Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135332e302f32342d3234203d3e20313938393439.roa
File:                     3137302e3233332e3135332e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          xHqoHU5XEthSkyxEK8J0ZCjFS9UmVa0BWhAd0i2zfYg=
Subject key identifier:   9C:B3:EB:56:1B:2A:AB:A2:CE:52:F9:09:7A:EE:E5:4B:2B:2E:CC:A3
Certificate issuer:       /CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
Certificate serial:       6BF4ACF9E3BFF8F0BA6C5B23F7A04511EB9A0A27
Authority key identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135332e302f32342d3234203d3e20313938393439.roa
Signing time:             Tue 25 Mar 2025 18:40:00 +0000
ROA not before:           Tue 25 Mar 2025 18:35:00 +0000
ROA not after:            Tue 24 Mar 2026 18:40:00 +0000
asID:                     198949
IP address blocks:        170.233.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f4:ac:f9:e3:bf:f8:f0:ba:6c:5b:23:f7:a0:45:11:eb:9a:0a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
        Validity
            Not Before: Mar 25 18:35:00 2025 GMT
            Not After : Mar 24 18:40:00 2026 GMT
        Subject: CN=9CB3EB561B2AABA2CE52F9097AEEE54B2B2ECCA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:e1:28:28:82:c9:83:45:69:cf:bb:2d:dc:
                    df:51:8a:e0:9f:f9:29:b1:6b:87:31:d8:b2:b3:9f:
                    37:e4:24:f5:24:0c:be:6b:53:b2:67:d3:9e:07:df:
                    48:05:5b:a4:28:eb:c7:41:78:18:a8:67:af:35:5c:
                    18:a3:41:c3:23:5a:0a:a9:3b:2a:a0:c3:e9:54:35:
                    82:56:7a:66:70:8f:71:2c:20:4e:1e:b9:8f:ff:9c:
                    9e:71:e0:3b:23:6b:66:00:0f:3f:c6:a5:99:c8:5e:
                    63:63:6c:2a:d1:bc:eb:98:c5:f0:44:4a:fe:d5:3b:
                    53:2d:7f:09:8f:39:fa:c8:cf:2b:6c:f8:c7:c2:b0:
                    8d:e7:a2:4e:46:b4:09:52:86:c0:12:bf:2e:0f:b7:
                    63:69:59:65:a2:87:f8:fe:22:2d:8b:5c:a9:d9:40:
                    dd:f7:29:60:be:e5:85:cf:0c:78:b0:88:70:5d:8d:
                    27:bb:7e:fc:34:4e:93:86:4d:74:e5:af:73:01:a9:
                    23:46:65:3f:66:65:6d:51:48:1b:60:dc:d7:7e:56:
                    ce:7f:f5:b9:cd:fb:c2:3e:e1:2d:2d:e7:a7:46:3f:
                    29:a6:a4:7f:51:d6:e2:be:33:0f:14:31:d6:8c:f1:
                    06:7d:df:75:4a:03:b4:73:4f:66:17:8b:65:67:ab:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B3:EB:56:1B:2A:AB:A2:CE:52:F9:09:7A:EE:E5:4B:2B:2E:CC:A3
            X509v3 Authority Key Identifier:
                keyid:2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135332e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:93:1b:d2:bc:23:3c:7e:27:74:f6:7f:fe:27:3e:95:09:e1:
