Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/3136382e39302e3235322e302f32332d3234203d3e20323634363639.roa
File:                     3136382e39302e3235322e302f32332d3234203d3e20323634363639.roa (raw, json)
Hash identifier:          BR3f7cKEY4MxsEXTtrvMawEq1+6GjrljxtYUdkgtkyc=
Subject key identifier:   1A:6A:A0:B5:87:4C:4E:F2:5A:41:56:C8:43:F6:B5:39:02:CC:9D:9E
Certificate issuer:       /CN=15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F
Certificate serial:       7F1EAEE1CC4D9CB04029C55316C9072FB6B27CCD
Authority key identifier: 15:A5:88:BF:1D:67:E5:DC:B3:1F:24:4E:E2:52:F2:EC:9B:9A:E7:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/3136382e39302e3235322e302f32332d3234203d3e20323634363639.roa
Signing time:             Tue 04 Feb 2025 18:13:56 +0000
ROA not before:           Tue 04 Feb 2025 18:08:56 +0000
ROA not after:            Tue 03 Feb 2026 18:13:56 +0000
asID:                     264669
IP address blocks:        168.90.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 06:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1e:ae:e1:cc:4d:9c:b0:40:29:c5:53:16:c9:07:2f:b6:b2:7c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F
        Validity
            Not Before: Feb  4 18:08:56 2025 GMT
            Not After : Feb  3 18:13:56 2026 GMT
        Subject: CN=1A6AA0B5874C4EF25A4156C843F6B53902CC9D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:6f:97:e4:e7:63:09:19:37:25:b6:c0:b3:
                    be:f2:73:78:40:a4:18:57:8d:70:d8:8d:93:ff:97:
                    86:80:00:46:9e:87:9e:dc:9b:cb:e8:4c:3d:91:d6:
                    bf:66:3a:dc:04:87:45:44:e5:fa:dd:0a:e4:87:33:
                    10:2c:78:60:bd:bb:d1:a2:90:da:fc:08:71:e4:b0:
                    57:a5:c3:86:33:5c:71:1c:04:e3:9f:45:4d:a2:a8:
                    0b:af:0e:41:aa:d3:9b:4b:41:71:4d:32:55:c3:f3:
                    6b:c9:9e:8a:46:0e:9b:d4:b5:9a:0a:3b:e7:3b:b5:
                    13:3d:a6:a4:47:a2:08:bc:40:f9:90:3f:8f:13:5b:
                    85:0e:96:2e:e7:e6:a3:02:76:0b:f5:04:f3:b9:10:
                    2a:fa:c5:9d:00:55:2b:15:06:c7:e8:f2:d4:fd:0a:
                    7c:8f:46:73:9b:05:2f:f1:80:74:30:f1:81:77:43:
                    75:80:0c:00:47:c6:87:3c:05:46:64:21:30:af:a4:
                    de:b9:d8:d6:0f:ec:1f:e7:b0:d9:f3:27:d8:22:37:
                    ec:59:c3:63:37:78:66:e0:96:bb:06:e8:55:c9:a1:
                    b2:34:47:6a:5b:91:39:09:54:e4:15:c3:ae:ab:f4:
                    d1:3d:95:60:65:eb:0d:6d:ba:a6:de:e7:6e:d9:3c:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6A:A0:B5:87:4C:4E:F2:5A:41:56:C8:43:F6:B5:39:02:CC:9D:9E
            X509v3 Authority Key Identifier:
