Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/3230312e3138322e3234302e302f32322d3234203d3e20323730303039.roa
File:                     3230312e3138322e3234302e302f32322d3234203d3e20323730303039.roa (raw, json)
Hash identifier:          cqszXEknIiJFSucSbdnlUp2XXftact/b/c0yZyhLqvo=
Subject key identifier:   0C:07:5A:5A:55:7F:F1:9F:34:F7:7F:8D:B8:F4:2C:80:66:D3:05:D8
Certificate issuer:       /CN=E6A7505DAA0B511A5813C04388D52EC51B947806
Certificate serial:       37623D2C2593923DEA61E1CB5BC7BC96AD54A4B5
Authority key identifier: E6:A7:50:5D:AA:0B:51:1A:58:13:C0:43:88:D5:2E:C5:1B:94:78:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/3230312e3138322e3234302e302f32322d3234203d3e20323730303039.roa
Signing time:             Tue 11 Mar 2025 17:11:38 +0000
ROA not before:           Tue 11 Mar 2025 17:06:38 +0000
ROA not after:            Tue 10 Mar 2026 17:11:38 +0000
asID:                     270009
IP address blocks:        201.182.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.crl
                          rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:62:3d:2c:25:93:92:3d:ea:61:e1:cb:5b:c7:bc:96:ad:54:a4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A7505DAA0B511A5813C04388D52EC51B947806
        Validity
            Not Before: Mar 11 17:06:38 2025 GMT
            Not After : Mar 10 17:11:38 2026 GMT
        Subject: CN=0C075A5A557FF19F34F77F8DB8F42C8066D305D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:d2:f2:3f:29:b9:f5:6c:0a:c7:3a:6d:1c:
                    f9:35:c5:a3:97:6b:a8:ff:60:f7:b8:04:0f:7e:38:
                    94:d8:82:c8:ef:d2:b8:51:3a:bf:1a:c5:cf:d9:46:
                    2f:48:d3:58:d9:00:18:91:57:2c:69:de:b0:6b:b4:
                    ae:5f:4f:9d:e5:d3:1c:7f:37:8d:2e:66:de:d4:6b:
                    22:48:3e:21:38:11:5d:e3:78:69:48:ae:1b:e3:8e:
                    2d:6d:6b:8f:79:48:69:0e:e9:05:dd:94:97:6a:a6:
                    8b:6a:2f:30:d8:33:90:d4:1c:4a:83:15:d8:4d:c1:
                    bf:72:d9:2c:7a:7e:6f:bf:45:46:76:bc:4b:db:19:
                    4d:14:0b:51:a4:c0:1e:8b:04:39:a6:ed:33:45:81:
                    36:38:ca:20:82:28:c0:51:a1:86:87:0d:0c:26:9b:
                    d9:2e:cb:9a:74:83:cb:8f:07:7f:75:cf:9a:fb:fb:
                    05:a3:56:fa:ee:97:31:e0:96:fc:62:27:91:62:9d:
                    68:97:d3:6c:ff:7f:fe:df:59:98:a6:97:c0:ed:2a:
                    24:f8:17:89:44:25:36:2e:97:0d:1d:7a:a3:b5:1e:
                    a7:95:ca:75:16:70:06:2a:74:27:ef:4e:9c:f6:22:
                    0c:2d:92:15:2a:00:b2:1a:96:b6:03:46:95:a9:54:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:07:5A:5A:55:7F:F1:9F:34:F7:7F:8D:B8:F4:2C:80:66:D3:05:D8
            X509v3 Authority Key Identifier:
                keyid:E6:A7:50:5D:AA:0B:51:1A:58:13:C0:43:88:D5:2E:C5:1B:94:78:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/E6A7505DAA0B511A5813C04388D52EC51B947806.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6A7505DAA0B511A5813C04388D52EC51B947806.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241EB3D2ED1A9A6767DBEF726BBD16AF61F69F69A1174194C52FF620A19B0381/0/3230312e3138322e3234302e302f32322d3234203d3e20323730303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:f2:04:40:f4:db:39:b2:43:70:f2:7f:a7:3f:ad:58:1e:d9:
