Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3235302e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230342e3235302e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          niFvW5aRR1ROJKG63dFKYV6IzNuF9Ra5EE9g6c/gX/0=
Subject key identifier:   6E:5D:70:EF:68:2A:A4:EF:38:DF:EF:20:B0:E0:1B:7B:08:A2:22:71
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       6A50AB5216AF3006B3C97A0C6E5F5D4EDC40FAC0
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3235302e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:53 +0000
ROA not before:           Tue 04 Feb 2025 18:01:53 +0000
ROA not after:            Tue 03 Feb 2026 18:06:53 +0000
asID:                     18734
IP address blocks:        189.204.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:50:ab:52:16:af:30:06:b3:c9:7a:0c:6e:5f:5d:4e:dc:40:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:53 2025 GMT
            Not After : Feb  3 18:06:53 2026 GMT
        Subject: CN=6E5D70EF682AA4EF38DFEF20B0E01B7B08A22271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:51:82:70:4e:3a:0f:19:a9:b9:13:48:8c:01:
                    ad:d5:4f:46:2d:56:4b:c4:6e:0d:b2:26:14:1c:63:
                    7c:df:de:ec:b6:98:84:4c:58:bd:c3:d1:23:43:d0:
                    17:e1:89:5b:6c:93:25:b7:a6:df:c9:f4:bc:39:0e:
                    95:bf:09:7f:d1:76:61:3d:25:63:e4:35:6f:4d:8d:
                    40:27:7c:48:eb:83:d8:02:74:8a:22:7f:0c:b9:10:
                    f2:61:2d:90:ba:04:1b:4c:cd:b8:c9:de:4e:a9:32:
                    3d:db:ac:0f:93:91:cc:42:df:94:fd:a8:ca:27:6d:
                    5f:96:a5:d3:d8:31:21:f4:05:0f:e3:46:cc:5e:3a:
                    09:53:d6:3c:64:0f:b8:f7:b2:18:42:48:1a:26:d0:
                    63:d1:ad:49:e2:8a:29:a8:92:6e:9c:f8:3c:ba:5c:
                    4f:52:6a:cf:bd:e0:1e:fe:08:ec:88:20:82:cc:a3:
                    bb:8d:8b:93:e1:98:cd:fc:f2:11:97:6c:a6:c3:61:
                    8f:32:3b:75:2a:f6:ee:57:4b:81:d8:0a:2e:63:17:
                    cd:e9:50:4e:f1:c1:d8:e9:11:72:49:fb:6f:de:29:
                    aa:92:f8:b4:d8:be:9e:c1:ab:1c:0f:34:e1:01:d1:
                    d2:31:fc:20:15:75:58:b7:7d:7e:19:94:fb:c1:0a:
                    f9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5D:70:EF:68:2A:A4:EF:38:DF:EF:20:B0:E0:1B:7B:08:A2:22:71
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3235302e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:41:9c:23:58:de:6b:c1:d4:2f:dd:a9:3f:2e:46:74:f0:8d:
         2c:f9:e8:df:16:86:b0:16:c6:36:06:7f:3d:b0:2e:14:25:77:
         25:82:c0:31:df:e5:0f:7b:ed:80:e2:65:6e:d4:52:f5:7b:31:
         59:57:15:98:19:9f:03:41:59:c3:6c:ec:f0:90:55:a8:6c:a1:
         6a:77:16:cd:75:f1:4d:a7:15:62:5a:6c:e3:5c:34:31:98:d2:
         af:f6:1b:e1:56:eb:58:5f:0a:92:b7:67:ec:e7:e7:49:2d:f6:
         82:25:53:92:ee:84:dc:1d:60:06:63:02:39:5a:0d:2c:c4:dd:
         df:0d:fe:89:bd:99:42:47:de:9e:90:02:4d:32:91:44:dc:0e:
         30:5c:cb:74:73:ad:92:dd:fb:fd:6a:76:eb:93:c2:17:f9:61:
         86:82:3a:ef:6e:16:c0:96:58:8b:d6:ae:0f:b2:42:1c:3e:ed:
         8c:c1:24:32:1e:5f:71:cf:2f:41:16:06:a1:32:ca:44:08:24:
         14:a5:63:5a:26:ed:ee:c9:e8:27:42:9b:3e:ec:b3:fb:90:50:
         f8:c7:60:65:51:22:5b:b3:f9:26:d6:5b:d5:5e:c5:a9:30:fe:
         93:67:b7:d9:ac:fc:6b:7a:50:26:f2:17:85:5c:e2:b7:61:06:
         e1:63:e8:bc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUalCrUhavMAazyXoMbl9dTtxA+sAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5N0EyNTgzNkI0MjlFOUU2RDE1NTE4REM3Mzk3MDBC
NkM5QzRGRDAeFw0yNTAyMDQxODAxNTNaFw0yNjAyMDMxODA2NTNaMDMxMTAvBgNV
BAMTKDZFNUQ3MEVGNjgyQUE0RUYzOERGRUYyMEIwRTAxQjdCMDhBMjIyNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmUYJwTjoPGam5E0iMAa3VT0Yt
VkvEbg2yJhQcY3zf3uy2mIRMWL3D0SND0BfhiVtskyW3pt/J9Lw5DpW/CX/RdmE9
JWPkNW9NjUAnfEjrg9gCdIoifwy5EPJhLZC6BBtMzbjJ3k6pMj3brA+TkcxC35T9
qMonbV+WpdPYMSH0BQ/jRsxeOglT1jxkD7j3shhCSBom0GPRrUniiimokm6c+Dy6
XE9Sas+94B7+COyIIILMo7uNi5PhmM388hGXbKbDYY8yO3Uq9u5XS4HYCi5jF83p
UE7xwdjpEXJJ+2/eKaqS+LTYvp7BqxwPNOEB0dIx/CAVdVi3fX4ZlPvBCvkVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUbl1w72gqpO843+8gsOAbewiiInEwHwYDVR0j
BBgwFoAUeZeiWDa0Kenm0VUY3HOXALbJxP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjJGRkZCMEIzODM0MDQ1RjdDNDI4MkFFQjRDNjQ1REQ5
NDYxNzUwQ0NENTMzOEY4Q0M2RkQ2NUY1QUUxQ0NBLzAvNzk5N0EyNTgzNkI0MjlF
OUU2RDE1NTE4REM3Mzk3MDBCNkM5QzRGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OTk3QTI1ODM2QjQyOUU5RTZE
MTU1MThEQzczOTcwMEI2QzlDNEZELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYyRkZGQjBCMzgzNDA0NUY3QzQyODJBRUI0QzY0NUREOTQ2MTc1MEND
RDUzMzhGOENDNkZENjVGNUFFMUNDQS8wLzMxMzgzOTJlMzIzMDM0MmUzMjM1MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM4MzczMzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvcz6
MA0GCSqGSIb3DQEBCwUAA4IBAQBcQZwjWN5rwdQv3ak/LkZ08I0s+ejfFoawFsY2
Bn89sC4UJXclgsAx3+UPe+2A4mVu1FL1ezFZVxWYGZ8DQVnDbOzwkFWobKFqdxbN
dfFNpxViWmzjXDQxmNKv9hvhVutYXwqSt2fs5+dJLfaCJVOS7oTcHWAGYwI5Wg0s
xN3fDf6JvZlCR96ekAJNMpFE3A4wXMt0c62S3fv9anbrk8IX+WGGgjrvbhbAlliL
1q4PskIcPu2MwSQyHl9xzy9BFgahMspECCQUpWNaJu3uyegnQps+7LP7kFD4x2Bl
USJbs/km1lvVXsWpMP6TZ7fZrPxrelAm8heFXOK3YQbhY+i8
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:45:36 2025 by rpki-client