Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/853C5A579860D53D932FCDF506CF811478958014DA919059A7F8E869788191BE/0/3230312e3232312e3131322e302f32322d3234203d3e20323731373931.roa
File:                     3230312e3232312e3131322e302f32322d3234203d3e20323731373931.roa (raw, json)
Hash identifier:          ff+MvhjljehnXY+Zc679zRjPEy5RhJTNu/6QwNGZguU=
Subject key identifier:   CB:84:37:C8:D0:29:77:19:96:26:73:2C:1C:F8:06:37:FF:ED:7C:CA
Certificate issuer:       /CN=F15D2B844C842495D2E1556A76AEFC1667610B87
Certificate serial:       5250DD0EA27E3EB1445A9F887A465C893AA99D75
Authority key identifier: F1:5D:2B:84:4C:84:24:95:D2:E1:55:6A:76:AE:FC:16:67:61:0B:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F15D2B844C842495D2E1556A76AEFC1667610B87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/853C5A579860D53D932FCDF506CF811478958014DA919059A7F8E869788191BE/0/3230312e3232312e3131322e302f32322d3234203d3e20323731373931.roa
Signing time:             Tue 04 Feb 2025 18:03:33 +0000
ROA not before:           Tue 04 Feb 2025 17:58:33 +0000
ROA not after:            Tue 03 Feb 2026 18:03:33 +0000
asID:                     271791
IP address blocks:        201.221.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/853C5A579860D53D932FCDF506CF811478958014DA919059A7F8E869788191BE/0/F15D2B844C842495D2E1556A76AEFC1667610B87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/853C5A579860D53D932FCDF506CF811478958014DA919059A7F8E869788191BE/0/F15D2B844C842495D2E1556A76AEFC1667610B87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F15D2B844C842495D2E1556A76AEFC1667610B87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:50:dd:0e:a2:7e:3e:b1:44:5a:9f:88:7a:46:5c:89:3a:a9:9d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15D2B844C842495D2E1556A76AEFC1667610B87
        Validity
            Not Before: Feb  4 17:58:33 2025 GMT
            Not After : Feb  3 18:03:33 2026 GMT
        Subject: CN=CB8437C8D02977199626732C1CF80637FFED7CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:ee:dc:71:ad:58:4c:1a:82:4b:69:e0:51:
                    6d:0c:11:2b:b6:75:f5:24:f0:cb:44:2b:48:37:63:
                    24:3b:53:a2:a6:2e:78:03:c3:0d:06:fe:17:fc:b9:
                    b5:38:e0:a9:36:30:f9:bf:8b:71:9b:e6:d6:74:76:
                    03:2d:17:91:ca:b0:60:81:73:e7:c7:c8:2c:c7:cf:
                    98:18:8f:a7:fa:c5:0e:2b:fe:d6:79:7b:82:2c:ec:
                    68:66:24:34:83:a6:90:1a:36:25:2b:87:64:1d:64:
                    c1:1a:84:63:ab:cb:e8:68:6b:65:c9:2a:01:f4:34:
                    b6:31:63:dd:99:70:8c:cb:34:08:e0:f9:95:75:7d:
                    1b:f3:15:96:71:81:ed:65:82:24:ae:62:de:57:d6:
                    f2:b9:ed:3d:96:bb:0e:44:12:6b:7d:03:1d:52:77:
                    a8:bd:93:d8:13:fc:b9:a0:8a:fe:7e:77:19:d3:3c:
                    1f:cd:04:48:c0:db:c3:61:9c:cd:c4:64:74:1b:f2:
                    85:77:38:f8:be:83:22:4f:b6:60:84:58:27:dd:47:
                    f5:53:ad:5c:f0:b5:7d:1b:e3:f5:6a:53:ab:ec:c7:
                    83:e1:2c:61:27:a0:5e:ee:0b:a3:ff:24:e3:39:07:
                    cf:24:60:c6:40:b2:58:93:a5:b9:04:ae:dd:b7:44:
                    b8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:84:37:C8:D0:29:77:19:96:26:73:2C:1C:F8:06:37:FF:ED:7C:CA
            X509v3 Authority Key Identifier:
                keyid:F1:5D:2B:84:4C:84:24:95:D2:E1:55:6A:76:AE:FC:16:67:61:0B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/853C5A579860D53D932FCDF506CF811478958014DA919059A7F8E869788191BE/0/F15D2B844C842495D2E1556A76AEFC1667610B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F15D2B844C842495D2E1556A76AEFC1667610B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/853C5A579860D53D932FCDF506CF811478958014DA919059A7F8E869788191BE/0/3230312e3232312e3131322e302f32322d3234203d3e20323731373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:55:51:ef:68:0b:ad:5f:b2:9e:a8:e9:df:da:fe:31:51:87:
         1c:de:f3:ec:af:97:6f:f2:df:e3:2a:fe:ed:9b:8f:13:7c:40:
         2d:6a:cd:ef:44:b3:09:c6:4e:31:81:8b:97:21:5a:49:91:b9:
         a1:24:dd:fc:6b:45:66:4a:0d:00:7c:ea:61:39:1c:55:01:24:
         91:83:4f:f8:f0:5d:e9:d5:07:a8:05:81:69:f0:38:a8:ff:f9:
         51:38:0f:06:8f:69:92:37:dc:f5:dc:27:35:c1:b9:75:1e:d6:
         e3:f2:6d:26:ce:a6:c1:e0:07:88:25:68:16:e1:b0:1e:ee:db:
         9c:06:f7:2b:59:f9:66:0f:91:21:e3:a7:7f:b5:39:b2:85:d4:
         8f:7a:98:6e:64:39:fb:b5:0b:af:9d:bb:87:e4:75:eb:cf:14:
         02:bd:2c:71:64:a8:fa:b5:72:7e:76:ba:50:11:a6:c1:23:44:
         40:e9:63:d1:11:75:6f:6d:94:3e:28:46:6e:e3:19:42:a3:01:
         8c:6a:44:af:78:16:c0:06:b6:71:82:12:52:65:0b:89:36:dc:
         81:a4:80:63:be:46:77:4b:5a:d7:3c:2b:1b:63:87:9f:f5:a5:
         29:6f:aa:58:aa:6e:ca:01:af:07:89:9e:77:2e:64:f1:72:b2:
         65:25:cf:2f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUUlDdDqJ+PrFEWp+IekZciTqpnXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE1RDJCODQ0Qzg0MjQ5NUQyRTE1NTZBNzZBRUZDMTY2
NzYxMEI4NzAeFw0yNTAyMDQxNzU4MzNaFw0yNjAyMDMxODAzMzNaMDMxMTAvBgNV
BAMTKENCODQzN0M4RDAyOTc3MTk5NjI2NzMyQzFDRjgwNjM3RkZFRDdDQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Fe7cca1YTBqCS2ngUW0MESu2
dfUk8MtEK0g3YyQ7U6KmLngDww0G/hf8ubU44Kk2MPm/i3Gb5tZ0dgMtF5HKsGCB
c+fHyCzHz5gYj6f6xQ4r/tZ5e4Is7GhmJDSDppAaNiUrh2QdZMEahGOry+hoa2XJ
KgH0NLYxY92ZcIzLNAjg+ZV1fRvzFZZxge1lgiSuYt5X1vK57T2Wuw5EEmt9Ax1S
d6i9k9gT/Lmgiv5+dxnTPB/NBEjA28NhnM3EZHQb8oV3OPi+gyJPtmCEWCfdR/VT
rVzwtX0b4/VqU6vsx4PhLGEnoF7uC6P/JOM5B88kYMZAsliTpbkErt23RLgdAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUy4Q3yNApdxmWJnMsHPgGN//tfMowHwYDVR0j
BBgwFoAU8V0rhEyEJJXS4VVqdq78FmdhC4cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NTNDNUE1Nzk4NjBENTNEOTMyRkNERjUwNkNGODExNDc4
OTU4MDE0REE5MTkwNTlBN0Y4RTg2OTc4ODE5MUJFLzAvRjE1RDJCODQ0Qzg0MjQ5
NUQyRTE1NTZBNzZBRUZDMTY2NzYxMEI4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMTVEMkI4NDRDODQyNDk1RDJF
MTU1NkE3NkFFRkMxNjY3NjEwQjg3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODUzQzVBNTc5ODYwRDUzRDkzMkZDREY1MDZDRjgxMTQ3ODk1ODAxNERB
OTE5MDU5QTdGOEU4Njk3ODgxOTFCRS8wLzMyMzAzMTJlMzIzMjMxMmUzMTMxMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzEzNzM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALJ
3XAwDQYJKoZIhvcNAQELBQADggEBABJVUe9oC61fsp6o6d/a/jFRhxze8+yvl2/y
3+Mq/u2bjxN8QC1qze9EswnGTjGBi5chWkmRuaEk3fxrRWZKDQB86mE5HFUBJJGD
T/jwXenVB6gFgWnwOKj/+VE4DwaPaZI33PXcJzXBuXUe1uPybSbOpsHgB4glaBbh
sB7u25wG9ytZ+WYPkSHjp3+1ObKF1I96mG5kOfu1C6+du4fkdevPFAK9LHFkqPq1
cn52ulARpsEjREDpY9ERdW9tlD4oRm7jGUKjAYxqRK94FsAGtnGCElJlC4k23IGk
gGO+RndLWtc8Kxtjh5/1pSlvqliqbsoBrweJnncuZPFysmUlzy8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:20:03 2025 by rpki-client