Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39382e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e39382e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          a+XX4kRoM9JvgNLPYlK5SMNZ4ucdB1FVLbfhSLVTqOE=
Subject key identifier:   98:82:C1:8E:13:25:0C:65:57:C6:63:A9:DE:E0:30:B1:A5:B0:D0:C9
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       13409B63DBB7457852519157C9EF61BBC0D70993
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39382e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 04 Feb 2025 18:42:35 +0000
ROA not before:           Tue 04 Feb 2025 18:37:35 +0000
ROA not after:            Tue 03 Feb 2026 18:42:35 +0000
asID:                     21575
IP address blocks:        148.102.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:40:9b:63:db:b7:45:78:52:51:91:57:c9:ef:61:bb:c0:d7:09:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Feb  4 18:37:35 2025 GMT
            Not After : Feb  3 18:42:35 2026 GMT
        Subject: CN=9882C18E13250C6557C663A9DEE030B1A5B0D0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:34:51:5b:33:df:c7:c7:fb:57:c9:3c:86:7c:
                    61:93:c1:a2:07:08:b1:0f:45:b0:95:fb:b7:d0:de:
                    a5:6a:c4:71:7c:7d:eb:6c:ae:e9:a9:ab:e2:fb:09:
                    1d:c6:d3:dd:ca:37:ef:0c:88:b9:ad:28:33:95:40:
                    67:35:d9:cb:7a:e3:8e:80:6c:50:2e:54:2f:2e:3c:
                    75:00:40:81:7d:f8:9a:e4:60:50:a2:d2:30:97:e7:
                    ec:a9:7b:de:f2:2b:af:f4:26:f4:ca:af:61:ff:2f:
                    e3:b1:7e:49:0e:b3:78:74:7a:a0:79:b3:ef:5b:a5:
                    29:d4:43:bc:3c:74:ab:57:bc:35:52:f5:8f:fd:78:
                    8e:0c:54:be:91:a3:65:8b:25:bb:44:cf:86:c1:52:
                    38:5d:cb:f3:a9:06:b0:62:47:f9:9a:22:c3:4b:16:
                    11:eb:75:94:c4:8f:17:f7:17:a5:d3:48:f7:4c:52:
                    41:a0:a1:5f:0e:02:1d:fa:fd:58:94:c8:8a:40:b4:
                    b2:56:cc:44:2e:37:7f:75:98:b7:dd:ca:4c:ff:e0:
                    f4:2e:d7:f3:84:4b:e2:f6:bf:12:32:c0:3b:ca:ab:
                    d1:b5:03:02:d5:2b:57:97:f1:37:10:e6:c2:b8:0a:
                    db:40:ca:9f:19:17:48:37:89:af:4e:b6:10:f3:c4:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:82:C1:8E:13:25:0C:65:57:C6:63:A9:DE:E0:30:B1:A5:B0:D0:C9
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39382e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:74:36:66:4a:15:fa:28:21:a2:8c:e7:dc:6b:8c:49:ad:8c:
         ed:f6:4e:fe:d4:cd:18:90:06:96:2d:85:5a:96:d1:b7:38:b6:
         bd:63:df:18:f0:ed:7b:ec:fd:1c:86:48:71:76:50:2e:f0:d9:
         99:86:54:2c:0a:c4:d8:56:45:24:35:ac:37:7a:3b:69:6b:e5:
         60:05:01:25:37:da:b6:b1:94:01:12:e7:7e:ea:25:51:01:2c:
         07:e5:ee:19:09:d3:e6:37:f6:75:16:35:18:c9:7c:50:e4:94:
         fe:c4:6e:43:72:f5:f0:50:51:e5:e0:2c:dc:a1:f0:33:93:db:
         36:e5:d3:8d:af:09:46:a3:ac:1d:ef:e4:2a:86:ec:65:e1:00:
         dd:b3:ed:4d:b6:a5:de:18:aa:93:4e:42:aa:fc:82:c1:77:7b:
         88:1b:bb:3c:af:2d:7b:80:6d:46:bc:83:4b:8c:1c:29:68:a7:
         e3:ea:41:6c:51:03:7e:54:b9:c3:fc:ab:4a:39:ff:cf:f6:e8:
         69:56:8f:98:b9:0b:56:c5:c3:4b:59:a1:8a:58:b5:6f:55:d7:
         bf:77:7c:ec:6e:63:57:79:ee:b5:24:23:51:0d:68:df:aa:24:
         67:22:8e:42:09:3b:b6:df:9a:df:c5:45:ce:48:53:36:55:98:
         b0:fa:1e:d8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUE0CbY9u3RXhSUZFXye9hu8DXCZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIxQzFCN0I4MTgzNjAwNUI0NTVDNEZGMjZEREFBMUZC
M0E2NzhFNTAeFw0yNTAyMDQxODM3MzVaFw0yNjAyMDMxODQyMzVaMDMxMTAvBgNV
BAMTKDk4ODJDMThFMTMyNTBDNjU1N0M2NjNBOURFRTAzMEIxQTVCMEQwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXNFFbM9/Hx/tXyTyGfGGTwaIH
CLEPRbCV+7fQ3qVqxHF8fetsrumpq+L7CR3G093KN+8MiLmtKDOVQGc12ct6446A
bFAuVC8uPHUAQIF9+JrkYFCi0jCX5+ype97yK6/0JvTKr2H/L+OxfkkOs3h0eqB5
s+9bpSnUQ7w8dKtXvDVS9Y/9eI4MVL6Ro2WLJbtEz4bBUjhdy/OpBrBiR/maIsNL
FhHrdZTEjxf3F6XTSPdMUkGgoV8OAh36/ViUyIpAtLJWzEQuN391mLfdykz/4PQu
1/OES+L2vxIywDvKq9G1AwLVK1eX8TcQ5sK4CttAyp8ZF0g3ia9OthDzxCELAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmILBjhMlDGVXxmOp3uAwsaWw0MkwHwYDVR0j
BBgwFoAUKxwbe4GDYAW0VcT/Jt2qH7OmeOUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRkM2MzIxMUE4RjlDNkZGNTY3OTcyRTkxNEI4NjZCN0U0
QkQ2RjlFNTYxMjU5NzQyMEVFNzBCNjFBNEM3MjNGLzAvMkIxQzFCN0I4MTgzNjAw
NUI0NTVDNEZGMjZEREFBMUZCM0E2NzhFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjFDMUI3QjgxODM2MDA1QjQ1
NUM0RkYyNkREQUExRkIzQTY3OEU1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0ZDNjMyMTFBOEY5QzZGRjU2Nzk3MkU5MTRCODY2QjdFNEJENkY5RTU2
MTI1OTc0MjBFRTcwQjYxQTRDNzIzRi8wLzMxMzQzODJlMzEzMDMyMmUzOTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzczNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJRmYjAN
BgkqhkiG9w0BAQsFAAOCAQEALHQ2ZkoV+ighoozn3GuMSa2M7fZO/tTNGJAGli2F
WpbRtzi2vWPfGPDte+z9HIZIcXZQLvDZmYZULArE2FZFJDWsN3o7aWvlYAUBJTfa
trGUARLnfuolUQEsB+XuGQnT5jf2dRY1GMl8UOSU/sRuQ3L18FBR5eAs3KHwM5Pb
NuXTja8JRqOsHe/kKobsZeEA3bPtTbal3hiqk05CqvyCwXd7iBu7PK8te4BtRryD
S4wcKWin4+pBbFEDflS5w/yrSjn/z/boaVaPmLkLVsXDS1mhili1b1XXv3d87G5j
V3nutSQjUQ1o36okZyKOQgk7tt+a38VFzkhTNlWYsPoe2A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:02 2025 by rpki-client