Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/3139312e3130322e3234382e302f32312d3234203d3e20323632393334.roa
File:                     3139312e3130322e3234382e302f32312d3234203d3e20323632393334.roa (raw, json)
Hash identifier:          O9wvTdqPNFNcDz9grpiEuGujPwFpe/1xVJFESQGWkkk=
Subject key identifier:   DB:D2:04:CD:C4:93:41:98:AE:43:C3:EB:88:58:05:CC:90:5E:23:B7
Certificate issuer:       /CN=071E98A75F67AF0AC72FFE00A1889291589B7570
Certificate serial:       16F073D01DAC833BFE5E59CCCE74206F913C8984
Authority key identifier: 07:1E:98:A7:5F:67:AF:0A:C7:2F:FE:00:A1:88:92:91:58:9B:75:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/3139312e3130322e3234382e302f32312d3234203d3e20323632393334.roa
Signing time:             Tue 04 Feb 2025 19:56:45 +0000
ROA not before:           Tue 04 Feb 2025 19:51:45 +0000
ROA not after:            Tue 03 Feb 2026 19:56:45 +0000
asID:                     262934
IP address blocks:        191.102.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f0:73:d0:1d:ac:83:3b:fe:5e:59:cc:ce:74:20:6f:91:3c:89:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=071E98A75F67AF0AC72FFE00A1889291589B7570
        Validity
            Not Before: Feb  4 19:51:45 2025 GMT
            Not After : Feb  3 19:56:45 2026 GMT
        Subject: CN=DBD204CDC4934198AE43C3EB885805CC905E23B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:37:f1:a7:d1:6b:71:72:fc:cf:b0:1e:66:
                    d6:e5:75:96:bd:37:b1:a5:74:ed:4d:b5:b6:19:a7:
                    c9:62:13:79:fb:38:ae:82:b1:4f:f3:40:33:cf:c9:
                    fc:ab:a1:c1:b4:eb:b5:81:87:a5:0f:dc:2f:93:c0:
                    f9:c9:98:ed:48:bf:e8:62:52:cb:3f:51:41:a1:3f:
                    b5:52:fe:cd:e5:1b:2e:b2:9f:2f:24:6f:4d:e1:b1:
                    f1:1a:44:65:ce:02:9b:13:8d:a8:1a:d3:6c:04:f1:
                    31:56:43:58:2a:40:d3:05:1f:f8:c9:ed:fc:a8:49:
                    8c:d9:bb:c8:e1:23:7f:38:c4:3c:56:09:0d:51:85:
                    21:bc:fa:ad:15:3c:27:00:81:a4:a2:b4:56:bf:7d:
                    04:cc:a4:c9:a6:d6:5c:c5:e2:5b:96:39:5c:c2:0d:
                    66:c6:87:a6:d6:dc:cf:ab:4f:ff:f7:74:52:0a:74:
                    cc:54:1c:98:4c:a4:1c:dd:cb:63:88:67:aa:a7:1b:
                    b2:4a:7a:81:c2:74:25:f3:cc:16:97:c8:6f:a5:f5:
                    16:94:b5:23:a5:70:c3:26:69:56:a2:23:f5:51:32:
                    6c:e7:a7:51:1c:07:06:1a:43:b0:c0:ad:6f:6b:19:
                    25:03:84:a9:e6:76:a0:00:b5:c2:a6:e2:90:55:75:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D2:04:CD:C4:93:41:98:AE:43:C3:EB:88:58:05:CC:90:5E:23:B7
            X509v3 Authority Key Identifier:
                keyid:07:1E:98:A7:5F:67:AF:0A:C7:2F:FE:00:A1:88:92:91:58:9B:75:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/3139312e3130322e3234382e302f32312d3234203d3e20323632393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:ce:52:67:61:f8:73:ed:f1:58:b6:0c:ce:c2:6c:b0:d8:74:
         53:8a:41:a4:81:8b:f1:31:c5:51:40:21:9c:90:20:32:fd:77:
         3c:c5:e3:9c:fa:1c:e2:41:6a:47:54:52:3f:ad:3b:98:10:52:
         4a:35:69:a3:d1:5b:55:09:94:e3:12:bd:b6:13:4e:8d:51:24:
         6d:3f:17:d8:5b:4c:36:c7:aa:8a:9d:69:eb:80:0f:be:6b:56:
         54:e4:14:93:66:59:bd:32:57:46:8e:cb:db:50:5a:5f:d4:b2:
         ef:83:62:10:28:ec:ad:1a:f2:fa:d3:2c:a2:00:91:65:45:32:
         e3:94:bb:82:15:d7:31:e7:a1:f6:5f:e2:80:85:e6:0b:ab:50:
         a8:df:8b:c8:4b:cf:f7:af:32:37:d8:28:7c:a2:79:09:fc:6a:
         f4:7d:c8:ac:3f:cc:bb:db:1b:4a:ea:c0:ba:5f:52:98:71:71:
         81:1d:89:36:a2:8d:e6:ce:b4:b3:5f:75:ed:fd:7f:ae:c7:a1:
         11:3d:04:cb:36:8f:69:7e:f0:00:0f:64:3d:90:8a:13:31:09:
         d1:8a:78:76:bb:92:35:ef:24:7f:e2:06:8b:fe:ce:b4:38:0a:
         b1:28:65:47:22:95:04:33:fd:b1:bc:5e:eb:ca:6f:31:1c:34:
         a0:0d:91:1e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUFvBz0B2sgzv+XlnMznQgb5E8iYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcxRTk4QTc1RjY3QUYwQUM3MkZGRTAwQTE4ODkyOTE1
ODlCNzU3MDAeFw0yNTAyMDQxOTUxNDVaFw0yNjAyMDMxOTU2NDVaMDMxMTAvBgNV
BAMTKERCRDIwNENEQzQ5MzQxOThBRTQzQzNFQjg4NTgwNUNDOTA1RTIzQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvijfxp9FrcXL8z7AeZtbldZa9
N7GldO1NtbYZp8liE3n7OK6CsU/zQDPPyfyrocG067WBh6UP3C+TwPnJmO1Iv+hi
Uss/UUGhP7VS/s3lGy6yny8kb03hsfEaRGXOApsTjaga02wE8TFWQ1gqQNMFH/jJ
7fyoSYzZu8jhI384xDxWCQ1RhSG8+q0VPCcAgaSitFa/fQTMpMmm1lzF4luWOVzC
DWbGh6bW3M+rT//3dFIKdMxUHJhMpBzdy2OIZ6qnG7JKeoHCdCXzzBaXyG+l9RaU
tSOlcMMmaVaiI/VRMmznp1EcBwYaQ7DArW9rGSUDhKnmdqAAtcKm4pBVdcURAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU29IEzcSTQZiuQ8PriFgFzJBeI7cwHwYDVR0j
BBgwFoAUBx6Yp19nrwrHL/4AoYiSkVibdXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTdBNzY2RkYxMkQwQzkyRTE4OEFBMEI2OURBRDc1RkUy
MzdBMkRGMUZCOEIwN0U1MDIwMjdBQTQ5MjNEQjIwLzAvMDcxRTk4QTc1RjY3QUYw
QUM3MkZGRTAwQTE4ODkyOTE1ODlCNzU3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzFFOThBNzVGNjdBRjBBQzcy
RkZFMDBBMTg4OTI5MTU4OUI3NTcwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E3QTc2NkZGMTJEMEM5MkUxODhBQTBCNjlEQUQ3NUZFMjM3QTJERjFG
QjhCMDdFNTAyMDI3QUE0OTIzREIyMC8wLzMxMzkzMTJlMzEzMDMyMmUzMjM0Mzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzIzOTMzMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO/
ZvgwDQYJKoZIhvcNAQELBQADggEBAAHOUmdh+HPt8Vi2DM7CbLDYdFOKQaSBi/Ex
xVFAIZyQIDL9dzzF45z6HOJBakdUUj+tO5gQUko1aaPRW1UJlOMSvbYTTo1RJG0/
F9hbTDbHqoqdaeuAD75rVlTkFJNmWb0yV0aOy9tQWl/Usu+DYhAo7K0a8vrTLKIA
kWVFMuOUu4IV1zHnofZf4oCF5gurUKjfi8hLz/evMjfYKHyieQn8avR9yKw/zLvb
G0rqwLpfUphxcYEdiTaijebOtLNfde39f67HoRE9BMs2j2l+8AAPZD2QihMxCdGK
eHa7kjXvJH/iBov+zrQ4CrEoZUcilQQz/bG8XuvKbzEcNKANkR4=
-----END CERTIFICATE-----
Generated at Wed Apr 16 01:49:44 2025 by rpki-client