Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa
File:                     3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          AsEHVSdxN/om5UYh7LmOx7ME5F/4rOyHrR6Vp7TmmYs=
Subject key identifier:   FF:7E:2D:96:65:A3:B2:7C:55:AC:52:DE:9E:52:6A:82:BC:DB:B9:52
Certificate issuer:       /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
Certificate serial:       01DA330371EE859AEAB6B6DE29F26376F8FDC3B7
Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa
Signing time:             Thu 23 Jan 2025 16:00:00 +0000
ROA not before:           Thu 23 Jan 2025 15:55:00 +0000
ROA not after:            Thu 22 Jan 2026 16:00:00 +0000
asID:                     262189
IP address blocks:        131.196.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:da:33:03:71:ee:85:9a:ea:b6:b6:de:29:f2:63:76:f8:fd:c3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
        Validity
            Not Before: Jan 23 15:55:00 2025 GMT
            Not After : Jan 22 16:00:00 2026 GMT
        Subject: CN=FF7E2D9665A3B27C55AC52DE9E526A82BCDBB952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:22:46:68:2d:03:cc:ce:b4:1c:c9:ca:45:
                    ec:4b:f8:b4:0c:42:41:10:01:c2:07:70:86:47:b8:
                    52:a4:48:90:bd:55:4a:47:4b:4f:25:51:52:ba:63:
                    4a:62:76:b6:30:d8:03:98:8a:e1:c5:e0:bf:d9:f4:
                    36:02:e9:e0:a2:5d:a8:3b:3f:5a:a5:af:eb:9a:f3:
                    a8:02:2a:7a:b1:83:34:5f:26:7c:77:05:bb:9c:df:
                    95:8d:6d:a9:75:28:c8:c5:01:ea:7c:73:3f:2b:58:
                    fe:d0:00:0c:d9:03:dd:0a:fa:95:c4:97:96:20:28:
                    0f:74:72:b6:94:37:b0:06:2e:d0:52:70:ab:95:82:
                    a6:5e:e5:15:aa:d6:22:95:f7:f1:fe:e9:76:f5:af:
                    f7:84:8f:da:0b:b9:5c:be:e8:4f:1e:4b:00:16:9d:
                    2d:41:a4:e0:9c:98:1a:63:b0:d6:12:c3:1f:88:c7:
                    99:97:e1:f5:79:1f:b9:71:46:64:de:d5:54:86:ea:
                    1d:7a:b4:a9:65:c8:32:73:af:05:ee:03:19:4e:c2:
                    67:4b:6c:55:9b:4b:78:16:0e:76:58:5c:16:7d:1b:
                    14:8f:5f:33:c7:7d:00:5c:a8:5d:ce:a8:55:f4:23:
                    c9:04:f9:1b:be:3f:95:5b:bc:43:50:95:75:fe:4d:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7E:2D:96:65:A3:B2:7C:55:AC:52:DE:9E:52:6A:82:BC:DB:B9:52
            X509v3 Authority Key Identifier:
                keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:99:b0:83:53:33:29:77:22:e4:49:96:8e:e0:ae:fc:1b:a5:
         94:c3:1d:5a:4d:96:c9:f6:3c:f0:4d:a4:92:d7:8b:74:8f:56:
         b3:e3:ec:68:44:09:7a:c0:1c:e5:40:00:13:24:9a:2e:fa:c7:
         40:ad:bc:5e:3e:5b:85:e9:78:aa:76:1a:27:c0:c0:d3:a4:2f:
         25:0e:92:28:c4:dd:b5:53:32:73:b6:94:0d:9e:e8:f4:88:23:
         10:0f:02:64:46:63:81:e1:27:0f:5a:11:05:c3:17:d7:6a:5b:
         a8:a8:be:af:81:d8:eb:e7:6f:85:fe:dc:03:7e:02:50:8f:75:
         f2:b8:d5:93:70:fc:26:f7:f2:30:e3:c2:9a:09:66:f4:e1:18:
         98:87:ce:18:7a:c3:4a:85:ad:3f:47:14:af:54:93:bc:b6:8a:
         5c:5a:9c:da:76:65:15:26:1e:00:74:1b:07:d3:98:26:bc:0b:
         45:8d:92:13:64:44:4b:36:9e:19:aa:cb:dc:75:ea:fe:8d:65:
         f5:07:64:c0:d5:22:a5:3e:f5:0b:eb:bf:c3:50:d4:7c:74:0b:
         79:75:b2:c0:a5:11:98:48:5f:50:5a:a4:7e:73:a6:f5:45:12:
         9c:12:56:b1:37:5b:fe:50:81:3a:9b:43:60:cc:77:6f:eb:2f:
         23:74:bf:31
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAdozA3HuhZrqtrbeKfJjdvj9w7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg5QUZEM0E5MTI1RERDODhBRENFMkI2REZCQzYzN0Uz
OEE3MTFGNTAeFw0yNTAxMjMxNTU1MDBaFw0yNjAxMjIxNjAwMDBaMDMxMTAvBgNV
BAMTKEZGN0UyRDk2NjVBM0IyN0M1NUFDNTJERTlFNTI2QTgyQkNEQkI5NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWsyJGaC0DzM60HMnKRexL+LQM
QkEQAcIHcIZHuFKkSJC9VUpHS08lUVK6Y0pidrYw2AOYiuHF4L/Z9DYC6eCiXag7
P1qlr+ua86gCKnqxgzRfJnx3Bbuc35WNbal1KMjFAep8cz8rWP7QAAzZA90K+pXE
l5YgKA90craUN7AGLtBScKuVgqZe5RWq1iKV9/H+6Xb1r/eEj9oLuVy+6E8eSwAW
nS1BpOCcmBpjsNYSwx+Ix5mX4fV5H7lxRmTe1VSG6h16tKllyDJzrwXuAxlOwmdL
bFWbS3gWDnZYXBZ9GxSPXzPHfQBcqF3OqFX0I8kE+Ru+P5VbvENQlXX+TRAPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU/34tlmWjsnxVrFLenlJqgrzbuVIwHwYDVR0j
BBgwFoAUmJr9OpEl3ciK3OK237xjfjinEfUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQjA1NjMwMEY3MDM0NEZFRjA2RkNFOTQwNjQ1MDI4Mjkz
NzAwMUVBMUM3M0JGQzQzQjBBMDQ2NTc5MEE1REU0LzAvOTg5QUZEM0E5MTI1RERD
ODhBRENFMkI2REZCQzYzN0UzOEE3MTFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODlBRkQzQTkxMjVEREM4OEFE
Q0UyQjZERkJDNjM3RTM4QTcxMUY1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkIwNTYzMDBGNzAzNDRGRUYwNkZDRTk0MDY0NTAyODI5MzcwMDFFQTFD
NzNCRkM0M0IwQTA0NjU3OTBBNURFNC8wLzMxMzMzMTJlMzEzOTM2MmUzMzM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8Qn
MA0GCSqGSIb3DQEBCwUAA4IBAQB1mbCDUzMpdyLkSZaO4K78G6WUwx1aTZbJ9jzw
TaSS14t0j1az4+xoRAl6wBzlQAATJJou+sdArbxePluF6XiqdhonwMDTpC8lDpIo
xN21UzJztpQNnuj0iCMQDwJkRmOB4ScPWhEFwxfXaluoqL6vgdjr52+F/twDfgJQ
j3XyuNWTcPwm9/Iw48KaCWb04RiYh84YesNKha0/RxSvVJO8topcWpzadmUVJh4A
dBsH05gmvAtFjZITZERLNp4Zqsvcder+jWX1B2TA1SKlPvUL67/DUNR8dAt5dbLA
pRGYSF9QWqR+c6b1RRKcElaxN1v+UIE6m0NgzHdv6y8jdL8x
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:05:25 2025 by rpki-client