Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/3230312e3133312e3131302e302f32332d3233203d3e203631353032.roa
File:                     3230312e3133312e3131302e302f32332d3233203d3e203631353032.roa (raw, json)
Hash identifier:          8ecLresKGZdBDhJ4odhpF4SREI+ghJxalp1fGAv/syA=
Subject key identifier:   23:B2:91:B2:23:EA:B2:EE:0D:6A:BC:38:AE:A3:D2:75:50:D1:42:F1
Certificate issuer:       /CN=5EEF34262E5F7F9A665A1C125355DD1CEA90CA62
Certificate serial:       1F8007B225C139A36137C856FD65715DE39E5B4B
Authority key identifier: 5E:EF:34:26:2E:5F:7F:9A:66:5A:1C:12:53:55:DD:1C:EA:90:CA:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/3230312e3133312e3131302e302f32332d3233203d3e203631353032.roa
Signing time:             Tue 04 Feb 2025 20:07:50 +0000
ROA not before:           Tue 04 Feb 2025 20:02:50 +0000
ROA not after:            Tue 03 Feb 2026 20:07:50 +0000
asID:                     61502
IP address blocks:        201.131.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:80:07:b2:25:c1:39:a3:61:37:c8:56:fd:65:71:5d:e3:9e:5b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EEF34262E5F7F9A665A1C125355DD1CEA90CA62
        Validity
            Not Before: Feb  4 20:02:50 2025 GMT
            Not After : Feb  3 20:07:50 2026 GMT
        Subject: CN=23B291B223EAB2EE0D6ABC38AEA3D27550D142F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:b3:8c:df:65:e5:f7:03:e3:99:5c:a7:9d:
                    d1:c4:1a:7e:d0:c9:5d:89:c2:b1:75:6d:12:d5:f7:
                    3c:6c:b4:c1:9d:25:a3:96:86:c7:b0:4b:71:c6:15:
                    b5:b7:00:cb:6f:0b:6d:45:c0:95:c2:76:61:fd:d4:
                    77:bb:83:52:a5:64:eb:5c:ab:c4:73:ef:ae:5f:dc:
                    6c:63:97:8f:21:40:6a:ff:a4:0f:9b:66:14:47:1c:
                    bb:2e:ad:13:2c:38:1f:f9:11:59:fd:84:c2:9e:b8:
                    a5:4a:43:60:bc:c4:25:26:68:0c:05:d6:eb:4a:67:
                    42:cb:49:1a:7b:d5:d7:28:25:d0:82:7b:19:dd:26:
                    2c:64:bb:29:45:c5:b6:da:3f:3c:d0:47:e4:fa:9b:
                    e9:8f:d9:50:26:e8:b5:e3:7a:3b:18:69:aa:46:83:
                    f0:57:78:55:e9:6c:1e:fb:59:ca:80:2e:c4:5f:8f:
                    15:cb:ae:92:9d:5e:48:cf:e3:3a:76:d2:34:b2:98:
                    f8:85:09:0f:b6:9f:ac:e6:04:53:75:10:5a:a0:1e:
                    f6:f8:d0:54:44:56:d7:a4:cf:da:7e:8d:94:b1:11:
                    94:74:e3:3f:33:f7:12:bf:0d:bb:4c:24:28:56:a4:
                    2c:85:22:5c:e2:d2:6d:36:f8:b2:68:ed:6b:d4:41:
                    4f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B2:91:B2:23:EA:B2:EE:0D:6A:BC:38:AE:A3:D2:75:50:D1:42:F1
            X509v3 Authority Key Identifier:
                keyid:5E:EF:34:26:2E:5F:7F:9A:66:5A:1C:12:53:55:DD:1C:EA:90:CA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF34262E5F7F9A665A1C125355DD1CEA90CA62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6A7DFC645162044D582C62F6FA9572910FD76309CCD32CC4AD55FF1DB0E71257/0/3230312e3133312e3131302e302f32332d3233203d3e203631353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:38:6e:e3:66:2b:2b:3f:c9:b0:cc:ca:5e:29:13:e8:a0:75:
