Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e36342e302f31392d3234203d3e203139333733.roa
File:                     3230312e3136312e36342e302f31392d3234203d3e203139333733.roa (raw, json)
Hash identifier:          5K2weczKffkHRIJS06bMSM0FOAMVcbkBkI86VFvNDcU=
Subject key identifier:   21:F9:6F:1C:16:CA:8E:AA:50:85:E0:BA:FF:B7:CE:EC:72:47:01:E6
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       64602B3527313DA9749D350F41D17B4E4095DD08
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e36342e302f31392d3234203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:40:03 +0000
ROA not before:           Sun 16 Feb 2025 06:35:03 +0000
ROA not after:            Sun 15 Feb 2026 06:40:03 +0000
asID:                     19373
IP address blocks:        201.161.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:60:2b:35:27:31:3d:a9:74:9d:35:0f:41:d1:7b:4e:40:95:dd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:35:03 2025 GMT
            Not After : Feb 15 06:40:03 2026 GMT
        Subject: CN=21F96F1C16CA8EAA5085E0BAFFB7CEEC724701E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2c:aa:7c:c5:78:f4:3f:56:b9:29:62:c4:e6:
                    53:03:04:0a:e8:21:d2:76:a8:f9:61:f1:8b:65:c6:
                    d0:48:b7:98:88:cf:70:4e:0c:9d:d2:2d:da:f2:ec:
                    31:c5:df:f3:73:ef:d2:7f:5f:7f:c0:bf:38:ae:bd:
                    58:ff:7c:5a:a7:60:ac:c5:28:8a:4d:84:a2:00:3b:
                    e6:49:a2:b0:9e:40:88:58:3d:2d:61:c0:09:16:9e:
                    b3:1d:f8:d6:3c:ca:76:44:b9:b9:2f:93:86:f9:ed:
                    0b:77:bc:86:1d:bf:1b:23:e0:86:de:a4:56:49:68:
                    00:a2:56:5b:1a:79:a8:5b:a6:65:44:e9:80:cf:39:
                    15:29:92:c5:d6:87:09:02:ad:20:c2:c1:80:26:ad:
                    19:21:64:73:d9:2d:c6:f3:36:13:75:40:8b:87:d6:
                    19:10:50:71:8c:11:7a:42:32:92:03:dc:c7:ad:fb:
                    c4:af:89:fe:a6:84:08:fa:39:46:21:eb:a4:08:a8:
                    e7:5a:28:02:d4:b9:9f:c1:ea:a9:b8:54:42:53:ad:
                    56:4f:b0:1f:4d:08:19:d7:cf:1a:c8:1b:9f:74:c2:
                    ab:a3:03:ca:6a:84:12:58:64:0a:3e:41:3e:9e:57:
                    dd:26:bf:7b:92:7a:c9:e5:5f:63:26:65:ff:e8:68:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F9:6F:1C:16:CA:8E:AA:50:85:E0:BA:FF:B7:CE:EC:72:47:01:E6
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e36342e302f31392d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.161.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:53:bd:85:99:b1:b5:f2:b8:e4:c9:88:a2:95:78:61:5a:b6:
         3f:a9:25:51:f3:aa:de:fc:82:0e:59:7c:db:ad:e5:87:5a:d0:
         4b:c4:8d:54:7b:be:8d:d8:34:9b:24:99:ff:49:87:17:7c:04:
         bb:bf:19:af:2a:fb:d4:cc:09:2b:8b:1c:0b:18:fd:7d:20:a3:
         97:86:fb:56:b1:04:8c:fb:5b:4f:13:a7:41:ef:80:ea:eb:78:
         6d:38:0f:9b:71:01:4e:fd:2a:69:e0:37:07:32:29:f9:a5:7f:
         84:ba:26:f2:96:9e:0b:e7:03:60:45:17:a6:cc:18:f5:74:a6:
         59:e8:5f:b2:f2:1d:aa:72:f8:5a:75:1a:6c:2e:c5:d5:e8:d5:
         d9:61:e6:29:58:18:88:2a:de:d3:6d:88:e0:85:45:7c:e8:c4:
         15:a0:f4:61:3e:3f:e7:52:ce:5e:8c:5e:5b:1e:76:4e:87:0e:
         7a:76:02:32:0b:6e:5b:9f:5a:e0:03:d7:29:a7:44:ff:88:ae:
         a1:4c:b6:af:ce:a3:ae:84:70:b7:a7:c5:d1:54:ee:48:7e:3c:
         a5:8a:c0:12:f1:90:a1:4b:ae:85:ba:c0:23:20:b1:75:e6:76:
         c7:eb:1a:16:3b:0c:b2:33:95:fe:9a:4d:63:ff:3c:da:b1:16:
         ac:39:7a:08
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZGArNScxPal0nTUPQdF7TkCV3QgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBNjI4NjNCNUVCREY2QzI3QjU2NzQxQzNCOEIyNjI0
RTM3OTExOTAeFw0yNTAyMTYwNjM1MDNaFw0yNjAyMTUwNjQwMDNaMDMxMTAvBgNV
BAMTKDIxRjk2RjFDMTZDQThFQUE1MDg1RTBCQUZGQjdDRUVDNzI0NzAxRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCULKp8xXj0P1a5KWLE5lMDBAro
IdJ2qPlh8YtlxtBIt5iIz3BODJ3SLdry7DHF3/Nz79J/X3/AvziuvVj/fFqnYKzF
KIpNhKIAO+ZJorCeQIhYPS1hwAkWnrMd+NY8ynZEubkvk4b57Qt3vIYdvxsj4Ibe
pFZJaACiVlsaeahbpmVE6YDPORUpksXWhwkCrSDCwYAmrRkhZHPZLcbzNhN1QIuH
1hkQUHGMEXpCMpID3Met+8Svif6mhAj6OUYh66QIqOdaKALUuZ/B6qm4VEJTrVZP
sB9NCBnXzxrIG590wqujA8pqhBJYZAo+QT6eV90mv3uSesnlX2MmZf/oaGCPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIflvHBbKjqpQheC6/7fO7HJHAeYwHwYDVR0j
BBgwFoAUVKYoY7Xr32wntWdBw7iyYk43kRkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjBEODY0OTA0NjBCN0Q2MzEzMzhGNzA5MUU2NjBCMzM3
RjlDRDExMkYyNUJEOTBFMEYzMUVFREEyMjgzNURCLzAvNTRBNjI4NjNCNUVCREY2
QzI3QjU2NzQxQzNCOEIyNjI0RTM3OTExOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEE2Mjg2M0I1RUJERjZDMjdC
NTY3NDFDM0I4QjI2MjRFMzc5MTE5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTYwRDg2NDkwNDYwQjdENjMxMzM4RjcwOTFFNjYwQjMzN0Y5Q0QxMTJG
MjVCRDkwRTBGMzFFRURBMjI4MzVEQi8wLzMyMzAzMTJlMzEzNjMxMmUzNjM0MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzOTMzMzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcmhQDAN
BgkqhkiG9w0BAQsFAAOCAQEAKlO9hZmxtfK45MmIopV4YVq2P6klUfOq3vyCDll8
263lh1rQS8SNVHu+jdg0mySZ/0mHF3wEu78Zryr71MwJK4scCxj9fSCjl4b7VrEE
jPtbTxOnQe+A6ut4bTgPm3EBTv0qaeA3BzIp+aV/hLom8paeC+cDYEUXpswY9XSm
WehfsvIdqnL4WnUabC7F1ejV2WHmKVgYiCre022I4IVFfOjEFaD0YT4/51LOXoxe
Wx52TocOenYCMgtuW59a4APXKadE/4iuoUy2r86jroRwt6fF0VTuSH48pYrAEvGQ
oUuuhbrAIyCxdeZ2x+saFjsMsjOV/ppNY/882rEWrDl6CA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:12:36 2025 by rpki-client