Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137392e35312e38302e302f32302d3232203d3e203134323332.roa
File:                     3137392e35312e38302e302f32302d3232203d3e203134323332.roa (raw, json)
Hash identifier:          URsxKdPWmPTpbzTstBl3tR+4d7ojPMlrLyAYBA+SA4Q=
Subject key identifier:   4D:5D:DD:A6:27:7A:B4:E8:90:D4:39:ED:0E:7B:4D:24:38:45:9A:64
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       5041987E6D08E1EC3E976F67C8BA86F38CCBFBCD
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137392e35312e38302e302f32302d3232203d3e203134323332.roa
Signing time:             Tue 04 Feb 2025 18:29:36 +0000
ROA not before:           Tue 04 Feb 2025 18:24:36 +0000
ROA not after:            Tue 03 Feb 2026 18:29:36 +0000
asID:                     14232
IP address blocks:        179.51.80.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:41:98:7e:6d:08:e1:ec:3e:97:6f:67:c8:ba:86:f3:8c:cb:fb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Feb  4 18:24:36 2025 GMT
            Not After : Feb  3 18:29:36 2026 GMT
        Subject: CN=4D5DDDA6277AB4E890D439ED0E7B4D2438459A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:38:03:a9:e6:2d:cc:20:0b:65:a7:93:7b:
                    ae:21:8a:45:e3:87:4e:50:b2:9e:27:46:e2:f1:27:
                    6d:10:56:67:70:70:86:12:1b:71:e8:35:e2:53:6e:
                    e7:03:5b:46:b5:20:4f:7f:7f:f9:98:8a:23:e0:91:
                    81:fc:91:ea:b0:bd:0d:8b:ff:38:f6:38:9f:9b:b4:
                    70:d2:d6:74:c4:52:3f:ce:1e:47:b4:f1:2f:6b:8a:
                    25:82:cb:73:88:23:e7:74:7f:59:f4:93:39:4e:22:
                    d8:76:1b:69:d0:5f:79:9a:2f:a3:8a:98:7c:74:c3:
                    4a:8c:65:66:02:c7:aa:00:81:9b:fb:88:8b:05:0a:
                    44:40:94:5f:6e:2f:97:d7:04:04:ac:b9:f6:ea:fa:
                    b0:39:ac:ad:31:b0:94:82:21:c1:8b:bf:c9:31:a3:
                    e0:23:39:54:7c:3e:44:b5:be:19:0e:ad:a2:f0:7e:
                    62:91:a7:4a:69:46:8d:62:2a:d1:ac:fc:45:8b:8f:
                    e7:d3:38:4b:a4:6a:41:56:31:2a:47:13:8a:d5:d6:
                    bf:e7:ee:c4:b1:4d:b7:84:a1:70:5b:9d:bf:4d:f6:
                    cb:ea:7b:d3:45:18:ce:2e:0a:8b:45:dc:02:03:01:
                    26:28:28:2e:cf:16:45:36:d3:df:d2:75:7f:3f:dc:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5D:DD:A6:27:7A:B4:E8:90:D4:39:ED:0E:7B:4D:24:38:45:9A:64
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137392e35312e38302e302f32302d3232203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:f5:63:11:92:2a:aa:f7:dd:52:fb:b9:ac:d0:4f:9e:0a:
         fa:0e:8d:c6:72:ed:e0:cc:cc:f2:96:25:21:4b:f3:9a:bd:19:
         e7:33:36:e0:2a:8a:ad:ed:dc:8a:27:a8:e5:57:b0:9c:32:4b:
         6d:f5:6b:6b:fd:cb:65:bb:ab:b6:a0:5d:bb:81:35:eb:43:24:
         19:03:58:68:dc:43:99:4b:3b:61:7b:1c:93:75:aa:5d:8d:22:
         23:26:65:b0:3c:4f:74:af:6c:01:76:7b:7a:09:28:73:14:21:
         40:80:9b:21:02:d1:4b:97:65:bb:e4:75:d6:a9:52:f5:6e:f1:
         63:42:28:68:9b:18:5f:e6:72:0d:d9:f6:32:6f:5d:2e:e1:3f:
         43:c8:ac:b6:e4:d6:09:35:9d:5c:34:2d:12:b2:13:f2:70:71:
         78:76:d2:cc:8f:9b:c9:b3:7f:a2:9a:6c:ee:64:2a:8b:27:73:
         ea:5c:94:6d:1b:c8:7d:71:23:2e:fb:37:57:e0:f2:de:25:4f:
         bf:06:b4:f9:6c:6b:c4:09:a1:ad:7f:e1:1c:12:fa:0d:a1:35:
         18:b3:cf:25:91:11:c5:22:80:c9:2d:07:7f:69:9f:63:99:04:
         cf:45:04:06:46:91:aa:6e:56:cc:cd:f4:24:66:71:df:c6:73:
         6d:61:29:35
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUEGYfm0I4ew+l29nyLqG84zL+80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE5RjE2NDhBM0Q4RTQ5RTFCNTI4NEY4NkNFMUMzNDhG
M0E3MjhBNTAeFw0yNTAyMDQxODI0MzZaFw0yNjAyMDMxODI5MzZaMDMxMTAvBgNV
BAMTKDRENUREREE2Mjc3QUI0RTg5MEQ0MzlFRDBFN0I0RDI0Mzg0NTlBNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH+jgDqeYtzCALZaeTe64hikXj
h05Qsp4nRuLxJ20QVmdwcIYSG3HoNeJTbucDW0a1IE9/f/mYiiPgkYH8keqwvQ2L
/zj2OJ+btHDS1nTEUj/OHke08S9riiWCy3OII+d0f1n0kzlOIth2G2nQX3maL6OK
mHx0w0qMZWYCx6oAgZv7iIsFCkRAlF9uL5fXBASsufbq+rA5rK0xsJSCIcGLv8kx
o+AjOVR8PkS1vhkOraLwfmKRp0ppRo1iKtGs/EWLj+fTOEukakFWMSpHE4rV1r/n
7sSxTbeEoXBbnb9N9svqe9NFGM4uCotF3AIDASYoKC7PFkU209/SdX8/3KwdAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUTV3dpid6tOiQ1DntDntNJDhFmmQwHwYDVR0j
BBgwFoAUmp8WSKPY5J4bUoT4bOHDSPOnKKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RThENTBFMkMxNkJBNDczOTgyMzkxMENGMkYwNDlGRTgx
OTI3QzM0OEI5RTg2RDk3NTZCQzYzQjhENDJFRUFBLzAvOUE5RjE2NDhBM0Q4RTQ5
RTFCNTI4NEY4NkNFMUMzNDhGM0E3MjhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTlGMTY0OEEzRDhFNDlFMUI1
Mjg0Rjg2Q0UxQzM0OEYzQTcyOEE1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4RDUwRTJDMTZCQTQ3Mzk4MjM5MTBDRjJGMDQ5RkU4MTkyN0MzNDhC
OUU4NkQ5NzU2QkM2M0I4RDQyRUVBQS8wLzMxMzczOTJlMzUzMTJlMzgzMDJlMzAy
ZjMyMzAyZDMyMzIyMDNkM2UyMDMxMzQzMjMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASzM1AwDQYJ
KoZIhvcNAQELBQADggEBAJO29WMRkiqq991S+7ms0E+eCvoOjcZy7eDMzPKWJSFL
85q9GeczNuAqiq3t3IonqOVXsJwyS231a2v9y2W7q7agXbuBNetDJBkDWGjcQ5lL
O2F7HJN1ql2NIiMmZbA8T3SvbAF2e3oJKHMUIUCAmyEC0UuXZbvkddapUvVu8WNC
KGibGF/mcg3Z9jJvXS7hP0PIrLbk1gk1nVw0LRKyE/JwcXh20syPm8mzf6KabO5k
Kosnc+pclG0byH1xIy77N1fg8t4lT78GtPlsa8QJoa1/4RwS+g2hNRizzyWREcUi
gMktB39pn2OZBM9FBAZGkapuVszN9CRmcd/Gc21hKTU=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:26:35 2025 by rpki-client