Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3134382e302f32342d3234203d3e20323732383438.roa
File:                     3230312e3231382e3134382e302f32342d3234203d3e20323732383438.roa (raw, json)
Hash identifier:          kj0o71j6aXEZRvIecNCd93UTu6xFhYqOHY4OfMBfYCA=
Subject key identifier:   3E:6C:AE:7A:FC:0A:87:7F:26:58:65:99:9C:BF:60:82:37:CB:49:A5
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       6FB2A143E42D09C8A682F31BB83D4D2279E7F5C1
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3134382e302f32342d3234203d3e20323732383438.roa
Signing time:             Tue 04 Feb 2025 18:53:05 +0000
ROA not before:           Tue 04 Feb 2025 18:48:05 +0000
ROA not after:            Tue 03 Feb 2026 18:53:05 +0000
asID:                     272848
IP address blocks:        201.218.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b2:a1:43:e4:2d:09:c8:a6:82:f3:1b:b8:3d:4d:22:79:e7:f5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:48:05 2025 GMT
            Not After : Feb  3 18:53:05 2026 GMT
        Subject: CN=3E6CAE7AFC0A877F265865999CBF608237CB49A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:92:dc:ae:40:ff:62:26:25:3c:70:7a:08:
                    70:f4:00:e6:22:09:b8:f7:24:a1:bb:0c:71:71:24:
                    00:af:9c:92:8a:2c:85:6e:4f:3e:9c:74:95:fc:0e:
                    68:fd:ea:e9:98:d3:68:ba:db:44:3f:f5:bb:be:d1:
                    07:89:6f:8d:6a:a1:95:b0:49:d4:6c:48:0d:b4:97:
                    4c:42:d5:c8:44:53:5a:75:d3:93:48:e5:a4:06:57:
                    72:42:14:62:fa:7a:9f:d2:e0:bb:d8:bc:98:b0:58:
                    2d:2b:0b:4d:8d:af:17:e3:45:01:66:11:fd:09:e5:
                    d7:f7:b4:77:b3:e6:9e:9c:e9:19:47:6f:0e:08:2a:
                    48:98:cf:e4:5b:4e:39:cb:00:e8:aa:a4:d3:b7:c7:
                    58:35:e9:09:09:00:78:12:20:62:d5:58:10:bf:44:
                    bb:8d:50:4f:47:88:45:ba:86:09:a7:08:97:05:74:
                    65:67:0e:38:79:3f:d4:cb:8c:fc:71:e3:96:70:cd:
                    55:86:87:62:0b:fa:99:50:4b:1d:4f:79:15:8d:79:
                    29:cb:39:67:12:a8:30:ff:84:1b:c7:c4:b8:e2:fb:
                    13:3f:7a:18:d9:ac:a1:03:1f:b2:ea:92:07:5c:be:
                    96:e1:90:f2:46:92:87:0b:98:02:2b:8b:c3:b6:e7:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6C:AE:7A:FC:0A:87:7F:26:58:65:99:9C:BF:60:82:37:CB:49:A5
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3134382e302f32342d3234203d3e20323732383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:b5:4d:c3:e3:74:58:29:38:83:c8:7a:da:d5:05:5d:d1:05:
         80:45:6f:90:c0:11:21:c6:a8:e9:ca:32:92:a6:19:f3:a7:b2:
         d5:73:f0:68:a2:58:14:6d:68:28:48:65:16:56:06:b0:9f:c6:
         75:aa:ec:7d:93:63:53:e4:d9:d5:08:c0:9a:c6:a0:19:64:90:
         9f:a7:fa:f1:2c:6d:76:52:9a:70:2f:5d:77:ae:43:42:ce:7b:
         9d:fa:62:f0:13:e2:10:c8:9a:fb:bc:e8:12:90:d9:89:42:3f:
         fc:20:03:fe:c8:1d:ac:e6:92:fe:0a:3e:75:4f:e4:9a:4d:bf:
         e6:a5:24:df:ac:f2:89:bb:53:b2:fe:23:d4:30:c0:f8:4f:a3:
         ec:d3:fe:64:55:94:30:5d:28:1c:14:10:8a:61:71:41:8b:fc:
         10:83:88:c1:b6:94:d1:e7:bf:29:fd:85:a5:25:a8:6f:51:20:
         ae:79:75:44:e7:da:a6:62:a3:b6:9f:07:a5:56:2e:49:02:1b:
         d9:e1:97:ac:55:04:cb:4b:16:c3:12:18:11:67:3d:d8:52:09:
         9e:fc:56:5c:68:88:f9:5d:72:07:50:6a:06:83:3b:c0:04:4b:
         f8:13:1a:1f:a7:54:ad:5e:b6:50:a4:25:07:d7:91:20:fd:df:
         dc:fb:c6:1e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUb7KhQ+QtCcimgvMbuD1NInnn9cEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJGRkY4RTJEMzlBQjAwNUJFMkFCODFEQTA3RUMyQjRG
NjE3NUVEQzAeFw0yNTAyMDQxODQ4MDVaFw0yNjAyMDMxODUzMDVaMDMxMTAvBgNV
BAMTKDNFNkNBRTdBRkMwQTg3N0YyNjU4NjU5OTlDQkY2MDgyMzdDQjQ5QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73pLcrkD/YiYlPHB6CHD0AOYi
Cbj3JKG7DHFxJACvnJKKLIVuTz6cdJX8Dmj96umY02i620Q/9bu+0QeJb41qoZWw
SdRsSA20l0xC1chEU1p105NI5aQGV3JCFGL6ep/S4LvYvJiwWC0rC02NrxfjRQFm
Ef0J5df3tHez5p6c6RlHbw4IKkiYz+RbTjnLAOiqpNO3x1g16QkJAHgSIGLVWBC/
RLuNUE9HiEW6hgmnCJcFdGVnDjh5P9TLjPxx45ZwzVWGh2IL+plQSx1PeRWNeSnL
OWcSqDD/hBvHxLji+xM/ehjZrKEDH7LqkgdcvpbhkPJGkocLmAIri8O25/TfAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUPmyuevwKh38mWGWZnL9ggjfLSaUwHwYDVR0j
BBgwFoAUgv/44tOasAW+KrgdoH7CtPYXXtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkVBRUUzRUE1RUMxMzM4MEFFOTE5MzBGNTk0NENGMDdC
RDM2MjNGOTgzRUUzMTAxOTZDNTY4OTkwQUVGODZFLzAvODJGRkY4RTJEMzlBQjAw
NUJFMkFCODFEQTA3RUMyQjRGNjE3NUVEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MkZGRjhFMkQzOUFCMDA1QkUy
QUI4MURBMDdFQzJCNEY2MTc1RURDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJFQUVFM0VBNUVDMTMzODBBRTkxOTMwRjU5NDRDRjA3QkQzNjIzRjk4
M0VFMzEwMTk2QzU2ODk5MEFFRjg2RS8wLzMyMzAzMTJlMzIzMTM4MmUzMTM0Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzODM0Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJ
2pQwDQYJKoZIhvcNAQELBQADggEBALa1TcPjdFgpOIPIetrVBV3RBYBFb5DAESHG
qOnKMpKmGfOnstVz8GiiWBRtaChIZRZWBrCfxnWq7H2TY1Pk2dUIwJrGoBlkkJ+n
+vEsbXZSmnAvXXeuQ0LOe536YvAT4hDImvu86BKQ2YlCP/wgA/7IHazmkv4KPnVP
5JpNv+alJN+s8om7U7L+I9QwwPhPo+zT/mRVlDBdKBwUEIphcUGL/BCDiMG2lNHn
vyn9haUlqG9RIK55dUTn2qZio7afB6VWLkkCG9nhl6xVBMtLFsMSGBFnPdhSCZ78
VlxoiPldcgdQagaDO8AES/gTGh+nVK1etlCkJQfXkSD939z7xh4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:53 2025 by rpki-client