         ff:25:30:54:ff:62:80:4f:52:14:2f:0b:86:dd:77:b7:b4:7f:
         ad:60:2d:18:69:66:e4:0f:f2:2b:3b:21:d2:0f:eb:40:92:7b:
         d4:63:1e:30:8f:36:f8:42:fb:39:ba:32:9d:67:9e:71:04:14:
         d2:24:45:0b:bd:e4:4e:21:52:fd:53:83:2e:21:75:70:4b:80:
         63:09:96:ee:f6:55:f6:b1:36:72:a9:6b:82:a3:39:21:62:f8:
         ea:de:1c:6c:72:ee:00:61:7a:c3:40:d8:f1:23:d7:e4:f5:7f:
         2e:77:d0:f1:2e:20:39:bd:c8:04:88:54:ed:0e:52:66:52:41:
         3f:39:eb:c0:c2:c5:05:f8:d4:f8:33:f5:fc:8d:01:19:75:a4:
         fb:6e:97:f2:bd:d1:ed:eb:d1:69:1f:3f:fa:ae:2e:01:35:9c:
         ce:24:a6:0b:cd:3e:07:a2:a8:80:26:74:42:00:85:65:37:09:
         c7:17:8e:32:7a:72:ff:c4:93:0d:23:e0:2e:2e:61:76:de:60:
         52:4a:98:57:db:cf:9c:4f:10:9a:51:60:cb:0c:1a:45:1d:32:
         30:ef:70:7f:12:7a:22:d8:02:58:3b:7c:bc:a8:e5:ee:70:79:
         66:54:09:46
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUN2I9LCWTkj3qYeHLW8e8lq1UpLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZBNzUwNURBQTBCNTExQTU4MTNDMDQzODhENTJFQzUx
Qjk0NzgwNjAeFw0yNTAzMTExNzA2MzhaFw0yNjAzMTAxNzExMzhaMDMxMTAvBgNV
BAMTKDBDMDc1QTVBNTU3RkYxOUYzNEY3N0Y4REI4RjQyQzgwNjZEMzA1RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjdNLyPym59WwKxzptHPk1xaOX
a6j/YPe4BA9+OJTYgsjv0rhROr8axc/ZRi9I01jZABiRVyxp3rBrtK5fT53l0xx/
N40uZt7UayJIPiE4EV3jeGlIrhvjji1ta495SGkO6QXdlJdqpotqLzDYM5DUHEqD
FdhNwb9y2Sx6fm+/RUZ2vEvbGU0UC1GkwB6LBDmm7TNFgTY4yiCCKMBRoYaHDQwm
m9kuy5p0g8uPB391z5r7+wWjVvrulzHglvxiJ5FinWiX02z/f/7fWZiml8DtKiT4
F4lEJTYulw0deqO1HqeVynUWcAYqdCfvTpz2IgwtkhUqALIalrYDRpWpVJEBAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUDAdaWlV/8Z8093+NuPQsgGbTBdgwHwYDVR0j
BBgwFoAU5qdQXaoLURpYE8BDiNUuxRuUeAYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDFFQjNEMkVEMUE5QTY3NjdEQkVGNzI2QkJEMTZBRjYx
RjY5RjY5QTExNzQxOTRDNTJGRjYyMEExOUIwMzgxLzAvRTZBNzUwNURBQTBCNTEx
QTU4MTNDMDQzODhENTJFQzUxQjk0NzgwNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNkE3NTA1REFBMEI1MTFBNTgx
M0MwNDM4OEQ1MkVDNTFCOTQ3ODA2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQxRUIzRDJFRDFBOUE2NzY3REJFRjcyNkJCRDE2QUY2MUY2OUY2OUEx
MTc0MTk0QzUyRkY2MjBBMTlCMDM4MS8wLzMyMzAzMTJlMzEzODMyMmUzMjM0MzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAzMDMwMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALJ
tvAwDQYJKoZIhvcNAQELBQADggEBAFDyBED02zmyQ3Dyf6c/rVge2f8lMFT/YoBP
UhQvC4bdd7e0f61gLRhpZuQP8is7IdIP60CSe9RjHjCPNvhC+zm6Mp1nnnEEFNIk
RQu95E4hUv1Tgy4hdXBLgGMJlu72VfaxNnKpa4KjOSFi+OreHGxy7gBhesNA2PEj
1+T1fy530PEuIDm9yASIVO0OUmZSQT8568DCxQX41Pgz9fyNARl1pPtul/K90e3r
0WkfP/quLgE1nM4kpgvNPgeiqIAmdEIAhWU3CccXjjJ6cv/Ekw0j4C4uYXbeYFJK
mFfbz5xPEJpRYMsMGkUdMjDvcH8SeiLYAlg7fLyo5e5weWZUCUY=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:39:31 2025 by rpki-client