Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130352e302f32342d3234203d3e20323635383339.roa
File:                     3230312e3134382e3130352e302f32342d3234203d3e20323635383339.roa (raw, json)
Hash identifier:          79pVDInItkbXY6fzHEPNCRwvz3moKC9Jv2bvzMaaHR8=
Subject key identifier:   A0:0E:36:C2:65:9C:20:E3:5E:E0:DB:B2:1A:FB:74:03:E5:C6:23:B8
Certificate issuer:       /CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
Certificate serial:       5EFAD03B4062E217B0107BE512201FBDB9465F04
Authority key identifier: B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130352e302f32342d3234203d3e20323635383339.roa
Signing time:             Fri 14 Mar 2025 16:30:00 +0000
ROA not before:           Fri 14 Mar 2025 16:25:00 +0000
ROA not after:            Fri 13 Mar 2026 16:30:00 +0000
asID:                     265839
IP address blocks:        201.148.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fa:d0:3b:40:62:e2:17:b0:10:7b:e5:12:20:1f:bd:b9:46:5f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
        Validity
            Not Before: Mar 14 16:25:00 2025 GMT
            Not After : Mar 13 16:30:00 2026 GMT
        Subject: CN=A00E36C2659C20E35EE0DBB21AFB7403E5C623B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:3e:0c:8e:1f:98:5b:11:03:98:59:ed:ad:
                    f0:f9:80:7a:d7:1b:52:b7:cc:b1:fd:06:cd:39:a4:
                    2e:4b:a1:5e:08:c8:87:2f:bf:91:89:de:bd:9d:48:
                    af:80:29:3e:81:18:48:d3:b7:4c:40:c5:16:94:33:
                    fe:4c:d2:9f:59:db:23:4b:c3:33:26:50:0f:32:e3:
                    ee:37:c3:92:fe:79:ff:4f:bb:87:ac:7b:15:98:91:
                    9a:f1:00:e5:94:55:65:71:ca:6d:03:81:63:f5:0d:
                    dc:11:69:ed:e5:3d:f9:23:1a:5b:bc:51:3b:46:f3:
                    93:da:f3:2c:21:ee:75:bb:f3:78:06:7f:9d:5e:f7:
                    35:9f:71:3b:23:f8:2e:55:b5:54:2b:38:f1:ac:7c:
                    79:4e:b6:dc:44:74:12:dc:9c:72:01:03:ff:6d:bb:
                    0d:ce:c5:c1:93:39:c5:3c:bd:c7:b1:32:c5:60:53:
                    d3:57:c0:4d:4e:c2:eb:7c:82:69:14:f7:bb:b7:4c:
                    a4:4c:97:a0:10:75:a2:45:34:8c:2e:eb:17:96:43:
                    47:6b:7c:8c:ab:aa:64:67:57:a4:94:dc:ea:b2:83:
                    f8:09:1a:05:df:74:6c:cb:50:41:4b:26:d3:6a:e0:
                    07:7c:38:ee:8d:69:c9:38:04:74:6b:e3:3a:8e:f4:
                    51:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:36:C2:65:9C:20:E3:5E:E0:DB:B2:1A:FB:74:03:E5:C6:23:B8
            X509v3 Authority Key Identifier:
                keyid:B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130352e302f32342d3234203d3e20323635383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:9b:19:de:80:55:d9:1b:5b:1b:af:46:b8:c9:c5:75:08:5d:
         8e:94:53:25:bf:15:72:1b:14:be:70:0b:f5:52:a4:bb:d9:9f:
         c0:2c:2d:41:b7:3c:85:d9:e8:9e:77:25:69:ce:74:da:51:e5:
         20:e5:81:8a:b8:d6:82:47:16:fc:57:eb:be:cb:f4:b8:1e:96:
         ee:77:11:d0:5a:e0:f5:c8:ac:cf:6b:41:8d:06:ee:e9:4e:59:
         e3:6c:3f:13:34:42:28:60:d3:e8:b3:99:7b:31:0d:d2:c0:51:
         8f:3a:8f:dd:e0:40:22:0c:8c:c4:5e:81:07:a0:2c:19:43:0f:
         c0:e0:87:4a:43:79:1b:01:78:37:86:b7:df:28:45:ff:70:1a:
         e9:b9:e5:13:da:02:6e:e1:94:a2:49:2a:43:95:ca:fb:ae:21:
         6b:fa:5d:a4:45:16:3c:68:92:20:0b:b0:ce:01:fd:c9:26:df:
         6e:15:ae:82:78:e9:50:75:a3:c6:1b:1a:4c:55:63:37:d8:8f:
         7a:12:06:ae:de:ce:40:23:f1:1d:fc:68:6a:72:30:93:1a:45:
         9c:62:20:da:1f:1b:ad:c1:77:85:81:19:8c:04:3e:f4:dc:9c:
         4d:b3:ca:28:3f:86:d2:86:5e:f4:4a:aa:1a:66:34:82:b9:e5:
         ef:31:9a:8c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUXvrQO0Bi4hewEHvlEiAfvblGXwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE2Nzc0NUQzQzEzODkwQ0MyN0VGNDY5N0JCMDA1OEYy
QzIwNzZDODAeFw0yNTAzMTQxNjI1MDBaFw0yNjAzMTMxNjMwMDBaMDMxMTAvBgNV
BAMTKEEwMEUzNkMyNjU5QzIwRTM1RUUwREJCMjFBRkI3NDAzRTVDNjIzQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIz4Mjh+YWxEDmFntrfD5gHrX
G1K3zLH9Bs05pC5LoV4IyIcvv5GJ3r2dSK+AKT6BGEjTt0xAxRaUM/5M0p9Z2yNL
wzMmUA8y4+43w5L+ef9Pu4esexWYkZrxAOWUVWVxym0DgWP1DdwRae3lPfkjGlu8
UTtG85Pa8ywh7nW783gGf51e9zWfcTsj+C5VtVQrOPGsfHlOttxEdBLcnHIBA/9t
uw3OxcGTOcU8vcexMsVgU9NXwE1Owut8gmkU97u3TKRMl6AQdaJFNIwu6xeWQ0dr
fIyrqmRnV6SU3Oqyg/gJGgXfdGzLUEFLJtNq4Ad8OO6Nack4BHRr4zqO9FG9AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUoA42wmWcIONe4NuyGvt0A+XGI7gwHwYDVR0j
BBgwFoAUsWd0XTwTiQzCfvRpe7AFjywgdsgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83ODg0RUQ3QzM0ODBFRjRDQTk4ODg4ODM2RDQwNkU5MDk3
QTM4QUE5MzhEQjZEQjFGMDAzRURBRDQ1NTZDNTcxLzAvQjE2Nzc0NUQzQzEzODkw
Q0MyN0VGNDY5N0JCMDA1OEYyQzIwNzZDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTY3NzQ1RDNDMTM4OTBDQzI3
RUY0Njk3QkIwMDU4RjJDMjA3NkM4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzg4NEVEN0MzNDgwRUY0Q0E5ODg4ODgzNkQ0MDZFOTA5N0EzOEFBOTM4
REI2REIxRjAwM0VEQUQ0NTU2QzU3MS8wLzMyMzAzMTJlMzEzNDM4MmUzMTMwMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzODMzMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJ
lGkwDQYJKoZIhvcNAQELBQADggEBAG6bGd6AVdkbWxuvRrjJxXUIXY6UUyW/FXIb
FL5wC/VSpLvZn8AsLUG3PIXZ6J53JWnOdNpR5SDlgYq41oJHFvxX677L9Lgelu53
EdBa4PXIrM9rQY0G7ulOWeNsPxM0Qihg0+izmXsxDdLAUY86j93gQCIMjMRegQeg
LBlDD8Dgh0pDeRsBeDeGt98oRf9wGum55RPaAm7hlKJJKkOVyvuuIWv6XaRFFjxo
kiALsM4B/ckm324VroJ46VB1o8YbGkxVYzfYj3oSBq7ezkAj8R38aGpyMJMaRZxi
INofG63Bd4WBGYwEPvTcnE2zyig/htKGXvRKqhpmNIK55e8xmow=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:03 2025 by rpki-client