Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e32372e302f32342d3234203d3e203131313732.roa
File:                     3230312e3133392e32372e302f32342d3234203d3e203131313732.roa (raw, json)
Hash identifier:          vibU5l/RlZSNOPqwfZu+tIqQ4EatIeJ7XRX4Ayee+Eg=
Subject key identifier:   5F:4F:FE:22:4C:01:6B:B8:42:01:51:14:87:CE:1A:0E:39:52:8E:7E
Certificate issuer:       /CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
Certificate serial:       2BDFCF4CF7F56AE0D1AEDC36064E2292652A046A
Authority key identifier: 96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e32372e302f32342d3234203d3e203131313732.roa
Signing time:             Tue 03 Jun 2025 22:55:00 +0000
ROA not before:           Tue 03 Jun 2025 22:50:00 +0000
ROA not after:            Tue 02 Jun 2026 22:55:00 +0000
asID:                     11172
IP address blocks:        201.139.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:df:cf:4c:f7:f5:6a:e0:d1:ae:dc:36:06:4e:22:92:65:2a:04:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96DDD0A970E0BB193FC5B9D9029B75465FB170DD
        Validity
            Not Before: Jun  3 22:50:00 2025 GMT
            Not After : Jun  2 22:55:00 2026 GMT
        Subject: CN=5F4FFE224C016BB84201511487CE1A0E39528E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:9e:2f:69:6a:f7:79:fd:78:70:b4:8d:c5:
                    3d:b5:0f:0d:e3:fa:7d:f3:76:e3:87:77:d0:3f:3d:
                    06:e0:5a:05:04:81:fd:63:b9:77:14:a9:1e:93:49:
                    59:ea:36:88:ea:3b:bb:f7:b7:70:ba:c9:7b:50:05:
                    85:b4:c1:51:30:73:5d:92:4e:7a:f1:f4:17:d5:6b:
                    ff:e9:c0:cf:c8:f7:63:60:e2:85:02:21:65:1c:d3:
                    6b:2f:fe:7e:72:42:89:6d:d1:8f:60:83:ca:3c:a4:
                    13:e7:bd:8d:2a:87:c8:6e:75:09:5b:75:06:12:0a:
                    13:9a:89:75:58:16:ee:e0:76:a4:91:ba:c7:6f:7c:
                    74:52:df:0e:f4:cf:ad:d7:12:c0:8a:fa:74:d2:21:
                    b9:7a:c4:1b:55:a8:c8:16:29:5c:48:0e:e2:9c:88:
                    36:dd:26:4d:49:d8:27:ae:ee:fc:1d:10:f1:6e:14:
                    21:46:13:9a:c6:f2:7d:2d:3e:fb:b6:e9:ed:15:2b:
                    ba:71:12:27:af:83:bd:ca:b3:6f:24:06:21:0b:d5:
                    91:f0:a9:79:72:6f:66:48:58:63:f6:cc:f6:5f:87:
                    44:a6:ae:a5:fb:27:02:43:04:27:22:a7:99:fe:05:
                    ad:12:e4:04:55:18:fd:87:c7:08:43:d7:67:10:41:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4F:FE:22:4C:01:6B:B8:42:01:51:14:87:CE:1A:0E:39:52:8E:7E
            X509v3 Authority Key Identifier:
                keyid:96:DD:D0:A9:70:E0:BB:19:3F:C5:B9:D9:02:9B:75:46:5F:B1:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96DDD0A970E0BB193FC5B9D9029B75465FB170DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48D8FB9176041AB5764933AF43A9F6E1C8B31C3D69E0D43467A11CAD31D66869/0/3230312e3133392e32372e302f32342d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:84:90:fd:23:f7:99:2c:cf:27:fa:63:f9:b8:91:23:69:16:
