Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3133382e39342e3134342e302f32322d3234203d3e203232383639.roa
File:                     3133382e39342e3134342e302f32322d3234203d3e203232383639.roa (raw, json)
Hash identifier:          fQ9Yg/0VB1/aUFfIhABHmBt+mY77enEq0JWoAYyrr74=
Subject key identifier:   95:15:82:2C:D9:C6:0B:96:D4:FB:4D:C8:48:6C:E0:5F:CE:2F:F5:4D
Certificate issuer:       /CN=231411337300474BC5489725C8707684F70A876D
Certificate serial:       4D8EE55F1738268771EB9F7E70AD0CCD5FFE86CC
Authority key identifier: 23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3133382e39342e3134342e302f32322d3234203d3e203232383639.roa
Signing time:             Tue 04 Feb 2025 18:24:02 +0000
ROA not before:           Tue 04 Feb 2025 18:19:02 +0000
ROA not after:            Tue 03 Feb 2026 18:24:02 +0000
asID:                     22869
IP address blocks:        138.94.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8e:e5:5f:17:38:26:87:71:eb:9f:7e:70:ad:0c:cd:5f:fe:86:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231411337300474BC5489725C8707684F70A876D
        Validity
            Not Before: Feb  4 18:19:02 2025 GMT
            Not After : Feb  3 18:24:02 2026 GMT
        Subject: CN=9515822CD9C60B96D4FB4DC8486CE05FCE2FF54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f2:d8:85:d0:88:92:b2:76:b4:57:06:58:fd:
                    7f:98:c4:dc:22:d2:e6:1e:b1:1b:89:a6:50:9e:3f:
                    22:1e:15:6e:85:bd:bb:b8:78:c0:be:24:9f:4b:bc:
                    83:e6:41:8f:40:ae:2f:45:f7:30:b3:16:1e:66:90:
                    be:b8:f3:d7:53:84:3c:0d:1c:76:ee:07:96:5a:f0:
                    f7:ea:a6:8d:28:0c:78:a3:1e:ae:1f:a8:7d:75:c4:
                    97:80:f2:c3:ed:10:09:a6:0a:39:1a:48:26:82:c3:
                    52:c9:77:44:2f:35:f3:3c:ac:a0:89:79:4b:1b:88:
                    ba:d3:f2:c9:88:d7:a6:af:0b:94:09:05:42:2f:e5:
                    21:38:a0:85:61:06:c5:f0:7c:f8:3d:24:a1:5a:94:
                    ea:d4:33:77:64:6c:a5:cd:a4:39:93:8c:49:9d:35:
                    44:ce:d9:15:21:38:47:62:bc:fe:b0:79:32:47:cf:
                    c0:2e:70:7b:ae:d2:89:2c:89:2a:70:41:7c:df:db:
                    3a:34:8e:fc:1d:c1:86:d5:3e:e3:a0:87:d6:1c:46:
                    27:34:71:76:e7:5b:c2:c0:37:be:45:f5:e4:3c:54:
                    b7:40:d9:4a:ad:77:d0:a1:60:14:59:da:5a:64:b2:
                    e4:b7:52:b8:cf:e9:cd:dc:b5:83:e0:76:4f:3c:d8:
                    1b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:15:82:2C:D9:C6:0B:96:D4:FB:4D:C8:48:6C:E0:5F:CE:2F:F5:4D
            X509v3 Authority Key Identifier:
                keyid:23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3133382e39342e3134342e302f32322d3234203d3e203232383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:45:0c:1f:26:40:7d:9b:14:a7:7e:d8:27:d5:63:27:ae:26:
