Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/3139322e3134312e3136382e302f32322d3234203d3e2036343731.roa
File:                     3139322e3134312e3136382e302f32322d3234203d3e2036343731.roa (raw, json)
Hash identifier:          MREnfu7tifd5aECFH8/1xNpaPxu4vDbCYawFsVar7Go=
Subject key identifier:   9E:53:BB:7F:82:CF:5A:21:3E:46:D5:47:36:93:FF:9D:B1:0F:09:8A
Certificate issuer:       /CN=42BD8D878C8243543F08F06EB92269CCF4FF46C9
Certificate serial:       3F5CBBC4C1EB7D46AE175CA6AE19F3ECDC97DD44
Authority key identifier: 42:BD:8D:87:8C:82:43:54:3F:08:F0:6E:B9:22:69:CC:F4:FF:46:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/3139322e3134312e3136382e302f32322d3234203d3e2036343731.roa
Signing time:             Tue 18 Mar 2025 17:12:19 +0000
ROA not before:           Tue 18 Mar 2025 17:07:19 +0000
ROA not after:            Tue 17 Mar 2026 17:12:19 +0000
asID:                     6471
IP address blocks:        192.141.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 07:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5c:bb:c4:c1:eb:7d:46:ae:17:5c:a6:ae:19:f3:ec:dc:97:dd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42BD8D878C8243543F08F06EB92269CCF4FF46C9
        Validity
            Not Before: Mar 18 17:07:19 2025 GMT
            Not After : Mar 17 17:12:19 2026 GMT
        Subject: CN=9E53BB7F82CF5A213E46D5473693FF9DB10F098A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:af:ac:06:45:de:01:c5:c0:0b:ff:d4:e6:
                    5e:ef:14:82:16:42:d5:fc:35:d7:20:13:2a:19:0c:
                    1d:a5:54:09:6b:87:78:d2:e3:60:37:b1:18:c0:70:
                    9c:17:bd:3c:b9:4c:a2:ab:73:7c:19:da:a4:5f:1a:
                    01:9a:a1:6f:41:b1:98:52:d4:84:42:33:46:4d:16:
                    ed:f7:12:ce:6e:53:e1:6c:f4:d1:5b:0a:d3:3a:b4:
                    7a:f3:dd:6a:41:a4:a8:9c:47:5b:8b:4d:93:e6:50:
                    e1:88:7d:45:3d:44:ec:c9:ea:cd:cd:1d:4d:a2:db:
                    58:98:57:ba:2e:db:1f:85:74:d2:5e:c7:bc:f1:ae:
                    c3:61:cb:98:a6:3d:a3:14:ca:f8:7a:cb:1c:1d:df:
                    62:90:4a:c8:5e:58:a7:58:ba:f5:96:a7:18:0f:a2:
                    0d:b3:bf:4f:62:f3:02:8d:02:40:5d:06:8e:94:6f:
                    69:1e:9a:51:e0:67:3f:ac:86:db:db:92:a5:7b:94:
                    95:dc:1e:36:b3:05:e0:04:4c:a7:d7:d0:bf:13:b8:
                    cd:d9:19:cc:86:54:14:b7:82:15:c7:65:1b:7f:c6:
                    3c:32:76:71:aa:1b:d1:d3:f8:82:ff:1c:26:50:96:
                    2f:44:c8:5b:2b:c8:4b:c2:b6:e8:ca:ff:68:8d:05:
                    da:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:53:BB:7F:82:CF:5A:21:3E:46:D5:47:36:93:FF:9D:B1:0F:09:8A
            X509v3 Authority Key Identifier:
                keyid:42:BD:8D:87:8C:82:43:54:3F:08:F0:6E:B9:22:69:CC:F4:FF:46:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42BD8D878C8243543F08F06EB92269CCF4FF46C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3AC98FA47F74BD00F265D7632F821E02769F5D7999E920CC01F5B29CFF7A0FB/0/3139322e3134312e3136382e302f32322d3234203d3e2036343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:4a:96:4c:a6:9d:b0:fc:d0:ea:de:c7:ec:16:12:31:47:69:
         53:fd:1d:6f:5a:c1:48:86:95:05:de:ab:50:6a:25:3b:01:4c:
         e2:fa:f7:93:40:9a:30:53:e7:9c:1b:5c:80:1e:9d:40:99:12:
         bc:da:3f:75:a5:0e:94:5a:2c:69:d3:d8:6e:ff:ec:d1:97:ca:
         83:2c:74:fc:4e:e3:c6:41:c6:9c:11:e2:e0:5f:d4:66:81:d0:
         ac:04:87:9b:91:ac:34:d5:1a:bc:8d:74:b3:99:e5:1a:df:86:
         69:b8:eb:f5:f0:7d:80:8c:27:89:06:aa:5e:b1:3d:9c:ef:0f:
         5f:90:be:da:60:39:24:f5:5a:c5:94:8d:bc:97:a0:b6:0f:62:
         27:7c:bd:a2:a3:89:ff:55:29:49:29:36:13:9d:0f:ff:91:31:
         3a:30:34:4f:dd:c0:ff:64:e4:06:c9:9e:fe:1f:52:4f:20:98:
         05:9c:48:5d:3b:13:a0:f1:c3:49:68:c4:9f:ce:46:e5:6f:ba:
         c5:e4:b0:17:59:d5:6d:36:da:99:29:b4:43:7f:01:5e:08:93:
         24:72:91:26:51:47:c4:52:8b:32:35:d2:39:00:d1:4c:0b:33:
         13:28:89:15:3c:c2:f9:77:50:f3:e4:a7:c6:6a:03:d1:ce:58:
         31:09:86:53
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUP1y7xMHrfUauF1ymrhnz7NyX3UQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJCRDhEODc4QzgyNDM1NDNGMDhGMDZFQjkyMjY5Q0NG
NEZGNDZDOTAeFw0yNTAzMTgxNzA3MTlaFw0yNjAzMTcxNzEyMTlaMDMxMTAvBgNV
BAMTKDlFNTNCQjdGODJDRjVBMjEzRTQ2RDU0NzM2OTNGRjlEQjEwRjA5OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpq+sBkXeAcXAC//U5l7vFIIW
QtX8NdcgEyoZDB2lVAlrh3jS42A3sRjAcJwXvTy5TKKrc3wZ2qRfGgGaoW9BsZhS
1IRCM0ZNFu33Es5uU+Fs9NFbCtM6tHrz3WpBpKicR1uLTZPmUOGIfUU9ROzJ6s3N
HU2i21iYV7ou2x+FdNJex7zxrsNhy5imPaMUyvh6yxwd32KQSsheWKdYuvWWpxgP
og2zv09i8wKNAkBdBo6Ub2kemlHgZz+shtvbkqV7lJXcHjazBeAETKfX0L8TuM3Z
GcyGVBS3ghXHZRt/xjwydnGqG9HT+IL/HCZQli9EyFsryEvCtujK/2iNBdp5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUnlO7f4LPWiE+RtVHNpP/nbEPCYowHwYDVR0j
BBgwFoAUQr2Nh4yCQ1Q/CPBuuSJpzPT/RskwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0FDOThGQTQ3Rjc0QkQwMEYyNjVENzYzMkY4MjFFMDI3
NjlGNUQ3OTk5RTkyMENDMDFGNUIyOUNGRjdBMEZCLzAvNDJCRDhEODc4QzgyNDM1
NDNGMDhGMDZFQjkyMjY5Q0NGNEZGNDZDOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkJEOEQ4NzhDODI0MzU0M0Yw
OEYwNkVCOTIyNjlDQ0Y0RkY0NkM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBQzk4RkE0N0Y3NEJEMDBGMjY1RDc2MzJGODIxRTAyNzY5RjVENzk5
OUU5MjBDQzAxRjVCMjlDRkY3QTBGQi8wLzMxMzkzMjJlMzEzNDMxMmUzMTM2Mzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjM0MzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsCNqDAN
BgkqhkiG9w0BAQsFAAOCAQEAd0qWTKadsPzQ6t7H7BYSMUdpU/0db1rBSIaVBd6r
UGolOwFM4vr3k0CaMFPnnBtcgB6dQJkSvNo/daUOlFosadPYbv/s0ZfKgyx0/E7j
xkHGnBHi4F/UZoHQrASHm5GsNNUavI10s5nlGt+Gabjr9fB9gIwniQaqXrE9nO8P
X5C+2mA5JPVaxZSNvJegtg9iJ3y9oqOJ/1UpSSk2E50P/5ExOjA0T93A/2TkBsme
/h9STyCYBZxIXTsToPHDSWjEn85G5W+6xeSwF1nVbTbamSm0Q38BXgiTJHKRJlFH
xFKLMjXSOQDRTAszEyiJFTzC+XdQ8+SnxmoD0c5YMQmGUw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 17:40:37 2025 by rpki-client