Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e2033333536.roa
File:                     3134332e3230322e3235322e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          cLb7EIcBKanzOdKKa1wifGKEOLnjvGcu/bGHpHRNBPQ=
Subject key identifier:   53:D1:F5:D9:CE:AF:9B:F2:62:DD:29:EB:1A:3E:52:19:B9:AB:36:E8
Certificate issuer:       /CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
Certificate serial:       6808477BF4AD5D420D79D3B6592CC083C46B0C28
Authority key identifier: 92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e2033333536.roa
Signing time:             Tue 20 May 2025 21:10:00 +0000
ROA not before:           Tue 20 May 2025 21:05:00 +0000
ROA not after:            Tue 19 May 2026 21:10:00 +0000
asID:                     3356
IP address blocks:        143.202.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 04:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:08:47:7b:f4:ad:5d:42:0d:79:d3:b6:59:2c:c0:83:c4:6b:0c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
        Validity
            Not Before: May 20 21:05:00 2025 GMT
            Not After : May 19 21:10:00 2026 GMT
        Subject: CN=53D1F5D9CEAF9BF262DD29EB1A3E5219B9AB36E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9b:d0:94:45:5f:e5:1e:2e:92:fe:97:c7:39:
                    48:45:3e:1c:93:10:de:8f:64:86:7b:66:20:25:b7:
                    de:fb:76:9d:cb:d6:ad:fb:5b:1c:d0:30:d7:b7:09:
                    2e:d1:9e:dd:fe:63:33:81:64:15:f2:b9:0b:58:4a:
                    72:39:51:8f:d1:f0:54:0f:5d:b5:fe:16:66:a9:39:
                    14:01:9d:29:89:fb:ab:83:da:95:0b:30:11:a7:7b:
                    ae:39:1c:36:e5:52:57:c8:b8:2f:54:ce:9c:86:62:
                    d5:1e:a9:97:13:d2:05:ee:c3:86:48:cc:0c:3b:7f:
                    d5:d7:73:df:01:57:4f:60:c3:df:bc:55:37:3a:ec:
                    34:01:7f:51:64:31:01:a1:32:fd:f6:c3:d2:44:33:
                    f4:c3:50:6e:f5:f8:0c:34:d1:96:95:a4:81:33:2c:
                    3c:cd:07:12:55:ac:2f:5a:05:d7:47:75:7f:6f:9a:
                    90:0f:ba:b9:92:91:2a:d8:c8:43:9a:13:36:3e:06:
                    ea:c1:0b:20:0c:1d:cd:48:8e:cc:59:a8:6a:4e:ac:
                    97:2a:15:80:57:0e:9f:b2:15:c0:7e:02:26:4a:4f:
                    59:c4:a7:04:7d:a3:f3:df:8f:ea:3e:34:1e:75:1b:
                    33:90:c3:0b:05:05:61:65:32:17:92:44:0b:53:56:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D1:F5:D9:CE:AF:9B:F2:62:DD:29:EB:1A:3E:52:19:B9:AB:36:E8
            X509v3 Authority Key Identifier:
                keyid:92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/3134332e3230322e3235322e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:63:a9:e9:51:7e:5c:ad:99:c9:6d:56:20:69:68:25:27:e5:
         29:e9:1f:ff:80:49:55:d0:4d:c5:22:49:e7:b6:36:a8:d4:93:
         e1:6d:9e:ae:ac:42:e5:91:a8:42:aa:78:e1:4d:2e:06:19:5f:
         50:2a:70:16:3f:04:4c:a6:ea:07:aa:87:9d:89:66:28:5c:ba:
         51:3f:52:52:5d:c7:96:37:3a:3a:5a:a7:1c:2e:41:d7:da:ac:
         8e:bf:eb:8a:4f:ad:d5:af:80:58:98:ff:6b:e2:5b:42:ca:f1:
         ec:86:8a:79:d1:1d:84:a0:19:84:8e:39:12:af:8b:29:03:92:
         ec:d7:8d:bb:ff:3a:75:d9:d4:e6:d5:d0:82:52:68:d8:01:a4:
         c1:3c:20:4e:6d:06:0c:91:f0:b6:91:d1:a8:c1:c5:15:08:04:
         f2:77:5f:7a:ac:5f:7c:1b:35:ca:99:f9:f9:48:38:cf:87:12:
         d0:7b:39:f5:d8:52:d3:7a:6a:d1:81:b4:d7:3b:6a:e2:e1:15:
         28:df:7d:c9:c7:4e:64:c1:73:dc:f8:19:f8:e0:e7:f1:ad:7a:
         b4:96:65:48:3c:60:50:77:6e:a0:25:a8:e3:f9:e1:4a:d1:a1:
         2e:7b:10:9d:eb:72:3e:e0:dc:c0:1e:28:e5:40:a5:35:df:36:
         67:55:df:ed
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaAhHe/StXUINedO2WSzAg8RrDCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI4RjJBODg2MTRDNjEyMkMyNTUxMEY3QTMzNjJDQjhG
NDhDRUZCMzAeFw0yNTA1MjAyMTA1MDBaFw0yNjA1MTkyMTEwMDBaMDMxMTAvBgNV
BAMTKDUzRDFGNUQ5Q0VBRjlCRjI2MkREMjlFQjFBM0U1MjE5QjlBQjM2RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqm9CURV/lHi6S/pfHOUhFPhyT
EN6PZIZ7ZiAlt977dp3L1q37WxzQMNe3CS7Rnt3+YzOBZBXyuQtYSnI5UY/R8FQP
XbX+FmapORQBnSmJ+6uD2pULMBGne645HDblUlfIuC9UzpyGYtUeqZcT0gXuw4ZI
zAw7f9XXc98BV09gw9+8VTc67DQBf1FkMQGhMv32w9JEM/TDUG71+Aw00ZaVpIEz
LDzNBxJVrC9aBddHdX9vmpAPurmSkSrYyEOaEzY+BurBCyAMHc1IjsxZqGpOrJcq
FYBXDp+yFcB+AiZKT1nEpwR9o/Pfj+o+NB51GzOQwwsFBWFlMheSRAtTVpd3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUU9H12c6vm/Ji3SnrGj5SGbmrNugwHwYDVR0j
BBgwFoAUko8qiGFMYSLCVRD3ozYsuPSM77MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRjYwMUI1QTNFQ0FFOTY4NkE0RThDMzVCRDlCODM4OTg5
REY4MUY3NDY2Q0Q4ODA4NjNFQjk4OTY5RDFCQzFFLzAvOTI4RjJBODg2MTRDNjEy
MkMyNTUxMEY3QTMzNjJDQjhGNDhDRUZCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjhGMkE4ODYxNEM2MTIyQzI1
NTEwRjdBMzM2MkNCOEY0OENFRkIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkY2MDFCNUEzRUNBRTk2ODZBNEU4QzM1QkQ5QjgzODk4OURGODFGNzQ2
NkNEODgwODYzRUI5ODk2OUQxQkMxRS8wLzMxMzQzMzJlMzIzMDMyMmUzMjM1MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/K/DAN
BgkqhkiG9w0BAQsFAAOCAQEAimOp6VF+XK2ZyW1WIGloJSflKekf/4BJVdBNxSJJ
57Y2qNST4W2erqxC5ZGoQqp44U0uBhlfUCpwFj8ETKbqB6qHnYlmKFy6UT9SUl3H
ljc6OlqnHC5B19qsjr/rik+t1a+AWJj/a+JbQsrx7IaKedEdhKAZhI45Eq+LKQOS
7NeNu/86ddnU5tXQglJo2AGkwTwgTm0GDJHwtpHRqMHFFQgE8ndfeqxffBs1ypn5
+Ug4z4cS0Hs59dhS03pq0YG01ztq4uEVKN99ycdOZMFz3PgZ+ODn8a16tJZlSDxg
UHduoCWo4/nhStGhLnsQnetyPuDcwB4o5UClNd82Z1Xf7Q==
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:33:11 2025 by rpki-client