         fb:62:38:5c:02:17:16:21:28:52:85:3f:72:d5:65:97:26:91:
         14:57:98:b5:32:46:58:bc:49:97:b9:91:b2:9f:3f:f1:1a:e5:
         ca:36:01:79:9d:5f:5e:ac:a0:b2:1b:7b:61:1a:49:ab:f9:db:
         6e:b9:b8:31:8b:05:7d:32:45:f7:9a:4a:c8:6c:5a:e7:ad:8a:
         fc:1b:72:a1:87:62:25:44:45:14:2a:fb:96:2a:ab:f5:94:35:
         02:6d:20:c0:ea:6f:70:1a:ef:29:99:47:60:90:4e:d0:70:90:
         a0:bc:40:11:01:3e:af:03:aa:7f:2f:d7:89:ca:62:01:b2:17:
         03:e2:99:82:25:59:a4:1f:b6:b1:94:45:ec:d6:97:c9:cb:8a:
         09:6e:07:99:05:67:76:0a:e8:39:cf:b3:e8:33:cb:59:bf:64:
         fa:a8:09:33:c9:c7:b4:56:94:6c:dd:4f:0f:bc:55:04:f2:b3:
         75:a0:29:26:f8:dc:0e:9b:c5:8a:c4:e2:09:41:a2:a3:d5:e5:
         8c:fb:7c:7d:38:be:a3:ae:d7:e7:77:32:9d:e6:f6:b3:e2:bd:
         bd:d0:6b:15:bf:81:56:d6:0e:40:fb:b8:c9:05:83:f9:7d:d3:
         2b:f1:7c:05
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTY7lXxc4Jodx659+cK0MzV/+hswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxNDExMzM3MzAwNDc0QkM1NDg5NzI1Qzg3MDc2ODRG
NzBBODc2RDAeFw0yNTAyMDQxODE5MDJaFw0yNjAyMDMxODI0MDJaMDMxMTAvBgNV
BAMTKDk1MTU4MjJDRDlDNjBCOTZENEZCNERDODQ4NkNFMDVGQ0UyRkY1NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN8tiF0IiSsna0VwZY/X+YxNwi
0uYesRuJplCePyIeFW6Fvbu4eMC+JJ9LvIPmQY9Ari9F9zCzFh5mkL6489dThDwN
HHbuB5Za8Pfqpo0oDHijHq4fqH11xJeA8sPtEAmmCjkaSCaCw1LJd0QvNfM8rKCJ
eUsbiLrT8smI16avC5QJBUIv5SE4oIVhBsXwfPg9JKFalOrUM3dkbKXNpDmTjEmd
NUTO2RUhOEdivP6weTJHz8AucHuu0oksiSpwQXzf2zo0jvwdwYbVPuOgh9YcRic0
cXbnW8LAN75F9eQ8VLdA2Uqtd9ChYBRZ2lpksuS3UrjP6c3ctYPgdk882BuxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlRWCLNnGC5bU+03ISGzgX84v9U0wHwYDVR0j
BBgwFoAUIxQRM3MAR0vFSJclyHB2hPcKh20wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EODBGRDBENTc0NkU0NDg2OTc0Rjg3RjBCNThBQTNEMjJE
RjdBOUQzNDAwMzdFNzNENURBNDRBMzkxRUUyNjQwLzAvMjMxNDExMzM3MzAwNDc0
QkM1NDg5NzI1Qzg3MDc2ODRGNzBBODc2RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzE0MTEzMzczMDA0NzRCQzU0
ODk3MjVDODcwNzY4NEY3MEE4NzZELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDgwRkQwRDU3NDZFNDQ4Njk3NEY4N0YwQjU4QUEzRDIyREY3QTlEMzQw
MDM3RTczRDVEQTQ0QTM5MUVFMjY0MC8wLzMxMzMzODJlMzkzNDJlMzEzNDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMjM4MzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAopekDAN
BgkqhkiG9w0BAQsFAAOCAQEAREUMHyZAfZsUp37YJ9VjJ64m+2I4XAIXFiEoUoU/
ctVllyaRFFeYtTJGWLxJl7mRsp8/8RrlyjYBeZ1fXqygsht7YRpJq/nbbrm4MYsF
fTJF95pKyGxa562K/BtyoYdiJURFFCr7liqr9ZQ1Am0gwOpvcBrvKZlHYJBO0HCQ
oLxAEQE+rwOqfy/XicpiAbIXA+KZgiVZpB+2sZRF7NaXycuKCW4HmQVndgroOc+z
6DPLWb9k+qgJM8nHtFaUbN1PD7xVBPKzdaApJvjcDpvFisTiCUGio9XljPt8fTi+
o67X53cyneb2s+K9vdBrFb+BVtYOQPu4yQWD+X3TK/F8BQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:05:06 2025 by rpki-client