Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35342e302f32332d3234203d3e203238303735.roa
File:                     3139382e31322e35342e302f32332d3234203d3e203238303735.roa (raw, json)
Hash identifier:          TXM7v83D0Vgi6ZgJC6dL9a+BBVNLCypK9a2P2s4vZNA=
Subject key identifier:   B9:31:CB:E1:92:51:5A:86:5E:87:89:F4:A1:8B:E9:86:3E:F7:2C:F2
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       043B08481E34DA6386646C766C5B45DAD76442A2
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35342e302f32332d3234203d3e203238303735.roa
Signing time:             Tue 04 Feb 2025 19:58:59 +0000
ROA not before:           Tue 04 Feb 2025 19:53:59 +0000
ROA not after:            Tue 03 Feb 2026 19:58:59 +0000
asID:                     28075
IP address blocks:        198.12.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3b:08:48:1e:34:da:63:86:64:6c:76:6c:5b:45:da:d7:64:42:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Feb  4 19:53:59 2025 GMT
            Not After : Feb  3 19:58:59 2026 GMT
        Subject: CN=B931CBE192515A865E8789F4A18BE9863EF72CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:e8:a7:bb:86:fc:ee:ff:ed:d5:4c:e6:3d:
                    ef:06:ee:78:61:7d:c3:0f:7b:ce:68:69:59:04:93:
                    e4:a5:f0:b6:22:f3:8e:69:9c:cf:30:dc:a3:a2:a9:
                    e7:95:e0:15:ed:fd:5d:74:09:d7:b8:2b:a1:90:c7:
                    32:46:8b:47:3e:64:d2:ea:27:5f:4e:05:f8:d5:80:
                    5d:42:cc:35:8e:68:91:6b:d5:ba:35:26:16:7b:28:
                    86:79:0e:74:78:99:66:31:28:c8:b5:47:81:9d:b2:
                    52:16:c3:f2:a2:3e:f1:90:e9:f0:12:5f:54:4f:1b:
                    f5:20:ea:73:7e:ba:bd:22:f5:7d:29:69:0f:d5:62:
                    96:73:51:f4:15:9c:f2:b2:a8:c8:15:b8:85:38:79:
                    38:e2:d9:af:2a:b6:33:b2:f4:de:a4:66:c1:13:12:
                    1d:23:4f:69:10:38:4a:50:74:31:0d:3d:5a:b8:fc:
                    b5:c6:4a:de:2e:27:e4:85:49:be:c9:53:21:85:47:
                    27:30:0a:01:df:75:d6:cd:ab:e1:c8:7c:d4:a1:4f:
                    3d:10:3e:b5:52:a5:af:be:7d:5f:d0:f7:0e:ce:98:
                    8b:47:25:41:17:2b:ba:d5:34:1c:6b:49:d3:31:6b:
                    f1:0c:f3:a1:d2:15:82:e1:6d:0e:ef:17:f2:6a:65:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:31:CB:E1:92:51:5A:86:5E:87:89:F4:A1:8B:E9:86:3E:F7:2C:F2
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139382e31322e35342e302f32332d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:20:06:d2:0a:26:f3:b7:ed:d8:03:b9:85:cd:ce:37:e1:
         b7:d0:72:33:87:cb:9e:9a:4c:7f:4b:35:01:0c:58:ab:56:a8:
         65:6e:66:73:fc:1b:eb:5a:88:cb:e9:4d:82:f6:4a:6a:3a:ea:
         fe:ba:91:56:49:87:57:5b:de:1a:14:31:cf:2b:9b:51:72:df:
         0d:57:07:f4:48:c4:c0:14:f8:b1:0e:3e:66:50:7a:c4:ff:f7:
         38:68:e8:4c:9b:fb:da:f2:c0:7e:a3:0e:df:d9:c3:3a:42:a3:
         fc:9b:0a:8c:ee:83:9f:83:4b:c6:7a:5a:97:ad:76:e0:92:0b:
         31:bb:b8:25:fe:f4:69:d2:38:ff:7f:6a:0c:34:3d:a0:db:32:
         bf:70:4f:cc:f9:27:11:e0:8f:6a:10:d1:64:c4:74:8e:41:9c:
         f8:85:ef:41:fd:d1:ff:45:e6:1a:63:3f:a2:7d:5b:c4:b6:99:
         04:4a:e8:e3:a2:48:03:f9:e7:e0:b0:2b:2c:7c:07:1d:20:76:
         1a:69:7a:e1:76:5d:67:02:43:6b:45:28:a9:7d:c0:80:f4:8a:
         cf:28:53:08:21:d5:9a:95:d9:0e:4c:d0:0a:21:bd:dd:78:72:
         bf:50:a6:a2:40:59:a2:ea:f0:65:9a:d0:03:03:78:cd:73:23:
         a7:92:b4:7a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUBDsISB402mOGZGx2bFtF2tdkQqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NDN0RGQjJDN0M5RkNGMkYxMTQwNjE0NzZFQ0I4N0I1
NzNBNEUxODAeFw0yNTAyMDQxOTUzNTlaFw0yNjAyMDMxOTU4NTlaMDMxMTAvBgNV
BAMTKEI5MzFDQkUxOTI1MTVBODY1RTg3ODlGNEExOEJFOTg2M0VGNzJDRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95einu4b87v/t1UzmPe8G7nhh
fcMPe85oaVkEk+Sl8LYi845pnM8w3KOiqeeV4BXt/V10Cde4K6GQxzJGi0c+ZNLq
J19OBfjVgF1CzDWOaJFr1bo1JhZ7KIZ5DnR4mWYxKMi1R4GdslIWw/KiPvGQ6fAS
X1RPG/Ug6nN+ur0i9X0paQ/VYpZzUfQVnPKyqMgVuIU4eTji2a8qtjOy9N6kZsET
Eh0jT2kQOEpQdDENPVq4/LXGSt4uJ+SFSb7JUyGFRycwCgHfddbNq+HIfNShTz0Q
PrVSpa++fV/Q9w7OmItHJUEXK7rVNBxrSdMxa/EM86HSFYLhbQ7vF/JqZWZtAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUuTHL4ZJRWoZeh4n0oYvphj73LPIwHwYDVR0j
BBgwFoAUzMffssfJ/PLxFAYUduy4e1c6ThgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QjQ0OEIyRjk5Rjc1MERFRTRGQjM4MjBCRkRFRUE1QzA3
MEFDNzhBQzFEREVBRTRCQTVCNDcyQjU4MERBMjY0LzAvQ0NDN0RGQjJDN0M5RkNG
MkYxMTQwNjE0NzZFQ0I4N0I1NzNBNEUxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQ0M3REZCMkM3QzlGQ0YyRjEx
NDA2MTQ3NkVDQjg3QjU3M0E0RTE4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkI0NDhCMkY5OUY3NTBERUU0RkIzODIwQkZERUVBNUMwNzBBQzc4QUMx
RERFQUU0QkE1QjQ3MkI1ODBEQTI2NC8wLzMxMzkzODJlMzEzMjJlMzUzNDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzgzMDM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHGDDYwDQYJ
KoZIhvcNAQELBQADggEBAHwhIAbSCibzt+3YA7mFzc434bfQcjOHy56aTH9LNQEM
WKtWqGVuZnP8G+taiMvpTYL2Smo66v66kVZJh1db3hoUMc8rm1Fy3w1XB/RIxMAU
+LEOPmZQesT/9zho6Eyb+9rywH6jDt/ZwzpCo/ybCozug5+DS8Z6WpetduCSCzG7
uCX+9GnSOP9/agw0PaDbMr9wT8z5JxHgj2oQ0WTEdI5BnPiF70H90f9F5hpjP6J9
W8S2mQRK6OOiSAP55+CwKyx8Bx0gdhppeuF2XWcCQ2tFKKl9wID0is8oUwgh1ZqV
2Q5M0Aohvd14cr9QpqJAWaLq8GWa0AMDeM1zI6eStHo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:01 2025 by rpki-client