Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3133312e3232302e302f32322d3234203d3e2036313437.roa
File:                     3230312e3133312e3232302e302f32322d3234203d3e2036313437.roa (raw, json)
Hash identifier:          zaSUrz+r/Kg/liw5Xgg2cN0wXvWD3LOV2SPbkDiViZA=
Subject key identifier:   EB:BE:50:79:41:EC:F2:20:58:18:A8:02:7D:BC:5B:B7:96:6F:2E:A3
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       27B7CDD7A3EACBA82F80A7BFC8A67BC2B27C1C61
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3133312e3232302e302f32322d3234203d3e2036313437.roa
Signing time:             Tue 04 Feb 2025 20:05:13 +0000
ROA not before:           Tue 04 Feb 2025 20:00:13 +0000
ROA not after:            Tue 03 Feb 2026 20:05:13 +0000
asID:                     6147
IP address blocks:        201.131.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b7:cd:d7:a3:ea:cb:a8:2f:80:a7:bf:c8:a6:7b:c2:b2:7c:1c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Feb  4 20:00:13 2025 GMT
            Not After : Feb  3 20:05:13 2026 GMT
        Subject: CN=EBBE507941ECF2205818A8027DBC5BB7966F2EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:dc:ef:66:fd:1c:1d:f7:12:05:74:51:2f:
                    c0:e6:4e:40:50:75:48:8c:99:f4:4c:be:6e:bf:16:
                    50:3a:47:73:e8:dc:ec:0f:52:2e:32:b9:29:43:4f:
                    0c:b2:74:1f:d8:69:3a:7d:97:ea:73:60:6a:84:5e:
                    50:51:a7:4c:69:6f:d9:10:01:fc:8d:6a:d5:cc:9b:
                    ec:a2:50:0f:8f:c3:79:f2:29:e7:7a:8a:cd:74:5f:
                    0a:72:81:b2:f4:fa:5e:64:89:88:4b:86:d2:fa:79:
                    2a:0a:d8:2e:80:7a:90:39:7c:80:5c:6a:c3:84:42:
                    04:ff:a7:9e:02:cb:b9:08:65:7b:e0:f9:14:8f:e0:
                    4c:af:47:cf:21:f5:d2:60:49:dd:32:e9:d1:c3:ca:
                    08:55:0b:8f:44:5a:ab:5a:66:0a:97:c5:1e:05:9c:
                    6a:f1:cc:3c:31:89:19:5a:d2:12:44:3e:28:2f:a9:
                    0b:b1:fb:c5:c6:1c:be:3b:fe:43:02:2a:ff:cd:56:
                    d8:27:18:cf:ec:c9:a8:a2:62:41:71:41:0f:8b:59:
                    bf:6c:81:c1:53:78:40:22:7c:93:c5:a7:7d:52:bc:
                    74:49:a7:05:87:39:7f:9a:b2:64:ab:c8:5e:b6:d9:
                    73:c2:1e:d0:13:b9:58:8e:a7:d6:d8:20:56:00:ba:
                    d4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BE:50:79:41:EC:F2:20:58:18:A8:02:7D:BC:5B:B7:96:6F:2E:A3
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3133312e3232302e302f32322d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:d0:94:ce:8d:0c:44:4f:39:10:c9:0c:b6:8d:a0:52:a2:e9:
         89:5a:90:f0:87:a4:d4:ba:55:65:ed:7a:ea:41:83:36:2b:7d:
         fd:9f:a3:33:65:6d:ef:56:80:ae:87:6c:25:56:c3:be:f1:a4:
         1d:49:41:b8:14:76:ae:42:ee:1e:e3:5c:3e:55:02:6a:00:16:
         47:1b:67:3d:8e:47:18:4d:5f:aa:16:f3:1a:4b:b4:71:97:b4:
         88:b5:53:22:5e:0b:d4:c9:fd:a0:8c:96:9d:70:d1:5d:04:7a:
         d7:56:fa:35:4b:35:ab:b2:b9:a3:23:50:3e:5d:7e:94:8f:34:
         10:83:49:9a:fc:3d:02:b6:37:77:6b:63:1c:9d:0d:95:f3:f3:
         91:58:6b:b4:c1:fa:71:ad:1a:0d:b4:02:86:58:fe:ca:32:b5:
         f0:83:fe:ac:b9:83:e6:d3:43:44:de:f3:20:42:74:1e:e4:83:
         62:bb:20:2e:c2:07:1c:fd:c1:ab:1d:75:97:5c:c8:70:8e:f0:
         00:58:8d:7d:9a:a4:fd:67:d7:79:c8:68:af:79:99:06:8b:e6:
         21:8f:05:2a:fd:32:15:82:d1:22:5e:66:a4:98:6e:0e:09:c4:
         3f:a4:9c:ac:c4:a7:6d:7c:08:16:e6:95:a6:a6:b1:ca:b9:eb:
         3d:e7:12:7e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJ7fN16Pqy6gvgKe/yKZ7wrJ8HGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ3NDk5RUU0OUY2RTQ1RjUwQzQ4NjBCRTc5RDc5Q0JE
N0NCNTdCMTAeFw0yNTAyMDQyMDAwMTNaFw0yNjAyMDMyMDA1MTNaMDMxMTAvBgNV
BAMTKEVCQkU1MDc5NDFFQ0YyMjA1ODE4QTgwMjdEQkM1QkI3OTY2RjJFQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKdzvZv0cHfcSBXRRL8DmTkBQ
dUiMmfRMvm6/FlA6R3Po3OwPUi4yuSlDTwyydB/YaTp9l+pzYGqEXlBRp0xpb9kQ
AfyNatXMm+yiUA+Pw3nyKed6is10XwpygbL0+l5kiYhLhtL6eSoK2C6AepA5fIBc
asOEQgT/p54Cy7kIZXvg+RSP4EyvR88h9dJgSd0y6dHDyghVC49EWqtaZgqXxR4F
nGrxzDwxiRla0hJEPigvqQux+8XGHL47/kMCKv/NVtgnGM/syaiiYkFxQQ+LWb9s
gcFTeEAifJPFp31SvHRJpwWHOX+asmSryF622XPCHtATuViOp9bYIFYAutS5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU675QeUHs8iBYGKgCfbxbt5ZvLqMwHwYDVR0j
BBgwFoAUdHSZ7kn25F9QxIYL5515y9fLV7EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NTAyQTIxMjZGRUYzMzhEMzlDOEI3NDM5MjBDMUJBMjI0
MTA3Q0ZEMTI2MzU1MEZDOTJGNEQ1OEVEMUEzQzJCLzAvNzQ3NDk5RUU0OUY2RTQ1
RjUwQzQ4NjBCRTc5RDc5Q0JEN0NCNTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NDc0OTlFRTQ5RjZFNDVGNTBD
NDg2MEJFNzlENzlDQkQ3Q0I1N0IxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTUwMkEyMTI2RkVGMzM4RDM5QzhCNzQzOTIwQzFCQTIyNDEwN0NGRDEy
NjM1NTBGQzkyRjRENThFRDFBM0MyQi8wLzMyMzAzMTJlMzEzMzMxMmUzMjMyMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMxMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsmD3DAN
BgkqhkiG9w0BAQsFAAOCAQEAFtCUzo0MRE85EMkMto2gUqLpiVqQ8Iek1LpVZe16
6kGDNit9/Z+jM2Vt71aArodsJVbDvvGkHUlBuBR2rkLuHuNcPlUCagAWRxtnPY5H
GE1fqhbzGku0cZe0iLVTIl4L1Mn9oIyWnXDRXQR611b6NUs1q7K5oyNQPl1+lI80
EINJmvw9ArY3d2tjHJ0NlfPzkVhrtMH6ca0aDbQChlj+yjK18IP+rLmD5tNDRN7z
IEJ0HuSDYrsgLsIHHP3Bqx11l1zIcI7wAFiNfZqk/WfXechor3mZBovmIY8FKv0y
FYLRIl5mpJhuDgnEP6ScrMSnbXwIFuaVpqaxyrnrPecSfg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:14 2025 by rpki-client