Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/3230312e3133302e38322e302f32332d3234203d3e203631343731.roa
File:                     3230312e3133302e38322e302f32332d3234203d3e203631343731.roa (raw, json)
Hash identifier:          NlXu+I/ANmbGZatScmf6DcY8t9/DtOLI6gViduCzc1E=
Subject key identifier:   DB:2F:A0:42:72:28:4D:E9:55:94:A3:AF:AE:A2:DB:2D:29:49:18:99
Certificate issuer:       /CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
Certificate serial:       497CD7B5E78922B6838C814B362BE4D5B44EA352
Authority key identifier: 98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/3230312e3133302e38322e302f32332d3234203d3e203631343731.roa
Signing time:             Tue 04 Feb 2025 18:29:23 +0000
ROA not before:           Tue 04 Feb 2025 18:24:23 +0000
ROA not after:            Tue 03 Feb 2026 18:29:23 +0000
asID:                     61471
IP address blocks:        201.130.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7c:d7:b5:e7:89:22:b6:83:8c:81:4b:36:2b:e4:d5:b4:4e:a3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DB6B3E362C5897A9A6A35ADC133E2D65079F97
        Validity
            Not Before: Feb  4 18:24:23 2025 GMT
            Not After : Feb  3 18:29:23 2026 GMT
        Subject: CN=DB2FA04272284DE95594A3AFAEA2DB2D29491899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:17:e7:ec:37:bc:43:ae:16:04:d9:a9:f5:
                    4b:16:1e:6d:74:d1:d7:b0:86:4f:d2:bc:a2:5e:66:
                    6d:c2:42:4e:85:8f:36:7e:1b:85:fb:25:21:1c:e9:
                    0d:84:61:35:ae:1d:83:a5:d9:8b:ea:c2:28:60:d6:
                    e4:fb:cd:05:d6:73:31:6c:8d:9c:89:ff:2d:45:c9:
                    4d:f3:a6:c5:33:a2:50:6a:b5:ba:66:3e:0a:5e:02:
                    85:3a:17:a9:33:c1:83:61:78:74:ab:ce:0e:80:55:
                    99:33:74:a2:38:1e:75:0a:5c:8e:16:0a:81:8e:6c:
                    4b:b2:a4:fc:39:fa:40:c2:78:5c:63:f9:78:72:11:
                    30:18:49:38:5a:05:aa:a4:7c:23:28:d1:70:7f:e9:
                    79:9d:2d:2a:84:f7:9f:a5:87:15:4e:33:91:7e:b8:
                    e3:88:11:42:fb:39:38:c0:5a:58:3a:6a:18:54:6e:
                    3c:1f:2e:bc:48:fa:b6:74:4f:f0:8d:6f:54:6c:12:
                    16:02:5c:89:8f:95:49:e8:3b:c6:f9:37:fc:97:98:
                    48:4f:01:6b:86:7a:01:e3:96:01:d4:54:56:64:1f:
                    3d:6a:2e:17:56:31:0b:d1:60:c6:a4:48:75:7d:4a:
                    06:c5:0c:db:69:0e:3e:44:25:93:2f:12:60:5f:d2:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2F:A0:42:72:28:4D:E9:55:94:A3:AF:AE:A2:DB:2D:29:49:18:99
            X509v3 Authority Key Identifier:
                keyid:98:DB:6B:3E:36:2C:58:97:A9:A6:A3:5A:DC:13:3E:2D:65:07:9F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98DB6B3E362C5897A9A6A35ADC133E2D65079F97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94303CBC1F355E55C223ADEB8B5BF25E0EBCBF73FC04665B0428A1A90AE29C15/0/3230312e3133302e38322e302f32332d3234203d3e203631343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:3a:1c:38:27:0e:fe:36:03:ed:03:1a:8c:9c:68:8d:59:80:
         a9:e5:dd:b8:4b:08:25:23:5e:8c:90:90:0c:a4:41:36:54:7b:
         44:7b:d0:2c:d4:83:6c:54:d6:1e:1c:f6:4a:c3:bf:54:f2:45:
         11:4e:4b:bb:d7:1e:d8:22:9c:c5:73:a1:c3:bf:b8:3c:d5:3c:
         1a:0a:0e:57:dc:79:01:9d:13:f9:7d:57:a8:cc:8f:fe:0b:93:
         ee:2c:30:80:b1:c9:80:2e:34:32:51:16:09:dc:ec:bc:50:c3:
         08:50:8c:19:20:c2:c3:a4:ed:69:95:cf:01:c5:d6:44:2b:e2:
         e3:52:28:37:ee:ca:90:b5:45:1e:fe:be:ef:a8:68:76:20:c2:
         51:5e:eb:53:f3:5d:78:31:9c:e6:8a:ad:70:c4:6f:41:67:f2:
         df:7c:d6:bf:0b:ec:6c:f8:5f:21:c6:1b:f3:2a:5a:c3:35:04:
         30:50:66:05:e3:ee:a2:20:9d:9a:f8:26:db:51:7a:4d:c7:4a:
         9d:3f:41:24:f8:a4:c8:18:83:f0:cb:c8:dc:6a:1b:36:fa:f5:
         6f:76:80:bd:87:e2:86:f2:8c:78:2c:c1:d1:cd:fb:7c:b6:98:
         ba:37:a2:eb:e7:69:66:da:f0:6a:d0:04:a4:ce:64:62:fa:c8:
         fe:5c:fb:7d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSXzXteeJIraDjIFLNivk1bROo1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThEQjZCM0UzNjJDNTg5N0E5QTZBMzVBREMxMzNFMkQ2
NTA3OUY5NzAeFw0yNTAyMDQxODI0MjNaFw0yNjAyMDMxODI5MjNaMDMxMTAvBgNV
BAMTKERCMkZBMDQyNzIyODRERTk1NTk0QTNBRkFFQTJEQjJEMjk0OTE4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FRfn7De8Q64WBNmp9UsWHm10
0dewhk/SvKJeZm3CQk6FjzZ+G4X7JSEc6Q2EYTWuHYOl2Yvqwihg1uT7zQXWczFs
jZyJ/y1FyU3zpsUzolBqtbpmPgpeAoU6F6kzwYNheHSrzg6AVZkzdKI4HnUKXI4W
CoGObEuypPw5+kDCeFxj+XhyETAYSThaBaqkfCMo0XB/6XmdLSqE95+lhxVOM5F+
uOOIEUL7OTjAWlg6ahhUbjwfLrxI+rZ0T/CNb1RsEhYCXImPlUnoO8b5N/yXmEhP
AWuGegHjlgHUVFZkHz1qLhdWMQvRYMakSHV9SgbFDNtpDj5EJZMvEmBf0sqHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU2y+gQnIoTelVlKOvrqLbLSlJGJkwHwYDVR0j
BBgwFoAUmNtrPjYsWJeppqNa3BM+LWUHn5cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDMwM0NCQzFGMzU1RTU1QzIyM0FERUI4QjVCRjI1RTBF
QkNCRjczRkMwNDY2NUIwNDI4QTFBOTBBRTI5QzE1LzAvOThEQjZCM0UzNjJDNTg5
N0E5QTZBMzVBREMxMzNFMkQ2NTA3OUY5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OERCNkIzRTM2MkM1ODk3QTlB
NkEzNUFEQzEzM0UyRDY1MDc5Rjk3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQzMDNDQkMxRjM1NUU1NUMyMjNBREVCOEI1QkYyNUUwRUJDQkY3M0ZD
MDQ2NjVCMDQyOEExQTkwQUUyOUMxNS8wLzMyMzAzMTJlMzEzMzMwMmUzODMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMTM0MzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcmCUjAN
BgkqhkiG9w0BAQsFAAOCAQEAOjocOCcO/jYD7QMajJxojVmAqeXduEsIJSNejJCQ
DKRBNlR7RHvQLNSDbFTWHhz2SsO/VPJFEU5Lu9ce2CKcxXOhw7+4PNU8GgoOV9x5
AZ0T+X1XqMyP/guT7iwwgLHJgC40MlEWCdzsvFDDCFCMGSDCw6TtaZXPAcXWRCvi
41IoN+7KkLVFHv6+76hodiDCUV7rU/NdeDGc5oqtcMRvQWfy33zWvwvsbPhfIcYb
8ypawzUEMFBmBePuoiCdmvgm21F6TcdKnT9BJPikyBiD8MvI3GobNvr1b3aAvYfi
hvKMeCzB0c37fLaYujei6+dpZtrwatAEpM5kYvrI/lz7fQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:09:51 2025 by rpki-client