Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/3134332e3230322e31322e302f32322d3234203d3e20323637373736.roa
File:                     3134332e3230322e31322e302f32322d3234203d3e20323637373736.roa (raw, json)
Hash identifier:          9+bOG9esOizCbtiIj0AVZx/02IUjfJSnehc4NBQfWcA=
Subject key identifier:   9F:14:A3:C6:B7:99:C8:3D:9A:EF:9C:5E:BB:51:CC:26:74:8A:B7:2F
Certificate issuer:       /CN=9D3515E483AB07CDCE67D20C458F1663A26D31AD
Certificate serial:       1C53F075082C57459543427BACD460E5BF01FA18
Authority key identifier: 9D:35:15:E4:83:AB:07:CD:CE:67:D2:0C:45:8F:16:63:A2:6D:31:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/3134332e3230322e31322e302f32322d3234203d3e20323637373736.roa
Signing time:             Tue 04 Feb 2025 18:18:19 +0000
ROA not before:           Tue 04 Feb 2025 18:13:19 +0000
ROA not after:            Tue 03 Feb 2026 18:18:19 +0000
asID:                     267776
IP address blocks:        143.202.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:53:f0:75:08:2c:57:45:95:43:42:7b:ac:d4:60:e5:bf:01:fa:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D3515E483AB07CDCE67D20C458F1663A26D31AD
        Validity
            Not Before: Feb  4 18:13:19 2025 GMT
            Not After : Feb  3 18:18:19 2026 GMT
        Subject: CN=9F14A3C6B799C83D9AEF9C5EBB51CC26748AB72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9b:e3:14:86:3d:fe:b8:af:7e:75:95:90:7c:
                    a5:36:29:51:2d:c9:1a:58:55:b2:97:ff:7b:3a:9a:
                    ee:06:62:99:9e:20:cc:3a:9e:54:74:bb:c9:df:f2:
                    42:37:5d:16:52:f1:23:ec:8d:c8:5b:1e:f9:0e:49:
                    60:51:7c:0d:70:63:8c:24:02:08:89:fd:92:37:31:
                    73:c1:af:e4:a4:33:aa:5f:7c:c4:83:67:ee:60:2b:
                    24:95:53:fe:54:df:0b:c6:19:68:1c:b4:9f:dd:04:
                    18:a1:b4:a1:55:c7:cb:2c:0d:8b:63:24:be:32:11:
                    86:75:0a:fe:73:1b:1d:02:76:a0:32:95:59:1d:e8:
                    88:a5:9e:9d:61:3c:0a:a3:27:30:63:a3:ce:ec:41:
                    a7:32:44:42:f6:03:28:2c:3b:ff:0b:f1:cf:f9:97:
                    53:60:4b:fa:09:d7:93:dc:2a:7b:bc:34:f1:61:9c:
                    e9:79:35:7e:cd:d8:11:8b:39:6c:dc:12:1a:1f:62:
                    5d:f9:61:a4:55:c8:6a:88:0a:03:e6:c4:62:c2:5e:
                    5d:00:6c:b1:d0:61:fb:4f:43:e3:a0:7f:3a:1e:7a:
                    dc:6a:23:76:71:4b:92:91:9f:7c:b5:0d:19:3b:f6:
                    d3:e9:21:99:c9:a5:a8:e6:61:0b:2e:eb:ba:06:3c:
                    2f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:14:A3:C6:B7:99:C8:3D:9A:EF:9C:5E:BB:51:CC:26:74:8A:B7:2F
            X509v3 Authority Key Identifier:
                keyid:9D:35:15:E4:83:AB:07:CD:CE:67:D2:0C:45:8F:16:63:A2:6D:31:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D3515E483AB07CDCE67D20C458F1663A26D31AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF1801CA218139C3436CD4F43EA192412B2CF82E88DF7DA3934069D0D04B2CBD/0/3134332e3230322e31322e302f32322d3234203d3e20323637373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:bc:f5:94:07:f1:63:d9:5f:f4:ab:4d:09:aa:96:49:5c:ea:
         62:bd:f6:c2:97:c9:99:15:e0:7d:90:28:c0:1e:1d:ac:1e:c0:
         3a:5c:03:be:ca:08:98:4f:88:f5:81:76:4a:43:d7:4e:1f:e1:
         07:3d:1e:b5:31:e6:e2:48:18:2e:b2:4e:40:7f:6a:a9:fa:ee:
         b4:ce:15:aa:ed:4d:b3:36:66:63:fc:63:fc:a1:95:e4:36:6d:
         36:08:ce:39:db:c9:53:3e:21:21:39:60:fe:97:46:eb:d7:07:
         f6:fc:29:55:f3:b4:4d:f2:ad:6b:21:00:c9:d9:9c:fa:47:61:
         a2:75:fe:d4:8f:07:6c:47:80:52:23:93:60:01:05:fe:4a:3c:
         d0:24:86:d4:ed:48:7f:f0:d1:fd:5a:69:01:c9:a0:01:1c:9c:
         32:cf:80:59:a1:9e:27:ba:a1:db:0f:5d:4c:8d:20:71:47:e7:
         b7:da:6f:ad:7a:79:92:81:6a:2e:d3:30:6a:5e:5f:6c:87:ee:
         5f:6b:9d:19:2f:93:87:6e:42:f7:e6:48:89:1c:d0:1d:9a:86:
         bf:ef:d8:28:b4:8f:2e:27:e2:2d:59:b5:b5:28:c6:1b:28:0a:
         d8:a8:39:26:14:87:14:b1:40:74:34:f6:bc:66:7b:18:66:64:
         86:dc:39:21
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHFPwdQgsV0WVQ0J7rNRg5b8B+hgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQzNTE1RTQ4M0FCMDdDRENFNjdEMjBDNDU4RjE2NjNB
MjZEMzFBRDAeFw0yNTAyMDQxODEzMTlaFw0yNjAyMDMxODE4MTlaMDMxMTAvBgNV
BAMTKDlGMTRBM0M2Qjc5OUM4M0Q5QUVGOUM1RUJCNTFDQzI2NzQ4QUI3MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNm+MUhj3+uK9+dZWQfKU2KVEt
yRpYVbKX/3s6mu4GYpmeIMw6nlR0u8nf8kI3XRZS8SPsjchbHvkOSWBRfA1wY4wk
AgiJ/ZI3MXPBr+SkM6pffMSDZ+5gKySVU/5U3wvGGWgctJ/dBBihtKFVx8ssDYtj
JL4yEYZ1Cv5zGx0CdqAylVkd6Iilnp1hPAqjJzBjo87sQacyREL2AygsO/8L8c/5
l1NgS/oJ15PcKnu8NPFhnOl5NX7N2BGLOWzcEhofYl35YaRVyGqICgPmxGLCXl0A
bLHQYftPQ+OgfzoeetxqI3ZxS5KRn3y1DRk79tPpIZnJpajmYQsu67oGPC+nAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnxSjxreZyD2a75xeu1HMJnSKty8wHwYDVR0j
BBgwFoAUnTUV5IOrB83OZ9IMRY8WY6JtMa0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjE4MDFDQTIxODEzOUMzNDM2Q0Q0RjQzRUExOTI0MTJC
MkNGODJFODhERjdEQTM5MzQwNjlEMEQwNEIyQ0JELzAvOUQzNTE1RTQ4M0FCMDdD
RENFNjdEMjBDNDU4RjE2NjNBMjZEMzFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDM1MTVFNDgzQUIwN0NEQ0U2
N0QyMEM0NThGMTY2M0EyNkQzMUFELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUYxODAxQ0EyMTgxMzlDMzQzNkNENEY0M0VBMTkyNDEyQjJDRjgyRTg4
REY3REEzOTM0MDY5RDBEMDRCMkNCRC8wLzMxMzQzMzJlMzIzMDMyMmUzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzczNzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj8oM
MA0GCSqGSIb3DQEBCwUAA4IBAQBAvPWUB/Fj2V/0q00JqpZJXOpivfbCl8mZFeB9
kCjAHh2sHsA6XAO+ygiYT4j1gXZKQ9dOH+EHPR61MebiSBgusk5Af2qp+u60zhWq
7U2zNmZj/GP8oZXkNm02CM4528lTPiEhOWD+l0br1wf2/ClV87RN8q1rIQDJ2Zz6
R2Gidf7UjwdsR4BSI5NgAQX+SjzQJIbU7Uh/8NH9WmkByaABHJwyz4BZoZ4nuqHb
D11MjSBxR+e32m+tenmSgWou0zBqXl9sh+5fa50ZL5OHbkL35kiJHNAdmoa/79go
tI8uJ+ItWbW1KMYbKArYqDkmFIcUsUB0NPa8ZnsYZmSG3Dkh
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:56:25 2025 by rpki-client