         cf:5f:e2:51:83:15:fa:d3:fc:ee:d1:d7:b3:da:10:3e:fc:0e:
         4c:8f:1d:4a:06:5c:2f:61:4a:00:52:bb:2b:22:65:ae:c0:f9:
         36:11:d4:a3:b1:4f:44:c0:04:c3:d9:25:c1:79:64:98:ad:6d:
         c7:94:8d:ee:2c:b2:15:a3:7c:e0:da:d6:fc:9c:a4:5d:f5:6c:
         b0:d9:73:a0:d4:fa:fb:ff:82:fb:61:29:01:6d:65:d6:2f:7d:
         66:27:c9:9b:17:cd:c8:db:42:35:30:e4:20:97:2b:e7:3c:a6:
         40:29:65:0c:8c:32:3b:8f:5a:82:f5:ad:bd:69:d8:ad:ee:f9:
         37:49:9e:01:44:15:be:c8:f3:1d:d8:06:f1:bb:dd:11:27:33:
         e2:1f:28:50:99:98:0b:9a:46:71:56:b0:24:6e:4d:5f:d6:2c:
         1c:ee:fc:dd:ea:38:b0:67:64:5d:e3:b4:57:56:b4:f6:f6:e8:
         98:eb:d6:f6:8a:8f:4d:aa:06:ba:45:1f:f0:9a:38:4b:3b:88:
         f9:81:c8:9d:ce:1a:b7:74:0d:22:e6:ba:83:fc:38:d3:b0:5b:
         64:88:71:f4:4f:fd:0a:74:25:f5:11:51:dd:65:d5:61:99:1a:
         cc:06:c1:00
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUH4AHsiXBOaNhN8hW/WVxXeOeW0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVFRjM0MjYyRTVGN0Y5QTY2NUExQzEyNTM1NUREMUNF
QTkwQ0E2MjAeFw0yNTAyMDQyMDAyNTBaFw0yNjAyMDMyMDA3NTBaMDMxMTAvBgNV
BAMTKDIzQjI5MUIyMjNFQUIyRUUwRDZBQkMzOEFFQTNEMjc1NTBEMTQyRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEarOM32Xl9wPjmVynndHEGn7Q
yV2JwrF1bRLV9zxstMGdJaOWhsewS3HGFbW3AMtvC21FwJXCdmH91He7g1KlZOtc
q8Rz765f3Gxjl48hQGr/pA+bZhRHHLsurRMsOB/5EVn9hMKeuKVKQ2C8xCUmaAwF
1utKZ0LLSRp71dcoJdCCexndJixkuylFxbbaPzzQR+T6m+mP2VAm6LXjejsYaapG
g/BXeFXpbB77WcqALsRfjxXLrpKdXkjP4zp20jSymPiFCQ+2n6zmBFN1EFqgHvb4
0FREVtekz9p+jZSxEZR04z8z9xK/DbtMJChWpCyFIlzi0m02+LJo7WvUQU/FAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUI7KRsiPqsu4Narw4rqPSdVDRQvEwHwYDVR0j
BBgwFoAUXu80Ji5ff5pmWhwSU1XdHOqQymIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QTdERkM2NDUxNjIwNDRENTgyQzYyRjZGQTk1NzI5MTBG
RDc2MzA5Q0NEMzJDQzRBRDU1RkYxREIwRTcxMjU3LzAvNUVFRjM0MjYyRTVGN0Y5
QTY2NUExQzEyNTM1NUREMUNFQTkwQ0E2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RUVGMzQyNjJFNUY3RjlBNjY1
QTFDMTI1MzU1REQxQ0VBOTBDQTYyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkE3REZDNjQ1MTYyMDQ0RDU4MkM2MkY2RkE5NTcyOTEwRkQ3NjMwOUND
RDMyQ0M0QUQ1NUZGMURCMEU3MTI1Ny8wLzMyMzAzMTJlMzEzMzMxMmUzMTMxMzAy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMxMzUzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByYNu
MA0GCSqGSIb3DQEBCwUAA4IBAQBuOG7jZisrP8mwzMpeKRPooHXPX+JRgxX60/zu
0dez2hA+/A5Mjx1KBlwvYUoAUrsrImWuwPk2EdSjsU9EwATD2SXBeWSYrW3HlI3u
LLIVo3zg2tb8nKRd9Wyw2XOg1Pr7/4L7YSkBbWXWL31mJ8mbF83I20I1MOQglyvn
PKZAKWUMjDI7j1qC9a29adit7vk3SZ4BRBW+yPMd2Abxu90RJzPiHyhQmZgLmkZx
VrAkbk1f1iwc7vzd6jiwZ2Rd47RXVrT29uiY69b2io9Nqga6RR/wmjhLO4j5gcid
zhq3dA0i5rqD/DjTsFtkiHH0T/0KdCX1EVHdZdVhmRrMBsEA
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:51 2025 by rpki-client