         03:3f:79:42:32:4b:99:70:97:09:88:f9:af:da:97:f1:b3:e0:
         cc:d1:18:16:6a:9d:a0:2d:c6:7a:72:0b:e8:e4:3f:cd:28:db:
         12:ca:34:97:b0:38:3b:51:bb:28:c0:9d:3f:a0:43:9a:63:47:
         85:54:3f:ee:93:0c:07:74:ce:9d:f2:19:43:83:bf:1c:9e:40:
         cf:e9:66:e8:29:58:c6:f0:a7:c1:98:74:ea:88:b2:43:90:d2:
         32:65:25:bc:2b:fe:39:2d:82:6f:33:82:4e:95:1a:5d:df:16:
         97:f0:9e:32:72:4f:b9:a3:20:56:18:2d:6d:57:93:ad:10:2a:
         2c:4e:30:da:b8:45:8b:1e:0e:a6:aa:ad:87:8d:7d:8f:89:98:
         0c:8d:ea:b3:74:95:fe:15:5f:62:fd:16:94:e5:1d:1d:9a:91:
         9c:5c:08:f0:74:32:d4:51:cb:4f:29:e0:8c:87:b2:83:50:2b:
         a4:c0:2d:8a:e2:58:8e:08:80:aa:71:7d:ae:d1:6b:a6:e2:ce:
         7f:d9:5d:cb:1d:21:99:df:8b:63:65:d5:dc:17:bf:57:82:a5:
         98:0c:09:64:06:62:d0:b1:ef:db:86:5a:79:c2:27:c3:0d:51:
         92:fb:65:aa
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUa/Ss+eO/+PC6bFsj96BFEeuaCicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVENDdDMkZCNzVEMjM2N0UwMUM3NkVGNUJEOTM2NDJG
RTU2RjA1MTAeFw0yNTAzMjUxODM1MDBaFw0yNjAzMjQxODQwMDBaMDMxMTAvBgNV
BAMTKDlDQjNFQjU2MUIyQUFCQTJDRTUyRjkwOTdBRUVFNTRCMkIyRUNDQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDccuEoKILJg0Vpz7st3N9RiuCf
+Smxa4cx2LKznzfkJPUkDL5rU7Jn054H30gFW6Qo68dBeBioZ681XBijQcMjWgqp
Oyqgw+lUNYJWemZwj3EsIE4euY//nJ5x4Dsja2YADz/GpZnIXmNjbCrRvOuYxfBE
Sv7VO1MtfwmPOfrIzyts+MfCsI3nok5GtAlShsASvy4Pt2NpWWWih/j+Ii2LXKnZ
QN33KWC+5YXPDHiwiHBdjSe7fvw0TpOGTXTlr3MBqSNGZT9mZW1RSBtg3Nd+Vs5/
9bnN+8I+4S0t56dGPymmpH9R1uK+Mw8UMdaM8QZ933VKA7RzT2YXi2Vnq8epAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUnLPrVhsqq6LOUvkJeu7lSysuzKMwHwYDVR0j
BBgwFoAULtR8L7ddI2fgHHbvW9k2Qv5W8FEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QjE4MTVFQUI1RkI0RTk1QjM2MUUwQjE2RTAxMjc2N0I3
RDg4NDRGOEY2QTQ4MEQ1N0VDMjhBQUVEMTU0NUI3LzAvMkVENDdDMkZCNzVEMjM2
N0UwMUM3NkVGNUJEOTM2NDJGRTU2RjA1MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRUQ0N0MyRkI3NUQyMzY3RTAx
Qzc2RUY1QkQ5MzY0MkZFNTZGMDUxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEIxODE1RUFCNUZCNEU5NUIzNjFFMEIxNkUwMTI3NjdCN0Q4ODQ0RjhG
NkE0ODBENTdFQzI4QUFFRDE1NDVCNy8wLzMxMzczMDJlMzIzMzMzMmUzMTM1MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzOTM0Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq
6ZkwDQYJKoZIhvcNAQELBQADggEBAI6TG9K8Izx+J3T2f/4nPpUJ4QM/eUIyS5lw
lwmI+a/al/Gz4MzRGBZqnaAtxnpyC+jkP80o2xLKNJewODtRuyjAnT+gQ5pjR4VU
P+6TDAd0zp3yGUODvxyeQM/pZugpWMbwp8GYdOqIskOQ0jJlJbwr/jktgm8zgk6V
Gl3fFpfwnjJyT7mjIFYYLW1Xk60QKixOMNq4RYseDqaqrYeNfY+JmAyN6rN0lf4V
X2L9FpTlHR2akZxcCPB0MtRRy08p4IyHsoNQK6TALYriWI4IgKpxfa7Ra6bizn/Z
XcsdIZnfi2Nl1dwXv1eCpZgMCWQGYtCx79uGWnnCJ8MNUZL7Zao=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:50 2025 by rpki-client