Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/3230312e3138322e3130382e302f32322d3234203d3e20323635383030.roa
File:                     3230312e3138322e3130382e302f32322d3234203d3e20323635383030.roa (raw, json)
Hash identifier:          WbF7iugX2Bj3CTqwP38+ytLG2okDXCxazs3nWfbxnqM=
Subject key identifier:   51:F2:2B:79:86:80:B6:93:F0:33:AA:6A:77:9B:9C:71:90:3C:7E:A8
Certificate issuer:       /CN=3ED6D01E2B3E06CE509C188241CB1406AE1CF081
Certificate serial:       4E6A6C92F53568FE4523F393C0695DA7D6F2E3C9
Authority key identifier: 3E:D6:D0:1E:2B:3E:06:CE:50:9C:18:82:41:CB:14:06:AE:1C:F0:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/3230312e3138322e3130382e302f32322d3234203d3e20323635383030.roa
Signing time:             Tue 04 Feb 2025 18:35:48 +0000
ROA not before:           Tue 04 Feb 2025 18:30:48 +0000
ROA not after:            Tue 03 Feb 2026 18:35:48 +0000
asID:                     265800
IP address blocks:        201.182.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 03:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6a:6c:92:f5:35:68:fe:45:23:f3:93:c0:69:5d:a7:d6:f2:e3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED6D01E2B3E06CE509C188241CB1406AE1CF081
        Validity
            Not Before: Feb  4 18:30:48 2025 GMT
            Not After : Feb  3 18:35:48 2026 GMT
        Subject: CN=51F22B798680B693F033AA6A779B9C71903C7EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:cf:55:0f:d4:e6:a3:28:ee:7a:5e:c1:ac:
                    00:9f:e1:f9:57:4d:c9:39:6c:8d:1d:ae:d9:73:60:
                    3a:ec:09:2b:d0:9c:78:34:4c:b3:6c:b9:4e:9d:89:
                    eb:14:b5:3b:13:5f:93:e1:b5:95:2f:17:85:20:3d:
                    de:5b:33:db:25:3b:18:85:ca:dc:7f:91:bd:37:cf:
                    2f:39:a4:bf:50:5b:9b:81:ea:0e:37:cf:7d:51:25:
                    dd:06:3d:d4:87:14:55:4c:10:70:66:05:fe:41:20:
                    f1:26:da:1a:f7:b6:4a:13:6e:29:49:09:af:e2:d2:
                    4c:c2:8c:54:48:7d:93:92:5c:24:22:64:36:0c:a1:
                    bc:4a:3e:a7:2f:11:41:27:0e:b6:05:7b:7e:11:49:
                    0c:c3:2c:72:93:a1:6d:dd:ac:3c:5d:63:a4:f2:7e:
                    a0:dc:f2:36:7d:61:ed:34:83:d6:a1:bd:70:00:8a:
                    1a:9f:13:99:2a:1b:60:f6:f1:0b:55:09:27:4c:d7:
                    fc:57:65:cb:a2:5a:e7:1e:c5:f3:5e:48:e7:b9:e8:
                    11:f9:2f:a3:0c:da:8d:f9:28:0a:8b:6d:15:53:76:
                    de:1f:19:52:5d:e5:91:d2:31:25:04:7c:b8:c3:7c:
                    e4:e7:e9:79:c1:00:a8:d1:97:7f:d0:91:03:6a:fa:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F2:2B:79:86:80:B6:93:F0:33:AA:6A:77:9B:9C:71:90:3C:7E:A8
            X509v3 Authority Key Identifier:
                keyid:3E:D6:D0:1E:2B:3E:06:CE:50:9C:18:82:41:CB:14:06:AE:1C:F0:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ED6D01E2B3E06CE509C188241CB1406AE1CF081.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE792D4F8B8096D2C0849CE5A7D7E31EC61A2C875EEF5FADD6D45F7AF293CC3C/0/3230312e3138322e3130382e302f32322d3234203d3e20323635383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:cd:31:b4:a5:21:e8:14:cd:e9:c9:d3:da:e7:3c:0e:73:7f:
         96:fc:a0:7d:83:f5:67:17:ff:ce:ac:ac:47:49:54:c4:e6:5a:
         b8:b9:f2:42:39:a3:28:a3:15:91:3e:ab:4c:da:6c:f8:71:6b:
         f9:b3:ec:c6:31:dc:7e:5d:93:a6:e3:68:73:78:3a:bd:45:b7:
         ec:91:91:2d:e4:2c:fb:f5:f1:2c:93:d8:ed:0e:44:81:6a:fd:
         e3:95:65:ab:ec:59:06:94:3b:47:8c:09:47:1f:5e:3f:66:a2:
         69:19:cc:f1:b8:b2:30:f8:a8:5a:da:54:ef:93:b3:6e:18:57:
         45:5e:5f:e5:75:c3:1a:b4:03:ea:a0:f1:84:cd:12:51:ed:25:
         03:9f:66:ee:b2:fe:d9:04:bb:47:4d:97:b9:f8:c2:98:5e:63:
         97:c2:a3:0b:21:6b:d3:cb:f9:fd:81:35:0e:7d:f1:95:f3:fe:
         7f:0a:bb:ed:1c:c2:a4:4a:ea:cb:4e:78:8b:4c:ab:82:e1:eb:
         e0:b9:e7:29:4e:ce:ab:12:71:ed:23:9e:b3:3f:3d:16:a8:42:
         a6:0c:b5:53:ae:5a:42:c3:15:68:08:b4:1b:a2:7b:39:bf:99:
         8a:a3:05:80:36:e0:b6:c8:26:cb:95:a6:b2:f6:f3:0c:a6:a8:
         dc:a4:d7:67
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUTmpskvU1aP5FI/OTwGldp9by48kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VENkQwMUUyQjNFMDZDRTUwOUMxODgyNDFDQjE0MDZB
RTFDRjA4MTAeFw0yNTAyMDQxODMwNDhaFw0yNjAyMDMxODM1NDhaMDMxMTAvBgNV
BAMTKDUxRjIyQjc5ODY4MEI2OTNGMDMzQUE2QTc3OUI5QzcxOTAzQzdFQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk0M9VD9Tmoyjuel7BrACf4flX
Tck5bI0drtlzYDrsCSvQnHg0TLNsuU6diesUtTsTX5PhtZUvF4UgPd5bM9slOxiF
ytx/kb03zy85pL9QW5uB6g43z31RJd0GPdSHFFVMEHBmBf5BIPEm2hr3tkoTbilJ
Ca/i0kzCjFRIfZOSXCQiZDYMobxKPqcvEUEnDrYFe34RSQzDLHKToW3drDxdY6Ty
fqDc8jZ9Ye00g9ahvXAAihqfE5kqG2D28QtVCSdM1/xXZcuiWucexfNeSOe56BH5
L6MM2o35KAqLbRVTdt4fGVJd5ZHSMSUEfLjDfOTn6XnBAKjRl3/QkQNq+p0nAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUUfIreYaAtpPwM6pqd5uccZA8fqgwHwYDVR0j
BBgwFoAUPtbQHis+Bs5QnBiCQcsUBq4c8IEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRTc5MkQ0RjhCODA5NkQyQzA4NDlDRTVBN0Q3RTMxRUM2
MUEyQzg3NUVFRjVGQURENkQ0NUY3QUYyOTNDQzNDLzAvM0VENkQwMUUyQjNFMDZD
RTUwOUMxODgyNDFDQjE0MDZBRTFDRjA4MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRUQ2RDAxRTJCM0UwNkNFNTA5
QzE4ODI0MUNCMTQwNkFFMUNGMDgxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0U3OTJENEY4QjgwOTZEMkMwODQ5Q0U1QTdEN0UzMUVDNjFBMkM4NzVF
RUY1RkFERDZENDVGN0FGMjkzQ0MzQy8wLzMyMzAzMTJlMzEzODMyMmUzMTMwMzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzODMwMzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALJ
tmwwDQYJKoZIhvcNAQELBQADggEBAFXNMbSlIegUzenJ09rnPA5zf5b8oH2D9WcX
/86srEdJVMTmWri58kI5oyijFZE+q0zabPhxa/mz7MYx3H5dk6bjaHN4Or1Ft+yR
kS3kLPv18SyT2O0ORIFq/eOVZavsWQaUO0eMCUcfXj9momkZzPG4sjD4qFraVO+T
s24YV0VeX+V1wxq0A+qg8YTNElHtJQOfZu6y/tkEu0dNl7n4wpheY5fCowsha9PL
+f2BNQ598ZXz/n8Ku+0cwqRK6stOeItMq4Lh6+C55ylOzqsSce0jnrM/PRaoQqYM
tVOuWkLDFWgItBuiezm/mYqjBYA24LbIJsuVprL28wymqNyk12c=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:04 2025 by rpki-client