Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e31322e302f32332d3233203d3e203332303938.roa
File:                     3138372e3235312e31322e302f32332d3233203d3e203332303938.roa (raw, json)
Hash identifier:          2+RIdlvU3UJlbSLtvg+aNRr+Hc147XX8JcMfLHp3NLM=
Subject key identifier:   2F:CE:B6:1B:F7:D4:E7:B6:E6:22:B3:04:A4:8B:48:62:F1:69:C7:96
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       5A12654934BE2E160102CE22BD9E63787CB82BA0
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e31322e302f32332d3233203d3e203332303938.roa
Signing time:             Tue 04 Feb 2025 18:47:59 +0000
ROA not before:           Tue 04 Feb 2025 18:42:59 +0000
ROA not after:            Tue 03 Feb 2026 18:47:59 +0000
asID:                     32098
IP address blocks:        187.251.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:12:65:49:34:be:2e:16:01:02:ce:22:bd:9e:63:78:7c:b8:2b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Feb  4 18:42:59 2025 GMT
            Not After : Feb  3 18:47:59 2026 GMT
        Subject: CN=2FCEB61BF7D4E7B6E622B304A48B4862F169C796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:42:47:f5:73:08:68:8f:88:53:81:c5:df:3f:
                    e7:9a:b8:e3:e5:7d:ad:f8:3b:59:d6:71:29:2e:33:
                    c6:ce:59:ce:2d:8a:55:d4:da:1b:88:d0:56:05:bb:
                    49:ae:e3:fa:ce:3f:b2:dd:ea:44:9a:43:65:36:4b:
                    6d:b6:aa:5e:16:57:ba:22:a1:a8:8f:86:51:44:fd:
                    1b:b9:68:e1:6a:03:30:6b:e7:8a:08:27:e0:4e:b4:
                    5c:53:c8:9e:1d:7e:ad:87:50:a3:d7:66:fd:a9:50:
                    c0:c8:03:bc:0a:e1:32:bd:74:b1:2c:d1:8c:d0:eb:
                    b7:0c:ae:84:35:60:72:88:8c:d6:4e:9f:d6:b5:08:
                    4e:d0:c1:34:e3:5b:7d:9c:d0:51:e9:af:0c:d4:e0:
                    96:b0:07:f0:f5:9c:61:a3:d6:89:d5:da:83:66:8e:
                    f4:d6:6b:79:85:06:ca:68:15:64:ea:af:a4:2e:66:
                    f6:48:16:7d:0d:d7:a0:c9:86:ad:32:b8:9e:0c:18:
                    21:4f:34:f7:e9:c5:a0:07:18:25:fa:d0:7e:ac:2c:
                    19:24:d0:82:4a:30:32:17:8b:1a:eb:04:42:a3:ef:
                    37:df:b3:0b:f2:f3:0a:dd:10:69:cb:91:30:f6:5c:
                    08:31:da:80:b8:18:d9:e1:9b:d5:e3:37:8c:47:22:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CE:B6:1B:F7:D4:E7:B6:E6:22:B3:04:A4:8B:48:62:F1:69:C7:96
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e31322e302f32332d3233203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:17:f4:96:0c:3f:f3:70:36:6d:45:89:a0:b2:05:ce:87:8f:
         19:14:1d:4f:26:22:6f:6f:88:17:08:7d:fd:03:52:7d:5f:3d:
         1c:32:cc:81:22:60:71:a2:4b:fc:07:aa:c3:73:07:72:0c:79:
         86:5f:e1:9a:5b:5e:82:d0:cd:b3:72:2a:1c:60:57:b6:65:b4:
         d0:27:e0:8f:3d:3a:ae:2b:ed:99:c7:d6:98:67:56:83:ef:19:
         8d:78:76:b2:bf:8c:88:06:da:28:6e:f9:95:35:bd:3a:f0:ed:
         11:83:5d:cf:6a:4b:79:61:dd:53:fd:84:8a:84:18:ad:65:5d:
         38:f8:f9:06:0e:4d:e3:34:40:12:6e:aa:06:10:1c:38:33:76:
         ae:ee:c0:5c:8c:bd:45:1d:c4:73:82:1e:3c:ac:a8:3d:6e:80:
         91:18:0a:4d:99:a9:3f:17:24:c8:0d:7c:3d:93:e0:06:14:6e:
         77:5f:98:60:94:a3:8a:d8:a9:7c:5d:da:56:0b:69:16:5d:2b:
         61:cb:ef:ea:e8:e0:b9:c6:9b:af:b6:ac:bf:63:6e:e3:fd:e5:
         37:8c:da:3e:1d:9f:40:34:6a:e8:81:20:da:19:d5:11:04:0c:
         bd:79:a4:bb:09:04:b2:24:cb:4b:51:e6:a3:d7:74:b7:5b:6f:
         e5:87:56:b8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWhJlSTS+LhYBAs4ivZ5jeHy4K6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0
QTA3MEQzODAeFw0yNTAyMDQxODQyNTlaFw0yNjAyMDMxODQ3NTlaMDMxMTAvBgNV
BAMTKDJGQ0VCNjFCRjdENEU3QjZFNjIyQjMwNEE0OEI0ODYyRjE2OUM3OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Qkf1cwhoj4hTgcXfP+eauOPl
fa34O1nWcSkuM8bOWc4tilXU2huI0FYFu0mu4/rOP7Ld6kSaQ2U2S222ql4WV7oi
oaiPhlFE/Ru5aOFqAzBr54oIJ+BOtFxTyJ4dfq2HUKPXZv2pUMDIA7wK4TK9dLEs
0YzQ67cMroQ1YHKIjNZOn9a1CE7QwTTjW32c0FHprwzU4JawB/D1nGGj1onV2oNm
jvTWa3mFBspoFWTqr6QuZvZIFn0N16DJhq0yuJ4MGCFPNPfpxaAHGCX60H6sLBkk
0IJKMDIXixrrBEKj7zffswvy8wrdEGnLkTD2XAgx2oC4GNnhm9XjN4xHIqyNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUL862G/fU57bmIrMEpItIYvFpx5YwHwYDVR0j
BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1
NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND
MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1
QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF
NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMxMzgzNzJlMzIzNTMxMmUzMTMyMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzMjMwMzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbv7DDAN
BgkqhkiG9w0BAQsFAAOCAQEAfhf0lgw/83A2bUWJoLIFzoePGRQdTyYib2+IFwh9
/QNSfV89HDLMgSJgcaJL/Aeqw3MHcgx5hl/hmltegtDNs3IqHGBXtmW00Cfgjz06
rivtmcfWmGdWg+8ZjXh2sr+MiAbaKG75lTW9OvDtEYNdz2pLeWHdU/2EioQYrWVd
OPj5Bg5N4zRAEm6qBhAcODN2ru7AXIy9RR3Ec4IePKyoPW6AkRgKTZmpPxckyA18
PZPgBhRud1+YYJSjitipfF3aVgtpFl0rYcvv6ujgucabr7asv2Nu4/3lN4zaPh2f
QDRq6IEg2hnVEQQMvXmkuwkEsiTLS1Hmo9d0t1tv5YdWuA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:07:56 2025 by rpki-client