Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3139392e3234382e3134342e302f32342d3234203d3e2033353937.roa
File:                     3139392e3234382e3134342e302f32342d3234203d3e2033353937.roa (raw, json)
Hash identifier:          kxN7Zr18NVYeXHpjBVseK+GaOGIuNRiVk4NC3GztYhQ=
Subject key identifier:   74:53:54:22:8E:1C:69:82:89:EC:C5:55:F1:E4:55:A7:25:D3:CF:02
Certificate issuer:       /CN=F5141320452E9DA4404C594445360E531655082A
Certificate serial:       043D9ECDEE2DBBA418E1EC1DAF61E85486E2E54B
Authority key identifier: F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3139392e3234382e3134342e302f32342d3234203d3e2033353937.roa
Signing time:             Tue 04 Feb 2025 18:39:29 +0000
ROA not before:           Tue 04 Feb 2025 18:34:29 +0000
ROA not after:            Tue 03 Feb 2026 18:39:29 +0000
asID:                     3597
IP address blocks:        199.248.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3d:9e:cd:ee:2d:bb:a4:18:e1:ec:1d:af:61:e8:54:86:e2:e5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5141320452E9DA4404C594445360E531655082A
        Validity
            Not Before: Feb  4 18:34:29 2025 GMT
            Not After : Feb  3 18:39:29 2026 GMT
        Subject: CN=745354228E1C698289ECC555F1E455A725D3CF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:3d:e2:b5:02:1e:01:c7:61:3e:7d:b1:03:
                    54:1d:57:71:78:cd:fa:1b:62:4a:1c:49:5c:c3:d5:
                    39:67:61:34:fc:42:ed:4b:dc:3b:2f:a6:68:1b:34:
                    5e:70:ed:32:f5:9a:e9:44:27:da:86:db:9d:26:16:
                    1a:ea:1b:0d:9e:25:cc:b9:38:ec:75:6a:1d:bd:1b:
                    3f:75:36:0e:56:c4:9b:ac:a0:ad:ce:fc:fe:b0:7f:
                    b3:14:d0:0c:19:d7:1e:82:39:83:b8:34:94:27:0d:
                    18:0e:3c:36:16:c6:9e:ff:da:5e:40:f3:3e:4a:b2:
                    f3:cd:37:cb:1f:dc:bf:e5:d4:36:de:15:9c:bf:f9:
                    5e:cb:72:b1:e9:ce:02:e6:ea:a6:80:61:1a:dc:da:
                    0d:3a:5e:34:f3:2b:3e:e5:83:cf:0d:16:3a:87:7d:
                    c5:c0:ce:76:ce:4d:00:e5:52:c5:26:5a:92:4e:95:
                    de:74:1a:fd:2a:d5:b8:20:32:92:b1:ae:de:96:43:
                    6e:b5:9a:2f:60:01:94:fd:ae:64:b1:34:9a:3d:a7:
                    1e:75:25:50:f9:75:2e:05:54:0d:85:83:f1:4b:53:
                    91:08:03:dd:d4:06:5a:39:80:d8:0b:66:72:0b:58:
                    d2:e7:a7:a4:f6:19:dd:81:56:b9:6f:0c:58:b9:c4:
                    ba:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:53:54:22:8E:1C:69:82:89:EC:C5:55:F1:E4:55:A7:25:D3:CF:02
            X509v3 Authority Key Identifier:
                keyid:F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3139392e3234382e3134342e302f32342d3234203d3e2033353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:59:a6:db:71:5a:84:dd:5d:24:f8:85:28:43:f1:93:f6:2f:
         d8:d8:96:19:39:52:9d:e4:07:cc:36:f0:fd:c3:8a:a7:2e:70:
         e4:7f:d3:71:ef:e7:08:4d:cf:be:97:65:32:0f:37:82:4d:c0:
         39:4e:df:05:ea:9e:1f:80:cd:d1:d6:8a:3c:ac:84:d6:21:d4:
         8d:0b:25:79:6e:3d:83:89:07:8e:28:d8:c7:e1:3e:72:48:dd:
         3c:50:fa:7d:df:12:15:c8:bc:ae:30:b3:dd:e6:ef:0f:8a:a2:
         7d:86:36:e1:e4:2c:1a:c3:4e:9b:ef:d3:82:4b:67:23:f8:f8:
         df:7f:21:c0:aa:f2:4c:1e:8f:84:c6:03:ef:8b:9e:08:d8:4f:
         0a:0c:16:9c:d3:f5:66:87:45:53:4b:31:fc:31:68:01:ec:fe:
         09:12:ab:50:46:f4:25:e8:a8:58:7e:8e:97:09:a4:1b:7e:4e:
         28:34:0b:e2:dd:1d:1c:3e:ba:9d:60:97:15:cf:c6:bc:2b:49:
         e7:b9:15:cb:87:e1:79:ff:f8:59:d2:a7:22:23:3c:e5:27:56:
         47:d9:cd:ce:b4:08:ed:f3:49:1c:ba:2e:85:3e:7f:9c:11:7e:
         4f:7a:d9:eb:36:39:8a:06:b9:11:1b:70:36:7a:97:77:10:6a:
         7d:6d:5a:d4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBD2eze4tu6QY4ewdr2HoVIbi5UswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxNDEzMjA0NTJFOURBNDQwNEM1OTQ0NDUzNjBFNTMx
NjU1MDgyQTAeFw0yNTAyMDQxODM0MjlaFw0yNjAyMDMxODM5MjlaMDMxMTAvBgNV
BAMTKDc0NTM1NDIyOEUxQzY5ODI4OUVDQzU1NUYxRTQ1NUE3MjVEM0NGMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwaz3itQIeAcdhPn2xA1QdV3F4
zfobYkocSVzD1TlnYTT8Qu1L3DsvpmgbNF5w7TL1mulEJ9qG250mFhrqGw2eJcy5
OOx1ah29Gz91Ng5WxJusoK3O/P6wf7MU0AwZ1x6COYO4NJQnDRgOPDYWxp7/2l5A
8z5KsvPNN8sf3L/l1DbeFZy/+V7LcrHpzgLm6qaAYRrc2g06XjTzKz7lg88NFjqH
fcXAznbOTQDlUsUmWpJOld50Gv0q1bggMpKxrt6WQ261mi9gAZT9rmSxNJo9px51
JVD5dS4FVA2Fg/FLU5EIA93UBlo5gNgLZnILWNLnp6T2Gd2BVrlvDFi5xLpZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUdFNUIo4caYKJ7MVV8eRVpyXTzwIwHwYDVR0j
BBgwFoAU9RQTIEUunaRATFlERTYOUxZVCCowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzdGODEzQ0QxMDY2QkU3RjdDNDlCNjA2NTJFRDJDN0FD
RkVDODYzMjQ0M0E2MTlCOUE0N0JCRjI5NkU1NEU5LzAvRjUxNDEzMjA0NTJFOURB
NDQwNEM1OTQ0NDUzNjBFNTMxNjU1MDgyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTE0MTMyMDQ1MkU5REE0NDA0
QzU5NDQ0NTM2MEU1MzE2NTUwODJBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjc3RjgxM0NEMTA2NkJFN0Y3QzQ5QjYwNjUyRUQyQzdBQ0ZFQzg2MzI0
NDNBNjE5QjlBNDdCQkYyOTZFNTRFOS8wLzMxMzkzOTJlMzIzNDM4MmUzMTM0MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM1MzkzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMf4kDAN
BgkqhkiG9w0BAQsFAAOCAQEAelmm23FahN1dJPiFKEPxk/Yv2NiWGTlSneQHzDbw
/cOKpy5w5H/Tce/nCE3PvpdlMg83gk3AOU7fBeqeH4DN0daKPKyE1iHUjQsleW49
g4kHjijYx+E+ckjdPFD6fd8SFci8rjCz3ebvD4qifYY24eQsGsNOm+/TgktnI/j4
338hwKryTB6PhMYD74ueCNhPCgwWnNP1ZodFU0sx/DFoAez+CRKrUEb0JeioWH6O
lwmkG35OKDQL4t0dHD66nWCXFc/GvCtJ57kVy4fhef/4WdKnIiM85SdWR9nNzrQI
7fNJHLouhT5/nBF+T3rZ6zY5iga5ERtwNnqXdxBqfW1a1A==
-----END CERTIFICATE-----
Generated at Mon Apr 14 15:38:29 2025 by rpki-client