Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32322e302f32342d3234203d3e20323635373430.roa
File:                     3132382e3230312e32322e302f32342d3234203d3e20323635373430.roa (raw, json)
Hash identifier:          fBb/Sws8vjsc2ypyW8NRLt5+r/8zb+cgyjDIBeclCRI=
Subject key identifier:   F6:60:D6:E2:C1:95:89:57:48:57:4A:72:92:19:3C:66:E0:D2:F3:3E
Certificate issuer:       /CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Certificate serial:       5A8BE472B2454FC48D22FAF5D4F2596927E42553
Authority key identifier: 25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32322e302f32342d3234203d3e20323635373430.roa
Signing time:             Tue 04 Feb 2025 18:34:59 +0000
ROA not before:           Tue 04 Feb 2025 18:29:59 +0000
ROA not after:            Tue 03 Feb 2026 18:34:59 +0000
asID:                     265740
IP address blocks:        128.201.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8b:e4:72:b2:45:4f:c4:8d:22:fa:f5:d4:f2:59:69:27:e4:25:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
        Validity
            Not Before: Feb  4 18:29:59 2025 GMT
            Not After : Feb  3 18:34:59 2026 GMT
        Subject: CN=F660D6E2C195895748574A7292193C66E0D2F33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:73:bb:2e:5a:51:79:c6:19:41:4d:69:84:
                    85:59:45:5d:18:24:5b:6b:2f:19:ad:e2:41:f3:c5:
                    bb:76:1d:4c:75:31:09:e7:ed:7b:29:5c:9a:68:6d:
                    2f:ba:40:66:71:a2:a8:b1:95:c6:9c:ab:f8:b6:43:
                    75:11:81:89:8b:e4:15:ec:a6:0d:fa:9f:c8:b9:dd:
                    1a:ad:ed:86:dc:25:0f:41:fb:65:c1:8f:47:0f:ff:
                    d4:fc:be:60:58:b9:0f:80:9c:58:60:a9:89:eb:ab:
                    e5:3c:2c:b9:b1:a3:b1:f6:a9:fb:95:7c:f2:a1:08:
                    db:11:e0:17:5e:ef:41:f1:ce:f9:44:8e:bd:9f:ca:
                    7b:15:65:17:9e:a0:1d:59:aa:8f:9e:e7:a4:39:af:
                    29:be:72:6d:4c:a1:70:9e:fe:75:93:18:cc:ad:e0:
                    d6:81:7f:81:7d:81:d1:57:ef:9c:00:90:5d:e5:fd:
                    ae:61:ac:90:c2:56:56:17:49:1f:bc:82:2b:a9:a4:
                    4a:45:f5:fd:cf:6e:73:5a:62:c9:92:df:78:a3:cb:
                    c5:f7:89:30:3e:83:5c:b8:59:00:ac:fd:e0:b8:4e:
                    67:e5:43:eb:f1:53:21:b3:53:de:5e:58:73:7d:06:
                    85:fa:f0:f6:33:e3:5b:0d:01:23:1d:56:44:10:62:
                    e1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:60:D6:E2:C1:95:89:57:48:57:4A:72:92:19:3C:66:E0:D2:F3:3E
            X509v3 Authority Key Identifier:
                keyid:25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32322e302f32342d3234203d3e20323635373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:7e:e6:13:7a:64:d8:5a:9c:73:9a:30:6a:49:d6:82:f6:2c:
