Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/3137302e38312e3231322e302f32322d3234203d3e20323633373638.roa
File:                     3137302e38312e3231322e302f32322d3234203d3e20323633373638.roa (raw, json)
Hash identifier:          a1DU95PyrVwA7BUYGyAwOX1aGRvfU/Vhcn2G744kBfQ=
Subject key identifier:   50:D7:9B:64:52:23:07:B8:8E:66:AE:E9:85:9B:8B:AF:4F:78:F1:D1
Certificate issuer:       /CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231
Certificate serial:       24D1B29C4608F894A3A47EA21A527C5E322515D9
Authority key identifier: EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/3137302e38312e3231322e302f32322d3234203d3e20323633373638.roa
Signing time:             Tue 04 Feb 2025 18:23:59 +0000
ROA not before:           Tue 04 Feb 2025 18:18:59 +0000
ROA not after:            Tue 03 Feb 2026 18:23:59 +0000
asID:                     263768
IP address blocks:        170.81.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d1:b2:9c:46:08:f8:94:a3:a4:7e:a2:1a:52:7c:5e:32:25:15:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231
        Validity
            Not Before: Feb  4 18:18:59 2025 GMT
            Not After : Feb  3 18:23:59 2026 GMT
        Subject: CN=50D79B64522307B88E66AEE9859B8BAF4F78F1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:e2:b1:e0:c1:cd:bf:ef:c8:3b:bc:b6:65:
                    df:79:16:b6:9d:35:28:8e:6d:bd:5b:ab:98:b2:fd:
                    80:09:de:22:9a:24:31:69:0f:f4:98:ca:8e:20:c7:
                    7f:6b:3d:9f:c1:2a:c9:fa:33:c0:a9:b6:6d:e7:25:
                    58:8d:5a:d5:09:82:bd:12:63:51:cb:12:64:e9:16:
                    74:a6:9d:9d:17:a3:57:31:07:00:5a:ac:45:d4:9a:
                    bb:1e:72:48:a8:4a:5a:70:35:dc:6f:47:1c:36:4d:
                    61:51:2b:a6:4c:13:5c:28:d5:db:47:29:be:f1:4b:
                    78:07:e5:6b:56:03:d4:62:43:7a:67:46:ff:21:04:
                    3a:90:8c:45:42:3f:50:82:87:f2:17:d2:e1:a4:23:
                    9b:84:64:8d:25:60:46:5f:af:69:ae:0a:90:b7:4b:
                    7e:89:81:34:b3:d6:d6:af:db:63:f1:2c:74:69:31:
                    df:08:e5:75:93:50:28:4a:b0:c4:3c:11:30:78:45:
                    24:3b:00:d1:52:ec:43:b9:82:52:d6:ff:da:34:90:
                    b6:9c:9f:88:37:64:01:a7:a4:54:71:5c:be:38:94:
                    a1:29:40:10:34:e4:b1:8b:46:fb:84:29:5e:cf:fa:
                    af:32:e2:33:bb:fe:55:80:cf:6b:37:41:d0:6c:4e:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D7:9B:64:52:23:07:B8:8E:66:AE:E9:85:9B:8B:AF:4F:78:F1:D1
            X509v3 Authority Key Identifier:
                keyid:EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/3137302e38312e3231322e302f32322d3234203d3e20323633373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:78:40:6d:60:82:fb:16:7d:19:ad:ec:de:90:4f:8a:34:64:
         f5:97:1c:89:c2:02:6f:00:53:71:da:d9:37:01:99:73:53:e6:
         b9:a6:c2:d7:a8:ef:a3:f6:8c:7e:f1:79:30:53:4f:4b:ca:fe:
         d9:b7:f5:29:27:9f:d2:15:e3:da:9f:65:80:47:61:52:36:1f:
         cc:60:f9:fc:32:92:68:0c:f5:4c:cd:e3:22:f1:60:12:ed:5b:
         85:26:19:ff:5a:81:e7:c1:e5:8e:48:28:90:c0:79:d1:11:35:
         4c:91:b3:54:95:0e:bc:8a:6d:5a:c2:fd:d9:24:2a:1f:63:25:
         50:7f:64:68:8d:30:59:81:ea:82:cf:70:09:46:18:1d:6d:d3:
         f2:19:9d:05:c4:a9:3b:b6:96:bd:0d:57:6e:d7:bf:ca:d3:2d:
         53:ab:8f:20:fe:a3:74:a7:3a:50:fd:ae:98:54:52:31:fe:9e:
         c8:c6:94:d4:4c:c9:f1:fd:bf:3b:c6:ef:84:d1:4b:0d:0c:78:
         48:50:5a:4c:37:21:23:cd:99:cf:0b:10:06:5f:11:b1:15:5a:
         ce:14:0c:60:b9:2e:9e:05:2f:ef:14:db:2e:1c:ae:fa:7f:ea:
         e3:ea:2c:f3:4c:ce:cc:57:8d:33:59:48:a1:a7:65:1f:1a:b1:
         6f:8b:7b:e0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJNGynEYI+JSjpH6iGlJ8XjIlFdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzRkZFQUFBMDlBNENGQ0M2MzVFNDhBNENGQzA2NTlC
Q0JBNDIzMTAeFw0yNTAyMDQxODE4NTlaFw0yNjAyMDMxODIzNTlaMDMxMTAvBgNV
BAMTKDUwRDc5QjY0NTIyMzA3Qjg4RTY2QUVFOTg1OUI4QkFGNEY3OEYxRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXOKx4MHNv+/IO7y2Zd95Frad
NSiObb1bq5iy/YAJ3iKaJDFpD/SYyo4gx39rPZ/BKsn6M8Cptm3nJViNWtUJgr0S
Y1HLEmTpFnSmnZ0Xo1cxBwBarEXUmrseckioSlpwNdxvRxw2TWFRK6ZME1wo1dtH
Kb7xS3gH5WtWA9RiQ3pnRv8hBDqQjEVCP1CCh/IX0uGkI5uEZI0lYEZfr2muCpC3
S36JgTSz1tav22PxLHRpMd8I5XWTUChKsMQ8ETB4RSQ7ANFS7EO5glLW/9o0kLac
n4g3ZAGnpFRxXL44lKEpQBA05LGLRvuEKV7P+q8y4jO7/lWAz2s3QdBsTr07AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUUNebZFIjB7iOZq7phZuLr0948dEwHwYDVR0j
BBgwFoAU7z/+qqCaTPzGNeSKTPwGWby6QjEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RkJFMjUzNzcxNzY0OEJFNDU4NEUwRjYzRTk4Q0I3NTEx
NkU3ODcyRjFFRDM4NTREMjRCN0RFREVBOTRCNUNFLzAvRUYzRkZFQUFBMDlBNENG
Q0M2MzVFNDhBNENGQzA2NTlCQ0JBNDIzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjNGRkVBQUEwOUE0Q0ZDQzYz
NUU0OEE0Q0ZDMDY1OUJDQkE0MjMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUZCRTI1Mzc3MTc2NDhCRTQ1ODRFMEY2M0U5OENCNzUxMTZFNzg3MkYx
RUQzODU0RDI0QjdERURFQTk0QjVDRS8wLzMxMzczMDJlMzgzMTJlMzIzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzczNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlHU
MA0GCSqGSIb3DQEBCwUAA4IBAQA/eEBtYIL7Fn0ZrezekE+KNGT1lxyJwgJvAFNx
2tk3AZlzU+a5psLXqO+j9ox+8XkwU09Lyv7Zt/UpJ5/SFePan2WAR2FSNh/MYPn8
MpJoDPVMzeMi8WAS7VuFJhn/WoHnweWOSCiQwHnRETVMkbNUlQ68im1awv3ZJCof
YyVQf2RojTBZgeqCz3AJRhgdbdPyGZ0FxKk7tpa9DVdu17/K0y1Tq48g/qN0pzpQ
/a6YVFIx/p7IxpTUTMnx/b87xu+E0UsNDHhIUFpMNyEjzZnPCxAGXxGxFVrOFAxg
uS6eBS/vFNsuHK76f+rj6izzTM7MV40zWUihp2UfGrFvi3vg
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:50 2025 by rpki-client