Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/3133382e3235352e3130302e302f32322d3234203d3e20323633373032.roa
File:                     3133382e3235352e3130302e302f32322d3234203d3e20323633373032.roa (raw, json)
Hash identifier:          0BEzLPlb0KJ6lW+YTK/hq43agxe4g05WxbDJ7Hgn+Ro=
Subject key identifier:   79:0F:0B:BE:6D:EE:67:4F:A7:E8:4D:0D:6F:A6:F5:77:53:8A:60:B9
Certificate issuer:       /CN=6E90D630525F8D2B3768945D2D18476B244030E8
Certificate serial:       3DB0C89B35AC4E5A56A7D4BEC7F895B3E7572E54
Authority key identifier: 6E:90:D6:30:52:5F:8D:2B:37:68:94:5D:2D:18:47:6B:24:40:30:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/3133382e3235352e3130302e302f32322d3234203d3e20323633373032.roa
Signing time:             Tue 04 Feb 2025 18:47:09 +0000
ROA not before:           Tue 04 Feb 2025 18:42:09 +0000
ROA not after:            Tue 03 Feb 2026 18:47:09 +0000
asID:                     263702
IP address blocks:        138.255.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 12:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b0:c8:9b:35:ac:4e:5a:56:a7:d4:be:c7:f8:95:b3:e7:57:2e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E90D630525F8D2B3768945D2D18476B244030E8
        Validity
            Not Before: Feb  4 18:42:09 2025 GMT
            Not After : Feb  3 18:47:09 2026 GMT
        Subject: CN=790F0BBE6DEE674FA7E84D0D6FA6F577538A60B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:6d:06:1d:d0:30:5e:05:9a:69:ad:f3:df:
                    d9:b4:f0:3c:c4:06:34:3e:65:9d:72:0c:fd:fb:8d:
                    09:7a:3d:15:ab:b5:72:31:4f:59:7e:e7:25:83:eb:
                    d7:14:7e:1c:49:8e:dd:43:2f:3e:36:86:b9:fd:0e:
                    b3:82:fd:50:4a:95:b7:7c:a8:29:e2:08:c2:95:9c:
                    e1:07:6d:05:06:b0:89:16:24:0d:64:08:ed:b1:15:
                    83:f1:8d:d4:1f:2d:a6:f7:02:07:e1:4b:71:de:7d:
                    ae:60:d6:43:02:1b:87:ac:6a:5e:ce:60:b8:88:f0:
                    ed:4e:86:f9:6c:aa:aa:f9:40:8b:27:a2:ad:9b:9e:
                    34:e8:f4:44:20:fe:a9:08:f1:80:ba:2c:34:2a:ca:
                    76:4a:9e:8a:ce:c2:91:7c:b8:44:76:99:4f:57:41:
                    59:c6:4f:9e:61:1c:52:67:59:b9:7c:10:cb:28:e6:
                    0e:51:72:9d:a6:77:4c:11:95:5c:95:c9:ad:3f:81:
                    aa:86:bd:82:fa:df:eb:a6:75:33:03:a1:a1:5c:ec:
                    46:10:7f:67:d9:55:eb:0f:89:e0:3e:5a:64:2c:6d:
                    4e:a0:69:1a:96:92:06:75:33:90:13:68:5d:b3:cf:
                    fd:be:9a:35:e8:1e:8c:1f:aa:e4:46:0b:28:63:7b:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0F:0B:BE:6D:EE:67:4F:A7:E8:4D:0D:6F:A6:F5:77:53:8A:60:B9
            X509v3 Authority Key Identifier:
                keyid:6E:90:D6:30:52:5F:8D:2B:37:68:94:5D:2D:18:47:6B:24:40:30:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/3133382e3235352e3130302e302f32322d3234203d3e20323633373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:17:8a:90:70:7c:d3:6b:1a:53:27:df:13:2d:30:a6:a6:43:
         62:1e:bc:69:57:65:a3:00:e7:df:4a:06:51:d0:70:e8:c8:2e:
         3e:4d:86:60:ce:a8:ae:30:9a:05:2e:51:eb:12:c0:29:b1:89:
         d2:98:54:eb:d7:7d:85:7f:6b:08:a1:8d:08:dc:a3:02:e6:d8:
         97:f6:c7:7f:40:71:50:3d:bc:5a:45:ca:58:d0:59:b0:6d:d9:
         6a:84:7b:05:7c:cf:bb:82:bf:35:4b:d2:cc:2d:e5:f6:c0:71:
         36:4e:ec:ed:76:b2:f1:2a:80:d4:54:b0:73:23:7f:e7:92:4a:
         96:84:5a:99:38:28:e1:f9:19:18:2a:98:43:4c:0b:f4:ec:d2:
         70:ab:f0:a6:71:d8:c8:4a:f1:5a:2a:5c:67:b4:2d:44:15:d5:
         62:69:aa:82:ff:3a:4d:a6:1d:90:12:e4:4b:f4:79:dc:fe:17:
         c7:73:c9:64:e2:0f:e5:25:c5:ce:a6:f7:54:d1:79:43:3d:c3:
         dc:aa:f8:fe:9e:d4:0a:0e:00:0b:ad:91:b2:47:3d:f4:fd:ea:
         71:01:d0:8c:f5:12:61:86:80:76:c9:d5:8b:85:53:ae:4d:e4:
         8c:25:ab:cd:ff:a7:3e:8a:6e:53:f8:0c:b8:d3:da:a3:e6:66:
         5f:69:4c:59
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUPbDImzWsTlpWp9S+x/iVs+dXLlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU5MEQ2MzA1MjVGOEQyQjM3Njg5NDVEMkQxODQ3NkIy
NDQwMzBFODAeFw0yNTAyMDQxODQyMDlaFw0yNjAyMDMxODQ3MDlaMDMxMTAvBgNV
BAMTKDc5MEYwQkJFNkRFRTY3NEZBN0U4NEQwRDZGQTZGNTc3NTM4QTYwQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ1W0GHdAwXgWaaa3z39m08DzE
BjQ+ZZ1yDP37jQl6PRWrtXIxT1l+5yWD69cUfhxJjt1DLz42hrn9DrOC/VBKlbd8
qCniCMKVnOEHbQUGsIkWJA1kCO2xFYPxjdQfLab3AgfhS3Hefa5g1kMCG4esal7O
YLiI8O1Ohvlsqqr5QIsnoq2bnjTo9EQg/qkI8YC6LDQqynZKnorOwpF8uER2mU9X
QVnGT55hHFJnWbl8EMso5g5Rcp2md0wRlVyVya0/gaqGvYL63+umdTMDoaFc7EYQ
f2fZVesPieA+WmQsbU6gaRqWkgZ1M5ATaF2zz/2+mjXoHowfquRGCyhjezqRAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUeQ8Lvm3uZ0+n6E0Nb6b1d1OKYLkwHwYDVR0j
BBgwFoAUbpDWMFJfjSs3aJRdLRhHayRAMOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQkY1M0M4REU0QUJEMUQ1RTZCNUNCRTY3RkM3QUMxNzlF
MjRCNjhFMjM4MzdBNDgzQjNFQjRENTk1NjA0QzhBLzAvNkU5MEQ2MzA1MjVGOEQy
QjM3Njg5NDVEMkQxODQ3NkIyNDQwMzBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RTkwRDYzMDUyNUY4RDJCMzc2
ODk0NUQyRDE4NDc2QjI0NDAzMEU4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkJGNTNDOERFNEFCRDFENUU2QjVDQkU2N0ZDN0FDMTc5RTI0QjY4RTIz
ODM3QTQ4M0IzRUI0RDU5NTYwNEM4QS8wLzMxMzMzODJlMzIzNTM1MmUzMTMwMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzNzMwMzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
/2QwDQYJKoZIhvcNAQELBQADggEBAFsXipBwfNNrGlMn3xMtMKamQ2IevGlXZaMA
599KBlHQcOjILj5NhmDOqK4wmgUuUesSwCmxidKYVOvXfYV/awihjQjcowLm2Jf2
x39AcVA9vFpFyljQWbBt2WqEewV8z7uCvzVL0swt5fbAcTZO7O12svEqgNRUsHMj
f+eSSpaEWpk4KOH5GRgqmENMC/Ts0nCr8KZx2MhK8VoqXGe0LUQV1WJpqoL/Ok2m
HZAS5Ev0edz+F8dzyWTiD+Ulxc6m91TReUM9w9yq+P6e1AoOAAutkbJHPfT96nEB
0Iz1EmGGgHbJ1YuFU65N5Iwlq83/pz6KblP4DLjT2qPmZl9pTFk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:05 2025 by rpki-client