         c2:b5:b7:0c:d8:5e:85:50:08:11:97:5d:16:ef:49:ce:31:d9:
         ad:6d:33:56:07:0f:a3:c2:70:41:a6:1b:3c:b5:f7:03:bf:ef:
         a3:fd:6a:c9:10:db:77:e3:05:77:17:4b:24:03:97:0c:36:16:
         bf:88:4b:50:94:df:d2:93:86:78:95:a5:8f:f4:de:2c:b7:7b:
         be:e8:1c:b1:d0:fb:dd:78:fd:fc:0d:35:20:ff:88:bc:58:ca:
         bf:a9:a7:97:d7:a9:bc:04:9c:e7:ef:fd:05:36:95:8b:2c:c4:
         02:60:f5:b9:44:50:20:4d:b1:2b:3c:41:37:f4:f9:13:95:62:
         0e:00:09:21:9a:ee:7f:3b:f8:bf:39:c0:ea:b3:f7:18:d5:08:
         f0:17:9d:89:f2:fe:9a:c4:56:fe:ab:59:d6:7b:9b:c3:30:02:
         bb:b3:2c:bc:8e:55:d9:10:ea:a4:77:c9:e1:64:ae:ec:b9:a9:
         0e:4f:98:95:e4:14:51:3c:c5:8e:38:0e:22:c6:ef:69:e1:b6:
         1f:37:1d:80:99:82:d2:41:b6:07:e4:5b:3c:78:6e:1b:4e:2b:
         7c:68:bb:88:82:d6:e5:d9:fe:b7:0c:f1:2f:b5:ae:36:68:97:
         de:c7:87:63
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWovkcrJFT8SNIvr11PJZaSfkJVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVBQTEyRUMyODY4QjkwQTY5M0VFQUQyNTYzMkIxNUUy
NDUyNUVEMzAeFw0yNTAyMDQxODI5NTlaFw0yNjAyMDMxODM0NTlaMDMxMTAvBgNV
BAMTKEY2NjBENkUyQzE5NTg5NTc0ODU3NEE3MjkyMTkzQzY2RTBEMkYzM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1lXO7LlpRecYZQU1phIVZRV0Y
JFtrLxmt4kHzxbt2HUx1MQnn7XspXJpobS+6QGZxoqixlcacq/i2Q3URgYmL5BXs
pg36n8i53Rqt7YbcJQ9B+2XBj0cP/9T8vmBYuQ+AnFhgqYnrq+U8LLmxo7H2qfuV
fPKhCNsR4Bde70HxzvlEjr2fynsVZReeoB1Zqo+e56Q5rym+cm1MoXCe/nWTGMyt
4NaBf4F9gdFX75wAkF3l/a5hrJDCVlYXSR+8giuppEpF9f3PbnNaYsmS33ijy8X3
iTA+g1y4WQCs/eC4TmflQ+vxUyGzU95eWHN9BoX68PYz41sNASMdVkQQYuFrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU9mDW4sGViVdIV0pykhk8ZuDS8z4wHwYDVR0j
BBgwFoAUJaoS7ChouQppPurSVjKxXiRSXtMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NzE1ODc3MDE0RDZBMzU2MkI5MDU5N0VDMzk0QjkxNEYx
NkZEM0E1M0M1ODkzOUE3NzAzODhCM0ZFN0Q3MjdBLzAvMjVBQTEyRUMyODY4Qjkw
QTY5M0VFQUQyNTYzMkIxNUUyNDUyNUVEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUFBMTJFQzI4NjhCOTBBNjkz
RUVBRDI1NjMyQjE1RTI0NTI1RUQzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODcxNTg3NzAxNEQ2QTM1NjJCOTA1OTdFQzM5NEI5MTRGMTZGRDNBNTND
NTg5MzlBNzcwMzg4QjNGRTdENzI3QS8wLzMxMzIzODJlMzIzMDMxMmUzMjMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzczNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgMkW
MA0GCSqGSIb3DQEBCwUAA4IBAQDAfuYTemTYWpxzmjBqSdaC9izCtbcM2F6FUAgR
l10W70nOMdmtbTNWBw+jwnBBphs8tfcDv++j/WrJENt34wV3F0skA5cMNha/iEtQ
lN/Sk4Z4laWP9N4st3u+6Byx0PvdeP38DTUg/4i8WMq/qaeX16m8BJzn7/0FNpWL
LMQCYPW5RFAgTbErPEE39PkTlWIOAAkhmu5/O/i/OcDqs/cY1QjwF52J8v6axFb+
q1nWe5vDMAK7syy8jlXZEOqkd8nhZK7suakOT5iV5BRRPMWOOA4ixu9p4bYfNx2A
mYLSQbYH5Fs8eG4bTit8aLuIgtbl2f63DPEvta42aJfex4dj
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:53 2025 by rpki-client