Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e302e302f31372d3234203d3e203139393035.roa
File:                     3133322e3235312e302e302f31372d3234203d3e203139393035.roa (raw, json)
Hash identifier:          nEGXKbXBDLzk260H2csxPF8SDyHmnkPW5wzj7DJKoJg=
Subject key identifier:   C7:B1:41:90:D1:88:73:AA:08:D3:F7:6C:A9:63:AC:8B:6F:81:B8:80
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       43D352B5F339E3337A106B9691B51F84E464BDED
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e302e302f31372d3234203d3e203139393035.roa
Signing time:             Tue 04 Feb 2025 18:18:03 +0000
ROA not before:           Tue 04 Feb 2025 18:13:03 +0000
ROA not after:            Tue 03 Feb 2026 18:18:03 +0000
asID:                     19905
IP address blocks:        132.251.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 09:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d3:52:b5:f3:39:e3:33:7a:10:6b:96:91:b5:1f:84:e4:64:bd:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Feb  4 18:13:03 2025 GMT
            Not After : Feb  3 18:18:03 2026 GMT
        Subject: CN=C7B14190D18873AA08D3F76CA963AC8B6F81B880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:56:e8:ea:13:d6:9e:d6:a2:f2:30:18:fe:
                    81:78:dc:e5:f8:de:4a:59:d0:5e:9e:16:38:04:ed:
                    75:e9:71:27:e8:3a:cb:40:7a:36:0a:6d:88:d2:8e:
                    57:9f:4a:eb:a4:50:08:7e:87:ae:b9:88:54:8f:4d:
                    b8:12:30:df:98:53:5b:95:e0:fd:1b:6b:9c:fc:63:
                    cc:63:73:b0:c2:50:92:a8:b0:00:37:07:bb:c0:75:
                    6e:cc:9d:1b:a1:44:91:a7:fd:00:1f:5e:58:4f:3c:
                    15:9d:f2:a3:40:ed:c3:b4:bc:1e:f2:17:41:d4:a3:
                    b4:2d:fa:2c:e2:69:c7:84:ab:2e:fa:3b:95:36:1f:
                    c1:47:6a:aa:a4:57:84:cb:f1:6d:74:44:92:30:9f:
                    53:08:21:29:88:bf:0e:37:2a:07:80:b2:8c:e6:c4:
                    23:a2:ee:41:7b:46:a8:8f:4a:39:c4:6e:d4:c3:e3:
                    95:33:75:4b:ea:03:50:25:d5:cc:64:35:aa:ae:bc:
                    69:38:ac:30:91:cd:b2:5b:bc:de:63:7d:93:a2:28:
                    88:c7:e7:8e:d7:30:de:90:c4:f7:82:10:1d:09:6c:
                    01:dc:3a:98:3c:23:b5:82:6d:00:5c:09:5f:e7:30:
                    c4:40:43:80:db:1f:6b:68:71:91:93:e2:99:1b:f4:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B1:41:90:D1:88:73:AA:08:D3:F7:6C:A9:63:AC:8B:6F:81:B8:80
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e302e302f31372d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.251.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5f:a1:06:eb:4e:8c:65:66:77:5c:5d:0c:0d:fa:d6:d4:47:55:
         ac:59:ee:12:e8:6c:f9:b5:67:39:fe:96:b8:01:50:38:55:a1:
         38:f7:c1:9c:6d:8e:2c:44:40:09:5b:2d:df:e1:a0:e0:6d:dc:
         31:98:de:8b:3f:99:4c:49:2c:48:88:55:85:72:44:e0:ea:a0:
         9f:84:64:65:88:cb:50:fb:c0:5c:44:8f:69:8f:46:6c:86:dc:
         b0:2b:3f:e9:cc:ab:35:b8:d0:87:2d:2d:87:b0:3b:bc:06:bb:
         94:c0:42:83:22:41:c5:bf:8a:80:6f:55:b4:93:d6:bb:30:3c:
         1f:fb:78:ff:8c:1e:8b:f7:70:23:5e:6b:22:45:1d:02:f9:6f:
         f3:78:4d:33:41:93:55:51:e7:5d:f8:2f:b5:67:e6:fd:60:38:
         02:51:55:f0:a0:f5:1d:61:d0:9f:aa:b7:e8:42:80:59:ff:db:
         85:4f:3e:d6:c2:2e:b4:5e:c4:aa:59:ff:42:5b:5b:93:54:6d:
         5e:b4:60:1e:6b:88:cf:3c:fb:31:f1:36:7b:b4:26:85:2c:1e:
         3d:66:90:d5:bb:f3:82:cb:62:44:7c:63:6b:5e:a4:a6:dc:72:
         d2:c2:87:b5:ba:1c:5d:1c:5d:d6:4d:45:c5:43:93:0d:cf:8b:
         f0:73:82:1e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQ9NStfM54zN6EGuWkbUfhORkve0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNTAyMDQxODEzMDNaFw0yNjAyMDMxODE4MDNaMDMxMTAvBgNV
BAMTKEM3QjE0MTkwRDE4ODczQUEwOEQzRjc2Q0E5NjNBQzhCNkY4MUI4ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRLlbo6hPWntai8jAY/oF43OX4
3kpZ0F6eFjgE7XXpcSfoOstAejYKbYjSjlefSuukUAh+h665iFSPTbgSMN+YU1uV
4P0ba5z8Y8xjc7DCUJKosAA3B7vAdW7MnRuhRJGn/QAfXlhPPBWd8qNA7cO0vB7y
F0HUo7Qt+iziaceEqy76O5U2H8FHaqqkV4TL8W10RJIwn1MIISmIvw43KgeAsozm
xCOi7kF7RqiPSjnEbtTD45UzdUvqA1Al1cxkNaquvGk4rDCRzbJbvN5jfZOiKIjH
547XMN6QxPeCEB0JbAHcOpg8I7WCbQBcCV/nMMRAQ4DbH2tocZGT4pkb9N7nAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUx7FBkNGIc6oI0/dsqWOsi2+BuIAwHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMxMzMzMjJlMzIzNTMxMmUzMDJlMzAy
ZjMxMzcyZDMyMzQyMDNkM2UyMDMxMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAeE+wAwDQYJ
KoZIhvcNAQELBQADggEBAF+hButOjGVmd1xdDA361tRHVaxZ7hLobPm1Zzn+lrgB
UDhVoTj3wZxtjixEQAlbLd/hoOBt3DGY3os/mUxJLEiIVYVyRODqoJ+EZGWIy1D7
wFxEj2mPRmyG3LArP+nMqzW40IctLYewO7wGu5TAQoMiQcW/ioBvVbST1rswPB/7
eP+MHov3cCNeayJFHQL5b/N4TTNBk1VR5134L7Vn5v1gOAJRVfCg9R1h0J+qt+hC
gFn/24VPPtbCLrRexKpZ/0JbW5NUbV60YB5riM88+zHxNnu0JoUsHj1mkNW784LL
YkR8Y2tepKbcctLCh7W6HF0cXdZNRcVDkw3Pi/Bzgh4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:17 2025 by rpki-client