Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234332e302f32342d3234203d3e203532333239.roa
File:                     3133312e37322e3234332e302f32342d3234203d3e203532333239.roa (raw, json)
Hash identifier:          Um0u1O+tmhpLEfVskHvXJ/FletzGKkUNgHJr6C5ERf0=
Subject key identifier:   54:24:D0:8D:8E:D7:DA:F0:15:B8:07:4C:A2:9C:23:51:D4:53:A1:9F
Certificate issuer:       /CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7
Certificate serial:       1B6EC2A115C4AC99EB5B564295C5245BFFFAC73F
Authority key identifier: EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234332e302f32342d3234203d3e203532333239.roa
Signing time:             Tue 04 Feb 2025 18:48:32 +0000
ROA not before:           Tue 04 Feb 2025 18:43:32 +0000
ROA not after:            Tue 03 Feb 2026 18:48:32 +0000
asID:                     52329
IP address blocks:        131.72.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6e:c2:a1:15:c4:ac:99:eb:5b:56:42:95:c5:24:5b:ff:fa:c7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7
        Validity
            Not Before: Feb  4 18:43:32 2025 GMT
            Not After : Feb  3 18:48:32 2026 GMT
        Subject: CN=5424D08D8ED7DAF015B8074CA29C2351D453A19F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:db:8e:98:f3:24:3d:b9:d7:af:bd:96:bd:e2:
                    db:fe:05:76:9b:f7:ca:28:d4:59:3c:2b:54:29:20:
                    26:e1:eb:cb:2e:6e:e2:ff:a9:fb:42:21:23:f3:60:
                    e6:f8:cb:0a:c1:fa:89:8c:2b:72:0f:37:b9:d4:9c:
                    ff:9c:22:28:d4:d2:93:a7:40:c2:6d:49:0a:63:5d:
                    24:01:f7:d7:05:dc:dd:75:26:5f:3d:b2:0c:f1:db:
                    f8:2f:3e:58:3c:7c:75:5c:7d:b2:0f:15:32:20:42:
                    23:98:e8:94:63:b4:a6:75:db:16:96:5c:e9:1c:bb:
                    37:4f:6b:e1:1e:d3:c3:13:1a:62:bb:8e:b0:72:d0:
                    a9:7a:aa:35:5e:c9:1a:87:d4:7e:99:f2:04:87:94:
                    fa:a4:d7:3a:fb:bb:c7:65:8c:4d:23:72:45:6a:58:
                    7b:52:f4:16:29:5d:fb:0e:14:15:cc:61:58:b3:0a:
                    c2:b8:82:08:9b:33:93:a9:1e:18:09:73:57:b1:b7:
                    6c:ec:5b:d4:60:71:2b:33:7c:49:a8:48:15:8d:9a:
                    4f:a4:19:dd:37:06:aa:91:c4:d8:95:a1:ff:f3:12:
                    e5:ff:52:db:ed:d4:04:cc:56:61:01:a2:e4:f6:da:
                    f4:51:fc:39:2d:58:c4:dd:8b:ab:0e:df:68:bd:6d:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:24:D0:8D:8E:D7:DA:F0:15:B8:07:4C:A2:9C:23:51:D4:53:A1:9F
            X509v3 Authority Key Identifier:
                keyid:EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234332e302f32342d3234203d3e203532333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:d2:a7:44:44:38:00:bb:e4:d8:35:fb:65:68:a8:49:f9:
         59:b9:1e:8a:9d:99:20:3d:67:cf:d8:e7:28:bb:10:06:e9:4d:
         ff:0e:fc:28:a0:ea:9b:6b:da:84:00:c9:05:63:92:74:3e:12:
         50:14:f2:e1:93:57:dd:17:5b:7a:8a:95:87:2f:05:f8:0b:2a:
         c1:ac:c7:5f:dd:07:87:78:03:15:e5:42:e2:84:f0:3d:36:47:
         59:37:4d:34:35:95:01:f8:f1:e6:7f:ed:b3:80:46:b4:fa:82:
         5b:e8:87:65:a0:dd:65:54:95:06:71:e1:7b:04:c1:0f:7d:f5:
         d5:07:f2:44:04:9b:ad:c4:06:4c:4e:ad:9e:5c:11:7d:77:34:
         a4:a8:45:cb:11:38:15:80:6e:44:fa:13:b1:7c:9f:da:f8:16:
         aa:c8:a5:4b:43:00:64:05:f3:e8:1a:8a:d2:8a:32:1c:8f:12:
         e6:c1:2f:62:e3:d2:f4:42:9e:51:e7:31:7f:9a:ad:6f:3a:5c:
         1b:35:50:62:7a:d4:a8:5f:1c:f5:c9:a4:09:6b:a1:f7:72:37:
         f5:f9:6b:ce:54:10:2a:51:94:7d:a8:1f:9b:1d:43:38:58:78:
         90:95:2e:ea:f4:70:79:79:cc:8b:ea:7b:d5:43:30:ad:0c:98:
         e0:8b:33:79
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUG27CoRXErJnrW1ZClcUkW//6xz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM4NjlCQUZCNUEzODgyRkI3Q0I2RDdGMjJGRDM2Njg1
OTYxQzVCNzAeFw0yNTAyMDQxODQzMzJaFw0yNjAyMDMxODQ4MzJaMDMxMTAvBgNV
BAMTKDU0MjREMDhEOEVEN0RBRjAxNUI4MDc0Q0EyOUMyMzUxRDQ1M0ExOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK246Y8yQ9udevvZa94tv+BXab
98oo1Fk8K1QpICbh68subuL/qftCISPzYOb4ywrB+omMK3IPN7nUnP+cIijU0pOn
QMJtSQpjXSQB99cF3N11Jl89sgzx2/gvPlg8fHVcfbIPFTIgQiOY6JRjtKZ12xaW
XOkcuzdPa+Ee08MTGmK7jrBy0Kl6qjVeyRqH1H6Z8gSHlPqk1zr7u8dljE0jckVq
WHtS9BYpXfsOFBXMYVizCsK4ggibM5OpHhgJc1ext2zsW9RgcSszfEmoSBWNmk+k
Gd03BqqRxNiVof/zEuX/Utvt1ATMVmEBouT22vRR/DktWMTdi6sO32i9bb5HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUVCTQjY7X2vAVuAdMopwjUdRToZ8wHwYDVR0j
BBgwFoAU7Iabr7WjiC+3y21/Iv02aFlhxbcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNTJFMkQyNTBGNUJBQUJFRjI2NEU5RTBBNTJGRjcxRThD
OUFDQkRDODc4MzVBNUJGQkM1QUZFRTY4OUM3MUVBLzAvRUM4NjlCQUZCNUEzODgy
RkI3Q0I2RDdGMjJGRDM2Njg1OTYxQzVCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzg2OUJBRkI1QTM4ODJGQjdD
QjZEN0YyMkZEMzY2ODU5NjFDNUI3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzUyRTJEMjUwRjVCQUFCRUYyNjRFOUUwQTUyRkY3MUU4QzlBQ0JEQzg3
ODM1QTVCRkJDNUFGRUU2ODlDNzFFQS8wLzMxMzMzMTJlMzczMjJlMzIzNDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAINI8zAN
BgkqhkiG9w0BAQsFAAOCAQEAWLnSp0REOAC75Ng1+2VoqEn5Wbkeip2ZID1nz9jn
KLsQBulN/w78KKDqm2vahADJBWOSdD4SUBTy4ZNX3RdbeoqVhy8F+AsqwazHX90H
h3gDFeVC4oTwPTZHWTdNNDWVAfjx5n/ts4BGtPqCW+iHZaDdZVSVBnHhewTBD331
1QfyRASbrcQGTE6tnlwRfXc0pKhFyxE4FYBuRPoTsXyf2vgWqsilS0MAZAXz6BqK
0ooyHI8S5sEvYuPS9EKeUecxf5qtbzpcGzVQYnrUqF8c9cmkCWuh93I39flrzlQQ
KlGUfagfmx1DOFh4kJUu6vRweXnMi+p71UMwrQyY4IszeQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:13 2025 by rpki-client