54:b7:eb:29:56:22:88:
         9e:21:bb:2b:4f:f4:6f:4d:94:26:7a:6e:6d:96:c2:bb:c1:c0:
         55:fd:df:45:cf:3b:00:33:88:a5:c8:a7:72:50:11:a8:c1:cb:
         a1:c6:12:b8:f2:13:14:da:55:dc:f9:97:27:48:2f:bb:48:d1:
         27:c4:7a:13:24:f5:e0:f5:b1:19:24:8d:9d:c8:4c:42:88:c7:
         4c:8b:c1:ea:51:ba:46:de:10:bf:83:52:d1:e3:5c:86:fb:24:
         f0:42:58:c8:10:13:4f:6c:6f:3e:50:70:cc:47:1c:36:35:07:
         b8:1a:68:47:58:2b:6a:d7:d4:10:bd:f2:1d:79:65:0b:eb:f4:
         f1:ba:f9:6f:87:52:14:f9:9e:57:3b:67:86:64:d2:40:ae:5a:
         ff:5c:0c:d0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGEyGxKM/El4o/LANykxSkNk2itwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNTAyMDQxODMwMjRaFw0yNjAyMDMxODM1MjRaMDMxMTAvBgNV
BAMTKDg2OUMxMTk2ODFFRDU1MDhFRTY5MzRDMUQ4OEVGMERBNDhBNTIzNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkilNnWqkQNOTLfJicEj+rKt6u
340iEg5SyUssoQtzBSFp9MPEdDUzWvaVMtcW/1odFV7Rczu8Qi6wxc45x4DX6bwY
o/xMi2wD5EwrteOhMznmbRmNHjg7HNrZEw/RBTcTUdxy/rJVwXdxfWXgZG1XfKw+
gyts7rGWbNQCF32n4SjSFFMPrvVJRXemed7EZ9JbkKexrfpW2TbPhrlYV5Q1zxKw
rM+ihHoqtLuXAmQJrPnG16bKq38AprSwzsq17B/dZnQZcQW3wzhpVRa8eKjomtCC
dqNGwmT5KTQo/gQ/C7cmCacTO4aCskf6BxVPPfyJwtSMGC04JQwmVBznTAS3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhpwRloHtVQjuaTTB2I7w2kilI0EwHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMyMzAzMTJlMzEzODMyMmUzMTMzMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUzMDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAybaL
MA0GCSqGSIb3DQEBCwUAA4IBAQDKGawSsfmox24ReD/mOjAKsG1MhS/HCDpVESbb
gFDkWCNSAXs151XwrZ0ttJdUt1ZcJLIPYtEo99b0d2nXjB22nUbzzQNZeXrfIKVl
GHw+/IFCVUwirg1JsoXk6yWKibDvUh482VS36ylWIoieIbsrT/RvTZQmem5tlsK7
wcBV/d9FzzsAM4ilyKdyUBGowcuhxhK48hMU2lXc+ZcnSC+7SNEnxHoTJPXg9bEZ
JI2dyExCiMdMi8HqUbpG3hC/g1LR41yG+yTwQljIEBNPbG8+UHDMRxw2NQe4GmhH
WCtq19QQvfIdeWUL6/Txuvlvh1IU+Z5XO2eGZNJArlr/XAzQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:11 2025 by rpki-client