Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e352e302f32342d3234203d3e20323734303130.roa
File:                     3231332e3233362e352e302f32342d3234203d3e20323734303130.roa (raw, json)
Hash identifier:          7iHJTGZmoIjY6Sc0a9+9gRHTIZq4K+TQxRkySz/pHqU=
Subject key identifier:   6F:70:24:58:94:86:62:AF:75:47:F4:91:5B:92:2B:28:36:97:51:A0
Certificate issuer:       /CN=BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030
Certificate serial:       4A0643F52BA00A773CF5229BEA11E27891458D7F
Authority key identifier: BE:95:7D:47:90:B5:3F:8E:B4:6A:62:C1:A4:0A:7C:9D:7E:4D:B0:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e352e302f32342d3234203d3e20323734303130.roa
Signing time:             Tue 28 Jan 2025 14:40:01 +0000
ROA not before:           Tue 28 Jan 2025 14:35:01 +0000
ROA not after:            Tue 27 Jan 2026 14:40:01 +0000
asID:                     274010
IP address blocks:        213.236.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Feb 2025 04:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:06:43:f5:2b:a0:0a:77:3c:f5:22:9b:ea:11:e2:78:91:45:8d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030
        Validity
            Not Before: Jan 28 14:35:01 2025 GMT
            Not After : Jan 27 14:40:01 2026 GMT
        Subject: CN=6F702458948662AF7547F4915B922B28369751A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:3f:eb:fb:63:12:a3:6c:9a:0c:95:d8:a3:
                    10:b8:cc:a0:aa:d5:f3:be:f0:cd:67:f0:5d:a3:a5:
                    ec:d6:ce:10:30:dd:af:8c:74:88:1a:ce:57:17:a1:
                    84:1b:5d:e6:3f:41:97:d1:35:a6:9c:03:e5:b9:4b:
                    c0:04:a6:41:12:33:4a:9a:90:d5:fc:2e:59:50:e9:
                    b0:09:76:1b:2e:74:0e:eb:c1:6d:cd:e4:fa:db:9c:
                    02:87:38:e6:7d:be:9c:0f:83:ae:59:ae:54:39:62:
                    ca:00:54:e9:b1:ca:5b:9b:85:64:de:71:4b:20:a2:
                    42:bb:84:b6:cf:80:ab:11:4e:09:5c:21:d6:42:ae:
                    36:ef:90:f8:a1:05:b2:17:49:58:d5:d5:f8:c1:d5:
                    99:ee:94:84:26:3c:94:3a:de:28:0a:69:3b:e3:8c:
                    db:90:e2:49:25:3e:2e:4d:ac:f5:a3:7d:7f:bb:fb:
                    4a:4d:7f:59:bf:71:6e:08:89:ee:78:bc:d9:23:3c:
                    16:5c:38:34:fe:3e:7d:49:ce:b6:92:09:28:86:53:
                    06:87:b5:7f:e7:a3:9e:2d:87:61:1d:35:2e:d8:76:
                    c4:38:be:78:db:3d:61:e2:d5:69:69:79:fb:9a:d2:
                    6f:7b:b9:e3:9f:9b:2a:c7:94:13:94:64:16:87:93:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:70:24:58:94:86:62:AF:75:47:F4:91:5B:92:2B:28:36:97:51:A0
            X509v3 Authority Key Identifier:
                keyid:BE:95:7D:47:90:B5:3F:8E:B4:6A:62:C1:A4:0A:7C:9D:7E:4D:B0:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e352e302f32342d3234203d3e20323734303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.236.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:aa:1b:3c:18:25:c0:f7:a3:ac:7d:d2:6a:a3:63:c3:b9:6f:
         c7:06:0c:5c:6e:37:7f:7a:50:49:79:93:dc:3a:f4:43:83:60:
         a6:66:56:42:95:97:45:b5:24:82:bd:f5:e1:cd:e8:6a:78:cf:
         2b:6c:b4:38:0a:78:08:e3:cc:d8:53:1f:82:16:c6:7f:85:ff:
         a3:a4:64:5a:95:ed:9d:9b:fc:8b:c5:d0:88:09:de:47:5c:6f:
         06:9d:5a:e8:61:44:25:9c:cf:a5:b6:b2:be:77:5d:10:8e:35:
         7e:90:c7:c9:cf:db:f6:35:76:f3:4e:e3:da:59:55:5c:5f:14:
         23:e0:12:b1:f1:65:70:f2:f5:d4:87:ca:3e:6f:19:26:8c:ea:
         bb:65:61:12:32:41:0c:95:29:61:f7:78:fc:e2:c2:cc:c5:1f:
         06:5c:7b:af:22:eb:d3:dc:18:f7:05:16:85:8d:a0:6c:8f:f5:
         8c:f4:b5:68:28:36:d0:b3:fc:41:37:0c:00:49:73:65:10:0d:
         21:31:80:1c:68:d2:b1:71:e0:b7:0e:a4:a9:33:28:33:e8:1a:
         99:3f:04:cd:1d:9a:2c:13:7d:38:c8:0a:d1:4c:ac:54:2e:6f:
         fd:73:41:22:1e:d0:23:37:82:3c:8c:d3:e9:e8:5f:46:99:fa:
         c8:81:0e:00
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSgZD9SugCnc89SKb6hHieJFFjX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU5NTdENDc5MEI1M0Y4RUI0NkE2MkMxQTQwQTdDOUQ3
RTREQjAzMDAeFw0yNTAxMjgxNDM1MDFaFw0yNjAxMjcxNDQwMDFaMDMxMTAvBgNV
BAMTKDZGNzAyNDU4OTQ4NjYyQUY3NTQ3RjQ5MTVCOTIyQjI4MzY5NzUxQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/D/r+2MSo2yaDJXYoxC4zKCq
1fO+8M1n8F2jpezWzhAw3a+MdIgazlcXoYQbXeY/QZfRNaacA+W5S8AEpkESM0qa
kNX8LllQ6bAJdhsudA7rwW3N5PrbnAKHOOZ9vpwPg65ZrlQ5YsoAVOmxylubhWTe
cUsgokK7hLbPgKsRTglcIdZCrjbvkPihBbIXSVjV1fjB1ZnulIQmPJQ63igKaTvj
jNuQ4kklPi5NrPWjfX+7+0pNf1m/cW4Iie54vNkjPBZcODT+Pn1JzraSCSiGUwaH
tX/no54th2EdNS7YdsQ4vnjbPWHi1Wlpefua0m97ueOfmyrHlBOUZBaHk9PXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUb3AkWJSGYq91R/SRW5IrKDaXUaAwHwYDVR0j
BBgwFoAUvpV9R5C1P460amLBpAp8nX5NsDAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTVBQ0RERjQ3RTRBMDc1RDYxMTk3QjFBRTYwMDc3NTRC
NTBEQzgyOEM3M0JCQzY5MkNEQzdEMjI1RUZEODAwLzAvQkU5NTdENDc5MEI1M0Y4
RUI0NkE2MkMxQTQwQTdDOUQ3RTREQjAzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRTk1N0Q0NzkwQjUzRjhFQjQ2
QTYyQzFBNDBBN0M5RDdFNERCMDMwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU1QUNEREY0N0U0QTA3NUQ2MTE5N0IxQUU2MDA3NzU0QjUwREM4MjhD
NzNCQkM2OTJDREM3RDIyNUVGRDgwMC8wLzMyMzEzMzJlMzIzMzM2MmUzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNDMwMzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXsBTAN
BgkqhkiG9w0BAQsFAAOCAQEAS6obPBglwPejrH3SaqNjw7lvxwYMXG43f3pQSXmT
3Dr0Q4NgpmZWQpWXRbUkgr314c3oanjPK2y0OAp4COPM2FMfghbGf4X/o6RkWpXt
nZv8i8XQiAneR1xvBp1a6GFEJZzPpbayvnddEI41fpDHyc/b9jV2807j2llVXF8U
I+ASsfFlcPL11IfKPm8ZJozqu2VhEjJBDJUpYfd4/OLCzMUfBlx7ryLr09wY9wUW
hY2gbI/1jPS1aCg20LP8QTcMAElzZRANITGAHGjSsXHgtw6kqTMoM+gamT8EzR2a
LBN9OMgK0UysVC5v/XNBIh7QIzeCPIzT6ehfRpn6yIEOAA==
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:49:17 2025 by rpki-client