                keyid:15:A5:88:BF:1D:67:E5:DC:B3:1F:24:4E:E2:52:F2:EC:9B:9A:E7:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/3136382e39302e3235322e302f32332d3234203d3e20323634363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:af:24:1f:1c:b4:de:82:37:59:f8:10:06:47:92:64:f7:41:
         5e:31:0d:e9:13:1c:9d:15:12:2f:86:df:5a:35:28:ff:26:fb:
         32:b1:49:55:6f:81:f3:56:22:b6:cd:8a:ab:8b:bb:44:7a:08:
         77:7f:cf:f6:c1:f2:a5:23:98:42:67:ca:dc:34:78:12:a4:54:
         b1:8f:ce:ba:33:55:95:cb:ae:cf:76:ef:a6:20:f6:d0:8c:2d:
         17:ee:6b:5b:29:ef:e6:c8:d0:b5:5a:e9:8f:99:9b:67:66:bf:
         d2:9d:ab:c8:0f:2f:3e:79:53:bf:9c:60:21:3e:a7:d6:2e:fe:
         a8:ea:3e:da:12:bd:2c:ee:1a:44:6e:9c:5c:b4:af:7c:a2:6b:
         8f:71:55:06:7c:21:e9:2f:ed:cd:a0:54:be:64:31:fe:0d:60:
         61:3b:41:44:da:51:e8:a2:30:59:61:0d:e6:18:00:48:bb:99:
         60:61:2d:67:85:75:0e:9a:14:64:2b:95:a0:d7:df:0f:f4:2e:
         6e:3a:45:8e:e1:db:52:02:2b:54:ff:c8:37:ac:5f:c6:3f:49:
         3f:8e:ba:f4:8f:64:9c:bc:52:b3:43:df:65:fb:07:e8:c8:8b:
         0c:c6:88:04:db:ac:3e:d2:58:7a:cb:5c:6a:c3:d3:0e:24:3f:
         2a:62:f3:e5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfx6u4cxNnLBAKcVTFskHL7ayfM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVBNTg4QkYxRDY3RTVEQ0IzMUYyNDRFRTI1MkYyRUM5
QjlBRTc1RjAeFw0yNTAyMDQxODA4NTZaFw0yNjAyMDMxODEzNTZaMDMxMTAvBgNV
BAMTKDFBNkFBMEI1ODc0QzRFRjI1QTQxNTZDODQzRjZCNTM5MDJDQzlEOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprG+X5OdjCRk3JbbAs77yc3hA
pBhXjXDYjZP/l4aAAEaeh57cm8voTD2R1r9mOtwEh0VE5frdCuSHMxAseGC9u9Gi
kNr8CHHksFelw4YzXHEcBOOfRU2iqAuvDkGq05tLQXFNMlXD82vJnopGDpvUtZoK
O+c7tRM9pqRHogi8QPmQP48TW4UOli7n5qMCdgv1BPO5ECr6xZ0AVSsVBsfo8tT9
CnyPRnObBS/xgHQw8YF3Q3WADABHxoc8BUZkITCvpN652NYP7B/nsNnzJ9giN+xZ
w2M3eGbglrsG6FXJobI0R2pbkTkJVOQVw66r9NE9lWBl6w1tuqbe527ZPHXTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUGmqgtYdMTvJaQVbIQ/a1OQLMnZ4wHwYDVR0j
BBgwFoAUFaWIvx1n5dyzHyRO4lLy7Jua518wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzMzN0JFNzdBQTAyRDFGOEI5QkY1NzIwRDUwMDBFOEVE
QjVBRkVGQjUxNTE2RUUwNjgwQzdFOTAwM0I1NTAxLzAvMTVBNTg4QkYxRDY3RTVE
Q0IzMUYyNDRFRTI1MkYyRUM5QjlBRTc1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNUE1ODhCRjFENjdFNURDQjMx
RjI0NEVFMjUyRjJFQzlCOUFFNzVGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTczMzdCRTc3QUEwMkQxRjhCOUJGNTcyMEQ1MDAwRThFREI1QUZFRkI1
MTUxNkVFMDY4MEM3RTkwMDNCNTUwMS8wLzMxMzYzODJlMzkzMDJlMzIzNTMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFr8
MA0GCSqGSIb3DQEBCwUAA4IBAQBiryQfHLTegjdZ+BAGR5Jk90FeMQ3pExydFRIv
ht9aNSj/JvsysUlVb4HzViK2zYqri7tEegh3f8/2wfKlI5hCZ8rcNHgSpFSxj866
M1WVy67Pdu+mIPbQjC0X7mtbKe/myNC1WumPmZtnZr/SnavIDy8+eVO/nGAhPqfW
Lv6o6j7aEr0s7hpEbpxctK98omuPcVUGfCHpL+3NoFS+ZDH+DWBhO0FE2lHoojBZ
YQ3mGABIu5lgYS1nhXUOmhRkK5Wg198P9C5uOkWO4dtSAitU/8g3rF/GP0k/jrr0
j2ScvFKzQ99l+wfoyIsMxogE26w+0lh6y1xqw9MOJD8qYvPl
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:01 2025 by rpki-client