Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa
File:                     3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa (raw, json)
Hash identifier:          XvHL3VYZqiLjO5ZRouftzkWYFMjZV0b1K1kTQFkSeBQ=
Subject key identifier:   74:22:C3:09:78:4C:8A:01:57:5D:45:5E:29:94:8E:98:53:4F:56:38
Certificate issuer:       /CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
Certificate serial:       33BE1169679F1ED24CFD8E8598A298894457C1DA
Authority key identifier: 6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa
Signing time:             Tue 04 Feb 2025 18:39:51 +0000
ROA not before:           Tue 04 Feb 2025 18:34:51 +0000
ROA not after:            Tue 03 Feb 2026 18:39:51 +0000
asID:                     262187
IP address blocks:        131.100.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:be:11:69:67:9f:1e:d2:4c:fd:8e:85:98:a2:98:89:44:57:c1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
        Validity
            Not Before: Feb  4 18:34:51 2025 GMT
            Not After : Feb  3 18:39:51 2026 GMT
        Subject: CN=7422C309784C8A01575D455E29948E98534F5638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:b6:46:02:87:8d:d2:83:8d:f6:e3:16:6d:
                    a9:5e:2f:71:dd:57:d0:2e:8e:a7:91:24:1d:43:04:
                    61:ca:49:38:48:ef:a6:fc:70:28:6d:d5:bb:00:eb:
                    60:e4:4c:9c:94:78:3a:7d:d1:54:1a:0a:5b:0e:64:
                    bd:0f:5f:28:58:65:61:59:a3:6f:69:4a:61:8a:8a:
                    6b:03:d3:e4:22:d1:14:7f:0b:65:da:fb:4a:fb:49:
                    89:9a:99:65:e1:52:50:89:37:a2:fb:f7:86:91:df:
                    b1:2d:4d:04:a3:62:80:84:55:cd:7e:0d:4b:50:4c:
                    b0:ba:a5:a4:1f:6f:68:91:8e:9c:dd:2f:b0:ba:ae:
                    ac:1c:59:f3:9c:81:23:22:e8:ac:bf:41:41:e0:67:
                    f2:36:48:ad:4b:bc:71:83:70:b4:87:58:02:09:49:
                    80:e9:80:c2:30:45:a0:51:32:81:af:e2:b5:7d:1e:
                    7d:ad:24:43:c9:65:11:5e:db:e8:2f:7d:56:61:c5:
                    15:6f:40:38:23:2d:9f:0e:d5:15:cf:07:e1:4d:b0:
                    ce:43:f3:87:2b:82:aa:85:1a:05:60:f0:6e:b3:c1:
                    0a:6d:ad:e8:16:eb:1a:fc:8f:7e:b5:03:e3:38:de:
                    60:71:30:41:4d:b9:42:d1:fc:a1:cb:c0:d7:d7:6b:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:22:C3:09:78:4C:8A:01:57:5D:45:5E:29:94:8E:98:53:4F:56:38
            X509v3 Authority Key Identifier:
                keyid:6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:95:18:01:cf:e6:8c:5d:c5:76:d4:f7:d9:a1:0e:96:d5:
         a4:c7:14:8e:68:a9:78:e9:8a:a7:21:39:8c:72:bd:81:1e:84:
         d5:8e:89:f4:c1:a0:f5:6e:a1:ef:ea:3c:d9:cb:47:6e:dc:f8:
         f8:bb:ba:ff:57:bf:1c:4d:d4:10:69:86:57:96:8f:14:c9:b8:
         a8:d1:26:94:de:65:9f:b8:dd:a8:2b:e1:5e:9e:3d:20:6b:d8:
         bf:32:e8:f6:c9:af:bf:e1:d1:cc:1c:a7:71:f2:57:39:f9:e4:
         ff:7d:d8:cc:89:5e:45:90:fc:c0:f0:dd:78:82:9f:4e:a9:3c:
         26:26:c7:50:7c:62:7a:64:2c:d8:1b:6d:88:9f:9c:2d:af:a2:
         c9:78:5c:47:ff:32:59:5b:66:88:13:17:db:bf:22:17:8d:a2:
         3d:e5:ed:b3:be:94:0d:48:06:f5:93:ed:ab:5d:7e:6f:b0:1f:
         f1:1b:82:16:99:42:5e:4b:6e:11:77:9e:f7:75:3c:df:79:de:
         7d:8f:67:02:11:ab:51:6d:67:34:60:d0:58:2b:9f:45:8a:d2:
         b6:70:f0:0f:10:6d:70:a3:4f:68:81:5f:cd:d0:5f:06:70:3b:
         81:86:35:df:97:74:9e:8c:b7:ea:5e:f3:70:28:f5:50:bd:12:
         87:08:38:06
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUM74RaWefHtJM/Y6FmKKYiURXwdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM3RjVGRjU1ODQ0OEU5NEJFNUM5MDM1Q0NCM0FBQ0U2
NTQzQzIxODAeFw0yNTAyMDQxODM0NTFaFw0yNjAyMDMxODM5NTFaMDMxMTAvBgNV
BAMTKDc0MjJDMzA5Nzg0QzhBMDE1NzVENDU1RTI5OTQ4RTk4NTM0RjU2MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DbZGAoeN0oON9uMWbaleL3Hd
V9AujqeRJB1DBGHKSThI76b8cCht1bsA62DkTJyUeDp90VQaClsOZL0PXyhYZWFZ
o29pSmGKimsD0+Qi0RR/C2Xa+0r7SYmamWXhUlCJN6L794aR37EtTQSjYoCEVc1+
DUtQTLC6paQfb2iRjpzdL7C6rqwcWfOcgSMi6Ky/QUHgZ/I2SK1LvHGDcLSHWAIJ
SYDpgMIwRaBRMoGv4rV9Hn2tJEPJZRFe2+gvfVZhxRVvQDgjLZ8O1RXPB+FNsM5D
84crgqqFGgVg8G6zwQptregW6xr8j361A+M43mBxMEFNuULR/KHLwNfXa4WVAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUdCLDCXhMigFXXUVeKZSOmFNPVjgwHwYDVR0j
BBgwFoAUbH9f9VhEjpS+XJA1zLOqzmVDwhgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zODUwQzg0NUFBOEIyMUFCRjUyQ0ZFRTIyMzhGRDhBQTBG
MDJGREU1Njg5NkE1MzIyNTlGMUQyMEE0QUQwMUEyLzAvNkM3RjVGRjU1ODQ0OEU5
NEJFNUM5MDM1Q0NCM0FBQ0U2NTQzQzIxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QzdGNUZGNTU4NDQ4RTk0QkU1
QzkwMzVDQ0IzQUFDRTY1NDNDMjE4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzg1MEM4NDVBQThCMjFBQkY1MkNGRUUyMjM4RkQ4QUEwRjAyRkRFNTY4
OTZBNTMyMjU5RjFEMjBBNEFEMDFBMi8wLzMxMzMzMTJlMzEzMDMwMmUzMTM4MzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM4Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKD
ZLQwDQYJKoZIhvcNAQELBQADggEBAHpxlRgBz+aMXcV21PfZoQ6W1aTHFI5oqXjp
iqchOYxyvYEehNWOifTBoPVuoe/qPNnLR27c+Pi7uv9XvxxN1BBphleWjxTJuKjR
JpTeZZ+43agr4V6ePSBr2L8y6PbJr7/h0cwcp3HyVzn55P992MyJXkWQ/MDw3XiC
n06pPCYmx1B8YnpkLNgbbYifnC2vosl4XEf/MllbZogTF9u/IheNoj3l7bO+lA1I
BvWT7atdfm+wH/EbghaZQl5LbhF3nvd1PN953n2PZwIRq1FtZzRg0Fgrn0WK0rZw
8A8QbXCjT2iBX83QXwZwO4GGNd+XdJ6Mt+pe83Ao9VC9EocIOAY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:24:12 2025 by rpki-client