Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e392e302f32342d3234203d3e20323634383336.roa
File:                     3139322e3134312e392e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          3IRGBjeBJUpMRpmnufsTmJwVnx8+wq+V83prxLZrXdQ=
Subject key identifier:   E1:4A:85:06:56:33:A9:34:86:63:0B:0F:C3:4C:55:33:45:AD:44:0A
Certificate issuer:       /CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
Certificate serial:       5178927B6A8CFA0FFF70097FC680E2322AACDBD6
Authority key identifier: FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e392e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 04 Feb 2025 18:38:25 +0000
ROA not before:           Tue 04 Feb 2025 18:33:25 +0000
ROA not after:            Tue 03 Feb 2026 18:38:25 +0000
asID:                     264836
IP address blocks:        192.141.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:78:92:7b:6a:8c:fa:0f:ff:70:09:7f:c6:80:e2:32:2a:ac:db:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
        Validity
            Not Before: Feb  4 18:33:25 2025 GMT
            Not After : Feb  3 18:38:25 2026 GMT
        Subject: CN=E14A85065633A93486630B0FC34C553345AD440A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:aa:c7:56:a8:c0:03:1c:f6:a9:f6:2c:f5:
                    a7:9a:82:f8:b9:08:b5:1e:bc:98:c7:bb:94:b7:ac:
                    aa:b9:f9:80:c2:4e:14:0f:5d:cc:d7:aa:ec:7c:12:
                    71:ee:bd:ac:c7:2f:6c:1c:45:54:11:c8:a6:54:fe:
                    c6:11:36:18:9f:18:6a:49:9c:b7:af:9c:85:1c:cc:
                    56:15:00:83:8d:40:e7:d9:5f:4b:c7:f5:1b:5b:62:
                    ed:8c:80:23:56:77:9b:c9:86:b8:d8:00:76:e5:df:
                    c0:ae:4f:65:67:6d:c0:8d:45:ea:a3:0c:78:eb:8c:
                    fb:ae:88:10:cf:08:d6:63:11:4e:d1:76:30:4a:dc:
                    64:39:69:ac:9b:60:e6:ea:0d:8f:3d:73:87:b3:2e:
                    46:8c:17:4c:82:35:1c:92:8e:ae:99:57:58:63:25:
                    f2:49:dd:24:da:5d:7c:7b:9d:fe:d5:3b:a2:8a:0e:
                    cc:83:88:f5:59:48:ca:81:46:95:94:08:06:1b:0e:
                    9e:9e:bf:33:da:ee:85:3d:f6:5b:81:69:99:56:0b:
                    5e:a5:f6:0d:fe:79:8f:77:ea:8a:6f:03:00:6d:83:
                    a2:45:1b:31:0c:bf:5e:fe:30:14:12:46:5f:14:e4:
                    63:d7:41:1f:24:4f:55:01:1e:ff:df:86:b1:ab:4b:
                    e9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4A:85:06:56:33:A9:34:86:63:0B:0F:C3:4C:55:33:45:AD:44:0A
            X509v3 Authority Key Identifier:
                keyid:FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e392e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:49:5c:b8:2e:35:68:56:b5:59:93:63:74:2e:b6:0a:16:dd:
