Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/3138312e3232352e3132382e302f32312d3234203d3e20323632313939.roa
File:                     3138312e3232352e3132382e302f32312d3234203d3e20323632313939.roa (raw, json)
Hash identifier:          qsuDXCZ5xxGEbdWcOxt0mgMUw1HZ5EfprTWuc3fQ5CA=
Subject key identifier:   F1:A3:17:9B:EB:72:BD:3D:CA:30:3F:CC:74:17:DA:17:27:DF:01:12
Certificate issuer:       /CN=B38BDE76E463241532282B264A16F479CD7D0224
Certificate serial:       50CF938B41BED85849A6D70419FF05383911BAD2
Authority key identifier: B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/3138312e3232352e3132382e302f32312d3234203d3e20323632313939.roa
Signing time:             Tue 05 Mar 2024 18:12:31 +0000
ROA not before:           Tue 05 Mar 2024 18:07:31 +0000
ROA not after:            Tue 04 Mar 2025 18:12:31 +0000
asID:                     262199
IP address blocks:        181.225.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 20:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cf:93:8b:41:be:d8:58:49:a6:d7:04:19:ff:05:38:39:11:ba:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B38BDE76E463241532282B264A16F479CD7D0224
        Validity
            Not Before: Mar  5 18:07:31 2024 GMT
            Not After : Mar  4 18:12:31 2025 GMT
        Subject: CN=F1A3179BEB72BD3DCA303FCC7417DA1727DF0112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:de:52:8c:3c:5b:49:e9:d5:69:3f:5b:16:
                    f8:46:2f:02:4d:3c:b1:20:7f:a5:92:91:cc:82:2b:
                    e5:c5:e4:33:a5:17:77:b3:36:fa:35:f1:c2:bd:a3:
                    d8:32:76:52:9b:65:e8:51:73:8c:a8:7d:ec:85:b5:
                    91:b1:bc:f0:b9:1b:54:b3:d5:74:18:39:56:16:4a:
                    2e:22:73:93:bf:98:a8:54:13:7a:49:58:67:c4:0a:
                    69:cf:e8:24:ad:12:08:6f:8c:ce:f8:20:39:a5:68:
                    5a:68:cf:ec:bc:cb:8b:30:c2:fb:00:8a:a4:8c:81:
                    5b:81:3c:46:73:c0:a3:bf:18:bb:39:93:f4:f2:d4:
                    c2:08:c4:24:8d:c6:ba:21:50:0b:7c:40:f4:e2:5c:
                    89:b5:3c:86:94:b9:f8:a6:15:c9:61:b0:5d:d8:a2:
                    70:52:b7:cc:be:05:7c:ff:31:59:63:f9:28:ae:65:
                    3b:0a:63:65:c8:7c:78:31:c3:95:e6:62:a5:f3:1b:
                    b2:a3:58:fd:38:ac:fa:df:62:51:e0:ac:f6:dd:0b:
                    81:54:65:a4:d8:e8:f9:05:41:8a:b5:22:be:b9:d4:
                    66:b5:29:75:ac:4b:f0:02:59:bb:55:40:77:0b:b6:
                    42:1c:23:02:12:6f:e3:0a:44:3e:0f:34:38:9f:41:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A3:17:9B:EB:72:BD:3D:CA:30:3F:CC:74:17:DA:17:27:DF:01:12
            X509v3 Authority Key Identifier:
                keyid:B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/3138312e3232352e3132382e302f32312d3234203d3e20323632313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:8c:ca:69:af:9a:65:f1:22:26:73:d1:54:00:70:7b:55:8a:
         e4:c5:6d:0a:7a:c8:d6:dd:ca:a5:15:44:09:4d:09:73:79:4c:
         dd:e3:bc:78:5f:57:c6:d1:91:57:e3:f1:7b:02:01:b7:a5:7b:
         78:3a:f3:81:35:ee:06:37:73:94:aa:f2:04:66:56:1a:34:cf:
         a0:8a:cb:86:eb:3b:56:a1:bc:b5:bd:dc:82:6d:98:92:6b:0f:
         ce:47:28:93:ac:c8:22:14:3f:84:74:49:8f:23:62:85:88:c8:
         3d:fd:28:e5:e5:e3:21:44:5e:7a:36:52:e2:8a:a9:32:26:08:
         09:2a:cf:c5:ff:3f:f7:b2:1d:e4:19:f8:98:ed:ff:4b:56:04:
         df:cc:cc:da:e7:15:33:3a:f1:31:3f:3a:ee:27:9e:d5:df:d9:
         e8:cf:e3:ac:38:c3:b3:0a:4b:75:bc:a7:86:e0:2c:70:13:c1:
         25:32:b7:8c:51:6c:b3:5c:07:46:e6:53:eb:29:36:5c:c4:a6:
         57:75:eb:4c:9f:fb:88:77:fa:ef:d3:72:c9:fd:59:2a:0b:86:
         19:e5:8e:cc:65:a4:99:72:e6:a3:67:65:64:cd:f7:aa:41:da:
         e6:a8:70:b3:6f:d7:52:fe:a5:c9:89:bd:0c:35:72:a0:96:26:
         11:8e:32:7c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUUM+Ti0G+2FhJptcEGf8FODkRutIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM4QkRFNzZFNDYzMjQxNTMyMjgyQjI2NEExNkY0NzlD
RDdEMDIyNDAeFw0yNDAzMDUxODA3MzFaFw0yNTAzMDQxODEyMzFaMDMxMTAvBgNV
BAMTKEYxQTMxNzlCRUI3MkJEM0RDQTMwM0ZDQzc0MTdEQTE3MjdERjAxMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFMN5SjDxbSenVaT9bFvhGLwJN
PLEgf6WSkcyCK+XF5DOlF3ezNvo18cK9o9gydlKbZehRc4yofeyFtZGxvPC5G1Sz
1XQYOVYWSi4ic5O/mKhUE3pJWGfECmnP6CStEghvjM74IDmlaFpoz+y8y4swwvsA
iqSMgVuBPEZzwKO/GLs5k/Ty1MIIxCSNxrohUAt8QPTiXIm1PIaUufimFclhsF3Y
onBSt8y+BXz/MVlj+SiuZTsKY2XIfHgxw5XmYqXzG7KjWP04rPrfYlHgrPbdC4FU
ZaTY6PkFQYq1Ir651Ga1KXWsS/ACWbtVQHcLtkIcIwISb+MKRD4PNDifQfBPAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU8aMXm+tyvT3KMD/MdBfaFyffARIwHwYDVR0j
BBgwFoAUs4veduRjJBUyKCsmShb0ec19AiQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRjQxNkJBNTJBMTdCNzhGN0Q1N0YxNkE5OEU1RDlBMEI3
REMzMjhEMDJEMkNDMTRBOUQ3NDY3MjM1NzQ4RjA0LzAvQjM4QkRFNzZFNDYzMjQx
NTMyMjgyQjI2NEExNkY0NzlDRDdEMDIyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzhCREU3NkU0NjMyNDE1MzIy
ODJCMjY0QTE2RjQ3OUNEN0QwMjI0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0Y0MTZCQTUyQTE3Qjc4RjdENTdGMTZBOThFNUQ5QTBCN0RDMzI4RDAy
RDJDQzE0QTlENzQ2NzIzNTc0OEYwNC8wLzMxMzgzMTJlMzIzMjM1MmUzMTMyMzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM5Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO1
4YAwDQYJKoZIhvcNAQELBQADggEBAA2MymmvmmXxIiZz0VQAcHtViuTFbQp6yNbd
yqUVRAlNCXN5TN3jvHhfV8bRkVfj8XsCAbele3g684E17gY3c5Sq8gRmVho0z6CK
y4brO1ahvLW93IJtmJJrD85HKJOsyCIUP4R0SY8jYoWIyD39KOXl4yFEXno2UuKK
qTImCAkqz8X/P/eyHeQZ+Jjt/0tWBN/MzNrnFTM68TE/Ou4nntXf2ejP46w4w7MK
S3W8p4bgLHATwSUyt4xRbLNcB0bmU+spNlzEpld160yf+4h3+u/Tcsn9WSoLhhnl
jsxlpJly5qNnZWTN96pB2uaocLNv11L+pcmJvQw1cqCWJhGOMnw=
-----END CERTIFICATE-----
Generated at Sat May 4 05:42:18 2024 by rpki-client on console-ams.rpki-client.org