         7c:57:ca:e5:3b:ee:2b:5c:04:0c:de:1c:52:c9:7c:57:7a:a9:
         f0:ef:78:a8:bc:73:3b:4f:11:d3:e9:7e:ea:d2:d1:32:53:fc:
         cd:bd:66:c9:12:f0:c9:e7:3f:2e:e8:58:65:02:86:2d:d6:3e:
         da:19:4b:b7:53:2c:27:07:e9:27:e5:12:37:6f:7e:ea:9a:5e:
         ff:c6:1c:64:00:ae:b0:55:da:b9:e9:f8:ab:91:77:e3:40:cc:
         b0:9e:f3:fb:cb:39:89:0d:1a:9f:43:be:02:11:5a:6a:c9:b5:
         78:be:93:46:04:5c:c3:7d:6a:a2:33:f9:5b:78:de:b1:56:ad:
         56:29:a5:94:f1:7c:3e:5e:67:64:18:1a:c7:97:30:9d:5a:dd:
         f9:4a:5f:3c:9f:fa:b5:36:03:ca:dc:16:69:6e:49:41:93:e1:
         4a:c9:7e:22:7d:d4:18:5b:73:66:66:7a:56:c2:20:fa:c9:90:
         83:6e:36:ec:c3:87:c3:8f:46:2d:0b:90:a4:ea:ab:da:39:ad:
         b3:29:de:cf:5c:1c:73:e1:de:dd:53:6b:79:fa:3a:cc:1b:6b:
         ad:57:d3:c4:e3:c8:9c:7a:cc:dc:2d:85:71:18:a3:26:46:a9:
         13:e1:88:b4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUK9/PTPf1auDRrtw2Bk4ikmUqBGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZEREQwQTk3MEUwQkIxOTNGQzVCOUQ5MDI5Qjc1NDY1
RkIxNzBERDAeFw0yNTA2MDMyMjUwMDBaFw0yNjA2MDIyMjU1MDBaMDMxMTAvBgNV
BAMTKDVGNEZGRTIyNEMwMTZCQjg0MjAxNTExNDg3Q0UxQTBFMzk1MjhFN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMT54vaWr3ef14cLSNxT21Dw3j
+n3zduOHd9A/PQbgWgUEgf1juXcUqR6TSVnqNojqO7v3t3C6yXtQBYW0wVEwc12S
Tnrx9BfVa//pwM/I92Ng4oUCIWUc02sv/n5yQolt0Y9gg8o8pBPnvY0qh8hudQlb
dQYSChOaiXVYFu7gdqSRusdvfHRS3w70z63XEsCK+nTSIbl6xBtVqMgWKVxIDuKc
iDbdJk1J2Ceu7vwdEPFuFCFGE5rG8n0tPvu26e0VK7pxEievg73Ks28kBiEL1ZHw
qXlyb2ZIWGP2zPZfh0SmrqX7JwJDBCcip5n+Ba0S5ARVGP2HxwhD12cQQbvDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUX0/+IkwBa7hCAVEUh84aDjlSjn4wHwYDVR0j
BBgwFoAUlt3QqXDguxk/xbnZApt1Rl+xcN0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OEQ4RkI5MTc2MDQxQUI1NzY0OTMzQUY0M0E5RjZFMUM4
QjMxQzNENjlFMEQ0MzQ2N0ExMUNBRDMxRDY2ODY5LzAvOTZEREQwQTk3MEUwQkIx
OTNGQzVCOUQ5MDI5Qjc1NDY1RkIxNzBERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkRERDBBOTcwRTBCQjE5M0ZD
NUI5RDkwMjlCNzU0NjVGQjE3MERELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhEOEZCOTE3NjA0MUFCNTc2NDkzM0FGNDNBOUY2RTFDOEIzMUMzRDY5
RTBENDM0NjdBMTFDQUQzMUQ2Njg2OS8wLzMyMzAzMTJlMzEzMzM5MmUzMjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMTMxMzczMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmLGzAN
BgkqhkiG9w0BAQsFAAOCAQEADYSQ/SP3mSzPJ/pj+biRI2kWfFfK5TvuK1wEDN4c
Usl8V3qp8O94qLxzO08R0+l+6tLRMlP8zb1myRLwyec/LuhYZQKGLdY+2hlLt1Ms
JwfpJ+USN29+6ppe/8YcZACusFXauen4q5F340DMsJ7z+8s5iQ0an0O+AhFaasm1
eL6TRgRcw31qojP5W3jesVatVimllPF8Pl5nZBgax5cwnVrd+UpfPJ/6tTYDytwW
aW5JQZPhSsl+In3UGFtzZmZ6VsIg+smQg2427MOHw49GLQuQpOqr2jmtsynez1wc
c+He3VNrefo6zBtrrVfTxOPInHrM3C2FcRijJkapE+GItA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:02:40 2025 by rpki-client