Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3138312e3131382e3136302e302f32302d3234203d3e203233343136.roa
File:                     3138312e3131382e3136302e302f32302d3234203d3e203233343136.roa (raw, json)
Hash identifier:          bekH69OYj586+6aF0yiiAkuF5jgXp3RZL80Q4KIGMEw=
Subject key identifier:   50:15:B2:6B:FB:F4:1E:E6:C9:71:98:4B:05:01:44:9C:12:4E:33:0E
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       510F0B9A9AEC6B92BD879480AA3B005E11524BD6
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3138312e3131382e3136302e302f32302d3234203d3e203233343136.roa
Signing time:             Tue 04 Feb 2025 18:31:57 +0000
ROA not before:           Tue 04 Feb 2025 18:26:57 +0000
ROA not after:            Tue 03 Feb 2026 18:31:57 +0000
asID:                     23416
IP address blocks:        181.118.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0f:0b:9a:9a:ec:6b:92:bd:87:94:80:aa:3b:00:5e:11:52:4b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:26:57 2025 GMT
            Not After : Feb  3 18:31:57 2026 GMT
        Subject: CN=5015B26BFBF41EE6C971984B0501449C124E330E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:21:9c:94:60:70:15:4c:58:19:85:60:05:
                    15:ec:12:e1:89:b2:0d:e3:f9:99:8b:ed:43:81:7e:
                    18:34:f4:45:c5:90:c6:36:59:a0:2e:82:ca:91:41:
                    f8:0c:08:34:ea:95:a7:d2:d0:09:99:b9:7f:f1:52:
                    94:76:cd:3d:7f:f8:a0:a3:b3:55:fb:fa:f6:20:35:
                    6c:ce:f4:a7:b8:24:4b:1f:91:bb:56:51:d9:69:2c:
                    76:c9:8d:02:ef:f9:74:f2:a7:85:77:17:6f:0e:62:
                    13:a3:49:f0:72:96:72:c1:73:72:31:42:9b:55:22:
                    c6:a7:82:6b:9b:4f:d1:f9:6e:85:d5:b4:07:7d:1f:
                    80:54:ab:dd:91:a3:47:7b:2f:7d:15:0b:f9:1f:eb:
                    f9:45:68:57:be:36:68:52:03:aa:4d:50:44:60:cc:
                    15:f4:05:9b:c2:7f:1f:2a:49:2a:1d:43:d5:fa:e7:
                    f8:22:4c:d0:3a:10:dc:d9:56:8d:a6:78:b3:92:6c:
                    67:21:6a:90:b6:ce:8e:38:39:94:48:c4:5c:31:64:
                    e9:10:30:27:69:62:5a:ac:9f:be:a9:20:12:37:03:
                    54:70:b3:34:d6:21:48:51:1e:21:0b:db:7a:20:25:
                    49:3f:6a:36:b7:af:5c:29:71:63:51:67:9c:79:3d:
                    8f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:15:B2:6B:FB:F4:1E:E6:C9:71:98:4B:05:01:44:9C:12:4E:33:0E
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3138312e3131382e3136302e302f32302d3234203d3e203233343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:73:09:ce:40:0e:c0:33:33:a1:1c:e8:1e:f3:5b:68:b0:dd:
         a9:58:b7:57:48:7f:43:64:c9:dd:b1:f4:b3:d4:16:10:98:65:
         c2:a1:f0:42:bd:83:35:3d:c1:a6:f5:2d:77:ae:61:81:d6:0a:
         34:74:d8:6f:dd:39:06:a1:63:4d:5a:24:e8:38:4a:95:27:39:
         97:83:b2:80:ea:f6:84:76:63:65:fb:ca:14:1c:8f:87:6b:07:
         5f:9e:d5:b3:36:25:9e:55:28:7e:0f:cd:26:4e:29:de:3f:50:
         3a:bb:7c:8d:f6:f2:0a:25:19:86:b4:44:d8:b3:cc:8c:d1:26:
         d9:da:99:2a:23:f7:57:26:44:a8:6d:d5:2b:2f:1a:7d:2d:bc:
         06:59:e9:98:e1:7c:96:eb:67:f6:84:0f:f0:3a:5d:66:81:e2:
         44:b2:0f:2a:ce:2f:f1:91:0d:27:3c:62:ed:4e:41:a6:d1:f9:
         dd:61:d8:63:14:67:07:8e:42:9d:0c:53:6c:e0:eb:fd:de:a2:
         9b:ef:9c:fe:35:29:d0:09:4c:fa:60:67:c1:83:47:ca:2c:cd:
         b1:f3:b0:98:b2:03:a8:84:63:09:d4:32:8b:e9:22:67:a4:51:
         77:38:a5:12:20:82:c7:3b:b5:23:4f:82:ae:d6:a8:d7:92:a9:
         7a:a6:69:3a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUQ8Lmprsa5K9h5SAqjsAXhFSS9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYwODJDNTdDREJENjhEODJBODREOTk2N0M0OTU4NTU0
N0U2RTgwRjAeFw0yNTAyMDQxODI2NTdaFw0yNjAyMDMxODMxNTdaMDMxMTAvBgNV
BAMTKDUwMTVCMjZCRkJGNDFFRTZDOTcxOTg0QjA1MDE0NDlDMTI0RTMzMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqsiGclGBwFUxYGYVgBRXsEuGJ
sg3j+ZmL7UOBfhg09EXFkMY2WaAugsqRQfgMCDTqlafS0AmZuX/xUpR2zT1/+KCj
s1X7+vYgNWzO9Ke4JEsfkbtWUdlpLHbJjQLv+XTyp4V3F28OYhOjSfBylnLBc3Ix
QptVIsangmubT9H5boXVtAd9H4BUq92Ro0d7L30VC/kf6/lFaFe+NmhSA6pNUERg
zBX0BZvCfx8qSSodQ9X65/giTNA6ENzZVo2meLOSbGchapC2zo44OZRIxFwxZOkQ
MCdpYlqsn76pIBI3A1RwszTWIUhRHiEL23ogJUk/aja3r1wpcWNRZ5x5PY8lAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUUBWya/v0HubJcZhLBQFEnBJOMw4wHwYDVR0j
BBgwFoAUXwgsV829aNgqhNmWfElYVUfm6A8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QjIxOEYzQ0JBMjFDMzg4MTMxRTBDQUY2MzAzQTBCMTA4
RTcyQUU1M0M1NzNGM0YzNTE0MkRCMTYxMDAxNjhCLzAvNUYwODJDNTdDREJENjhE
ODJBODREOTk2N0M0OTU4NTU0N0U2RTgwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjA4MkM1N0NEQkQ2OEQ4MkE4
NEQ5OTY3QzQ5NTg1NTQ3RTZFODBGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEIyMThGM0NCQTIxQzM4ODEzMUUwQ0FGNjMwM0EwQjEwOEU3MkFFNTND
NTczRjNGMzUxNDJEQjE2MTAwMTY4Qi8wLzMxMzgzMTJlMzEzMTM4MmUzMTM2MzAy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjMzMzQzMTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEtXag
MA0GCSqGSIb3DQEBCwUAA4IBAQBHcwnOQA7AMzOhHOge81tosN2pWLdXSH9DZMnd
sfSz1BYQmGXCofBCvYM1PcGm9S13rmGB1go0dNhv3TkGoWNNWiToOEqVJzmXg7KA
6vaEdmNl+8oUHI+HawdfntWzNiWeVSh+D80mTineP1A6u3yN9vIKJRmGtETYs8yM
0SbZ2pkqI/dXJkSobdUrLxp9LbwGWemY4XyW62f2hA/wOl1mgeJEsg8qzi/xkQ0n
PGLtTkGm0fndYdhjFGcHjkKdDFNs4Ov93qKb75z+NSnQCUz6YGfBg0fKLM2x87CY
sgOohGMJ1DKL6SJnpFF3OKUSIILHO7UjT4Ku1qjXkql6pmk6
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:14:33 2025 by rpki-client