Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/3139302e3130372e3138342e302f32312d3234203d3e20323635373438.roa
File:                     3139302e3130372e3138342e302f32312d3234203d3e20323635373438.roa (raw, json)
Hash identifier:          fNdO3pYhZPjxXT7gsU6/StkShcxtYpfmYdBJjYCiYug=
Subject key identifier:   70:FC:45:3F:01:8A:3B:DA:C5:97:43:B0:38:F4:89:17:83:5B:4B:0A
Certificate issuer:       /CN=EFE00A76A9DE935E6CADE268A729CF197AFF2222
Certificate serial:       71DC15C48DB9C619B1F3972785182FF591705964
Authority key identifier: EF:E0:0A:76:A9:DE:93:5E:6C:AD:E2:68:A7:29:CF:19:7A:FF:22:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/3139302e3130372e3138342e302f32312d3234203d3e20323635373438.roa
Signing time:             Tue 04 Feb 2025 18:27:30 +0000
ROA not before:           Tue 04 Feb 2025 18:22:30 +0000
ROA not after:            Tue 03 Feb 2026 18:27:30 +0000
asID:                     265748
IP address blocks:        190.107.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:dc:15:c4:8d:b9:c6:19:b1:f3:97:27:85:18:2f:f5:91:70:59:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFE00A76A9DE935E6CADE268A729CF197AFF2222
        Validity
            Not Before: Feb  4 18:22:30 2025 GMT
            Not After : Feb  3 18:27:30 2026 GMT
        Subject: CN=70FC453F018A3BDAC59743B038F48917835B4B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:77:26:12:58:e6:48:6c:fe:19:81:a8:6d:
                    67:9a:75:46:0a:73:e1:7b:a4:f7:82:ce:0c:31:a9:
                    8c:3d:15:69:6e:23:eb:d6:de:25:38:de:27:8b:8f:
                    42:bd:75:57:19:97:b4:57:49:8f:da:3b:56:69:e7:
                    ef:67:48:86:0e:f2:2e:85:07:43:63:e8:fa:03:34:
                    03:1f:62:ba:5f:7d:15:ce:d5:49:42:10:94:dc:03:
                    85:58:4f:d2:5b:44:ae:69:f0:cd:5a:ed:aa:ae:6b:
                    c1:b2:65:92:03:31:8c:82:c8:87:d6:1b:8b:9e:68:
                    d0:0e:c4:93:d7:e1:54:c9:cd:fa:37:36:80:53:87:
                    39:40:58:df:43:25:30:66:67:4a:08:f6:a3:44:5e:
                    4c:a3:dc:c1:0d:f9:e3:fb:34:51:16:15:28:a6:cd:
                    56:85:48:dc:f4:86:f1:20:bf:58:8d:03:0d:04:e7:
                    17:e1:68:1b:e7:ba:88:a0:16:5e:05:1a:bf:95:17:
                    e6:7f:bb:7e:b0:6a:e4:7a:20:b7:7d:da:89:82:b9:
                    f8:22:cb:f1:bd:02:fe:e1:3f:4d:92:65:6f:30:33:
                    8d:9f:6a:32:ea:94:a4:bf:a7:2c:7a:2b:14:b4:dd:
                    bf:aa:3e:b3:94:2d:cc:92:7b:98:6a:4f:0a:6c:83:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FC:45:3F:01:8A:3B:DA:C5:97:43:B0:38:F4:89:17:83:5B:4B:0A
            X509v3 Authority Key Identifier:
                keyid:EF:E0:0A:76:A9:DE:93:5E:6C:AD:E2:68:A7:29:CF:19:7A:FF:22:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFE00A76A9DE935E6CADE268A729CF197AFF2222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84D6D1A221006E09DE738B2BDBC1ADA6BE9AE40310117D8219932A83B6CEB081/0/3139302e3130372e3138342e302f32312d3234203d3e20323635373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:57:d7:f5:d1:46:6d:bf:8d:ae:8d:92:7d:80:e5:a9:35:ce:
         5f:aa:89:ab:b2:c7:19:40:9c:44:d4:d3:37:ca:88:3e:5d:96:
         55:29:ea:07:5c:01:63:7b:31:5f:3a:1b:97:95:da:c2:87:f9:
         b1:d6:f8:8d:3a:69:2e:8f:b7:64:60:c4:a4:f1:a2:2c:e2:c9:
         23:fb:f5:9c:9f:5b:0a:88:65:93:6d:46:fe:03:03:78:9c:c4:
         b2:f9:2a:5f:07:32:75:45:5b:92:ce:00:40:f9:e1:1b:82:c4:
         ad:1e:90:5c:f4:6a:c4:0c:6f:9d:04:e1:d5:4d:63:c6:bf:4d:
         30:82:dc:93:99:9f:75:db:74:4b:6d:5c:43:93:85:06:71:d3:
         5e:7f:85:cf:31:af:8c:61:54:4a:d7:d3:e0:d5:12:4b:52:bb:
         7b:cb:8b:8f:9e:8f:d4:f1:ab:48:1b:0a:d3:74:32:e6:c9:44:
         37:bb:8f:60:9b:d6:e3:bc:c7:5b:b4:97:1c:cc:61:f0:ea:c0:
         e5:39:88:01:c9:1e:0b:84:ca:2c:3b:69:6c:6c:fe:16:75:19:
         6d:b6:a4:b9:60:01:b0:76:50:cc:e2:37:22:3a:90:df:d9:b7:
         6e:d4:c8:7e:5f:16:be:28:4e:2d:24:45:82:91:a3:5b:14:2e:
         4d:01:66:c5
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUcdwVxI25xhmx85cnhRgv9ZFwWWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZFMDBBNzZBOURFOTM1RTZDQURFMjY4QTcyOUNGMTk3
QUZGMjIyMjAeFw0yNTAyMDQxODIyMzBaFw0yNjAyMDMxODI3MzBaMDMxMTAvBgNV
BAMTKDcwRkM0NTNGMDE4QTNCREFDNTk3NDNCMDM4RjQ4OTE3ODM1QjRCMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabHcmEljmSGz+GYGobWeadUYK
c+F7pPeCzgwxqYw9FWluI+vW3iU43ieLj0K9dVcZl7RXSY/aO1Zp5+9nSIYO8i6F
B0Nj6PoDNAMfYrpffRXO1UlCEJTcA4VYT9JbRK5p8M1a7aqua8GyZZIDMYyCyIfW
G4ueaNAOxJPX4VTJzfo3NoBThzlAWN9DJTBmZ0oI9qNEXkyj3MEN+eP7NFEWFSim
zVaFSNz0hvEgv1iNAw0E5xfhaBvnuoigFl4FGr+VF+Z/u36wauR6ILd92omCufgi
y/G9Av7hP02SZW8wM42fajLqlKS/pyx6KxS03b+qPrOULcySe5hqTwpsg69ZAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUcPxFPwGKO9rFl0OwOPSJF4NbSwowHwYDVR0j
BBgwFoAU7+AKdqnek15sreJopynPGXr/IiIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NEQ2RDFBMjIxMDA2RTA5REU3MzhCMkJEQkMxQURBNkJF
OUFFNDAzMTAxMTdEODIxOTkzMkE4M0I2Q0VCMDgxLzAvRUZFMDBBNzZBOURFOTM1
RTZDQURFMjY4QTcyOUNGMTk3QUZGMjIyMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRkUwMEE3NkE5REU5MzVFNkNB
REUyNjhBNzI5Q0YxOTdBRkYyMjIyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODRENkQxQTIyMTAwNkUwOURFNzM4QjJCREJDMUFEQTZCRTlBRTQwMzEw
MTE3RDgyMTk5MzJBODNCNkNFQjA4MS8wLzMxMzkzMDJlMzEzMDM3MmUzMTM4MzQy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzUzNzM0Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+
a7gwDQYJKoZIhvcNAQELBQADggEBAJ9X1/XRRm2/ja6Nkn2A5ak1zl+qiauyxxlA
nETU0zfKiD5dllUp6gdcAWN7MV86G5eV2sKH+bHW+I06aS6Pt2RgxKTxoiziySP7
9ZyfWwqIZZNtRv4DA3icxLL5Kl8HMnVFW5LOAED54RuCxK0ekFz0asQMb50E4dVN
Y8a/TTCC3JOZn3XbdEttXEOThQZx015/hc8xr4xhVErX0+DVEktSu3vLi4+ej9Tx
q0gbCtN0MubJRDe7j2Cb1uO8x1u0lxzMYfDqwOU5iAHJHguEyiw7aWxs/hZ1GW22
pLlgAbB2UMziNyI6kN/Zt27UyH5fFr4oTi0kRYKRo1sULk0BZsU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:20 2025 by rpki-client