Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS8151.roa
File:                     AS8151.roa (raw, json)
Hash identifier:          dDLYVlxI1PpiuPk11Ug1DsH8fI9vmtf0H9LK7uamDqc=
Subject key identifier:   CB:61:1A:10:4B:D1:B2:CC:46:1A:33:46:84:9F:BA:C6:24:8E:5A:03
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       2131762C5666605F9C3AB9AFE3549F09F541E5E7
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS8151.roa
Signing time:             Wed 29 Jan 2025 17:30:02 +0000
ROA not before:           Wed 29 Jan 2025 17:25:02 +0000
ROA not after:            Wed 28 Jan 2026 17:30:02 +0000
asID:                     8151
IP address blocks:        200.94.182.0/24 maxlen: 24
                          201.131.248.0/24 maxlen: 24
                          201.131.250.0/24 maxlen: 24
                          207.248.65.0/24 maxlen: 24
                          207.248.68.0/24 maxlen: 24
                          2001:1250::/44 maxlen: 44
                          2001:1250:1000::/44 maxlen: 44
                          2001:1250:2000::/44 maxlen: 44
                          2001:1250:3000::/44 maxlen: 44
                          2001:1250:a000::/44 maxlen: 44
                          2001:1250:b000::/44 maxlen: 44
                          2001:1250:c000::/44 maxlen: 44
                          2001:1250:e100::/44 maxlen: 44
                          2001:1250:e200::/44 maxlen: 44
                          2001:1250:e300::/44 maxlen: 44
                          2001:1250:ffc0::/44 maxlen: 44
                          2001:1250:fff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 01:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:31:76:2c:56:66:60:5f:9c:3a:b9:af:e3:54:9f:09:f5:41:e5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Jan 29 17:25:02 2025 GMT
            Not After : Jan 28 17:30:02 2026 GMT
        Subject: CN=CB611A104BD1B2CC461A3346849FBAC6248E5A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d4:1d:76:49:1b:76:99:fa:39:c0:3a:2d:00:
                    f7:16:ab:be:31:6f:5f:ad:8a:b3:79:5c:21:15:15:
                    6b:73:ef:a4:e4:55:91:da:e6:62:a3:d6:19:ca:f2:
                    88:61:8d:c2:62:a8:22:4f:d4:13:4e:c7:a7:4f:ca:
                    82:1b:3b:d0:a7:96:f8:d3:b8:04:34:37:76:1d:b8:
                    38:a4:c0:66:e9:df:67:3a:8f:0c:ac:64:3d:bd:c6:
                    28:53:f6:03:13:90:c5:ff:b4:61:6b:07:ba:5c:d4:
                    0a:b1:0f:0d:07:51:4f:2d:ea:8a:f2:37:2f:f1:cd:
                    7d:df:3c:97:a9:fd:04:b1:42:5d:82:69:14:fc:ca:
                    79:7b:4b:93:79:39:f2:31:10:da:7c:6d:e5:7a:e4:
                    d6:f4:ef:7d:77:ed:df:fa:c8:31:23:99:54:08:7c:
                    e6:b4:06:cb:86:1b:24:b3:07:18:59:b0:e0:bd:20:
                    a0:2a:a5:95:e0:af:fc:2b:5d:14:08:d1:d4:5a:09:
                    9a:3a:cd:4a:d0:ec:90:38:bb:c8:93:31:62:60:f3:
                    f1:ba:7e:b1:cd:b0:9d:54:80:cf:85:39:7d:18:c8:
                    e5:a0:de:3a:17:4b:be:50:bc:e1:1c:b6:77:d4:15:
                    87:e2:01:8c:e8:0e:bc:6d:13:0f:2e:19:23:b8:8b:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:61:1A:10:4B:D1:B2:CC:46:1A:33:46:84:9F:BA:C6:24:8E:5A:03
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS8151.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.182.0/24
                  201.131.248.0/24
                  201.131.250.0/24
                  207.248.65.0/24
                  207.248.68.0/24
                IPv6:
                  2001:1250::/44
                  2001:1250:1000::/44
                  2001:1250:2000::/44
                  2001:1250:3000::/44
                  2001:1250:a000::/44
                  2001:1250:b000::/44
                  2001:1250:c000::/44
                  2001:1250:e100::/44
                  2001:1250:e200::/44
                  2001:1250:e300::/44
                  2001:1250:ffc0::/44
                  2001:1250:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:6c:3e:8a:e0:04:33:4c:4b:26:dd:16:10:9d:70:0a:95:2d:
         0b:33:38:a8:c4:c0:6a:ab:57:d3:01:8a:ca:a9:d6:85:3d:b7:
         43:58:1f:d6:4e:d7:eb:fe:79:de:e7:77:ee:bf:e7:6a:c9:bd:
         7c:ea:98:0b:e0:f8:92:b0:77:0a:fe:78:9d:37:5d:36:54:2e:
         b6:d6:29:6a:11:57:86:10:1e:3d:9a:94:9c:49:4e:45:1a:81:
         32:1f:91:5e:55:a2:1d:b9:33:f2:60:fc:20:4c:2e:92:a7:f1:
         97:3a:52:3c:26:ab:fa:1b:b0:ba:aa:1d:1b:48:db:94:3b:6c:
         7e:cf:1b:63:26:6b:b4:8d:6a:33:2c:f9:b0:f0:f8:ef:c1:82:
         20:c7:df:a1:15:77:1e:31:ef:39:8a:2f:e9:ab:dc:4b:f1:b1:
         e5:6c:47:70:e3:69:a6:e4:c1:33:2a:b6:2f:59:95:00:03:ab:
         ca:f6:f9:45:05:29:cc:ee:aa:34:05:74:f4:ca:23:66:a3:04:
         9b:37:23:0d:57:db:f3:8d:45:59:b4:90:66:9e:26:09:5a:19:
         c8:3f:c9:5c:1a:11:0f:1f:9f:f5:62:ab:d7:77:9a:0e:4b:c0:
         2d:8c:ec:dd:78:55:e8:cf:fb:57:ff:d0:ee:49:59:34:f2:26:
         22:92:c5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:50:10 2025 by rpki-client