         e9:54:45:8c:33:b3:14:76:86:e1:3e:22:bc:0a:ac:70:08:49:
         2d:7f:0f:4b:e7:60:10:d7:5d:3b:92:5f:d1:47:97:f6:13:4f:
         f5:ce:c9:11:48:e7:10:2c:ee:cc:a0:cd:11:a7:9c:b9:e4:87:
         d7:d1:c9:75:4d:39:53:e9:6b:3b:da:96:68:54:b9:78:d5:a1:
         da:4e:36:af:96:8e:2c:2d:6e:9e:62:57:9d:e2:7e:2f:8b:9a:
         c1:2d:57:22:e1:4b:d3:ba:d8:b6:b1:8b:9f:c8:90:ad:6a:b6:
         db:e3:94:48:20:87:cb:f6:02:d7:d8:67:eb:95:1d:4b:78:e6:
         f5:d8:6f:b0:04:a8:db:e5:99:1e:f1:d8:f9:f3:a6:d0:5c:5c:
         44:6b:d6:eb:ac:5e:34:27:b7:34:68:8d:4b:5c:18:35:45:85:
         ac:8d:d8:b7:c1:b6:58:6d:b0:d8:cc:c3:62:60:9f:27:6c:f0:
         5f:e3:d5:ac:c5:7f:71:19:1e:33:b9:af:14:95:8a:51:11:98:
         78:30:e7:26:73:72:6a:3d:52:2f:63:1f:16:49:1b:aa:d8:c0:
         86:dc:45:de:34:2a:0f:34:f8:88:9c:f9:c3:f7:06:6f:f2:98:
         5f:27:62:1d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUXiSe2qM+g//cAl/xoDiMiqs29YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1RTlDRDk5ODEzMEU5OEFBMDE3RDY2RTc5RjM1MjFE
MUQ4M0VFOTAeFw0yNTAyMDQxODMzMjVaFw0yNjAyMDMxODM4MjVaMDMxMTAvBgNV
BAMTKEUxNEE4NTA2NTYzM0E5MzQ4NjYzMEIwRkMzNEM1NTMzNDVBRDQ0MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CarHVqjAAxz2qfYs9aeagvi5
CLUevJjHu5S3rKq5+YDCThQPXczXqux8EnHuvazHL2wcRVQRyKZU/sYRNhifGGpJ
nLevnIUczFYVAIONQOfZX0vH9RtbYu2MgCNWd5vJhrjYAHbl38CuT2VnbcCNReqj
DHjrjPuuiBDPCNZjEU7RdjBK3GQ5aaybYObqDY89c4ezLkaMF0yCNRySjq6ZV1hj
JfJJ3STaXXx7nf7VO6KKDsyDiPVZSMqBRpWUCAYbDp6evzPa7oU99luBaZlWC16l
9g3+eY936opvAwBtg6JFGzEMv17+MBQSRl8U5GPXQR8kT1UBHv/fhrGrS+kNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU4UqFBlYzqTSGYwsPw0xVM0WtRAowHwYDVR0j
BBgwFoAU+l6c2ZgTDpiqAX1m5581IdHYPukwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOEE1M0UxM0I2QTAyQjQ5NzkyRTE2NUU3NjY0NDVDNjUz
NDM1NTgwMTc4QTZFMzZDMzAxQ0RCQUEyQzBDMjM2LzAvRkE1RTlDRDk5ODEzMEU5
OEFBMDE3RDY2RTc5RjM1MjFEMUQ4M0VFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQTVFOUNEOTk4MTMwRTk4QUEw
MTdENjZFNzlGMzUyMUQxRDgzRUU5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzhBNTNFMTNCNkEwMkI0OTc5MkUxNjVFNzY2NDQ1QzY1MzQzNTU4MDE3
OEE2RTM2QzMwMUNEQkFBMkMwQzIzNi8wLzMxMzkzMjJlMzEzNDMxMmUzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM4MzMzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCNCTAN
BgkqhkiG9w0BAQsFAAOCAQEAA0lcuC41aFa1WZNjdC62Chbd6VRFjDOzFHaG4T4i
vAqscAhJLX8PS+dgENddO5Jf0UeX9hNP9c7JEUjnECzuzKDNEaecueSH19HJdU05
U+lrO9qWaFS5eNWh2k42r5aOLC1unmJXneJ+L4uawS1XIuFL07rYtrGLn8iQrWq2
2+OUSCCHy/YC19hn65UdS3jm9dhvsASo2+WZHvHY+fOm0FxcRGvW66xeNCe3NGiN
S1wYNUWFrI3Yt8G2WG2w2MzDYmCfJ2zwX+PVrMV/cRkeM7mvFJWKURGYeDDnJnNy
aj1SL2MfFkkbqtjAhtxF3jQqDzT4iJz5w/cGb/KYXydiHQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:34 2025 by rpki-client