Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/3132382e3230312e3134362e302f32342d3234203d3e203535303832.roa
File:                     3132382e3230312e3134362e302f32342d3234203d3e203535303832.roa (raw, json)
Hash identifier:          33DSAe4IiZaHzHZ6qEz2Fbveknv5Gn90H1T4UwlkFUE=
Subject key identifier:   91:D8:5C:A0:8A:33:10:67:F5:B6:59:52:16:EF:7E:AD:36:84:3D:16
Certificate issuer:       /CN=4C78CC976DFE47B81477BCC595C469015140DEDB
Certificate serial:       510CEC99FD31CACA218FA89C817E07D7AB372A53
Authority key identifier: 4C:78:CC:97:6D:FE:47:B8:14:77:BC:C5:95:C4:69:01:51:40:DE:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/3132382e3230312e3134362e302f32342d3234203d3e203535303832.roa
Signing time:             Sun 18 May 2025 23:30:00 +0000
ROA not before:           Sun 18 May 2025 23:25:00 +0000
ROA not after:            Sun 17 May 2026 23:30:00 +0000
asID:                     55082
IP address blocks:        128.201.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 23:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0c:ec:99:fd:31:ca:ca:21:8f:a8:9c:81:7e:07:d7:ab:37:2a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C78CC976DFE47B81477BCC595C469015140DEDB
        Validity
            Not Before: May 18 23:25:00 2025 GMT
            Not After : May 17 23:30:00 2026 GMT
        Subject: CN=91D85CA08A331067F5B6595216EF7EAD36843D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:f4:c2:84:a9:5b:68:07:c6:d4:5e:b5:1b:
                    3b:c4:85:68:f9:f8:25:60:ab:ee:25:e9:ea:41:23:
                    5e:c4:4b:91:ad:1f:99:48:03:42:e2:8f:5e:51:19:
                    dc:54:20:36:4e:19:7c:f0:7c:94:d1:ea:8e:26:ec:
                    2e:62:8f:de:c5:eb:28:89:39:1a:f2:21:cc:7e:43:
                    52:3c:39:e1:3a:25:25:c9:9a:34:3c:dc:c0:68:32:
                    3d:59:e8:ae:7a:aa:b2:bc:49:d5:ac:0d:6e:94:5a:
                    81:76:57:51:80:8e:44:33:4d:64:08:f2:62:39:90:
                    e5:b9:65:ab:08:e7:94:be:65:f9:b4:b4:9e:49:b7:
                    da:06:b8:9f:3b:ae:f2:5d:c5:15:f7:20:0d:38:8c:
                    c9:99:f1:64:ce:56:50:c2:e3:49:39:98:1b:8f:45:
                    22:bb:73:8a:1d:56:b5:19:f6:3e:f9:ab:28:18:c0:
                    84:f2:c3:ce:f1:b5:89:c4:b5:36:54:14:3b:33:be:
                    38:89:35:72:1a:67:3d:1a:ea:f5:11:c6:03:c7:ac:
                    ed:54:d2:9a:f4:e8:d7:ac:0c:bb:9f:8e:e0:b1:96:
                    33:00:13:6c:b9:82:7e:1f:67:13:f9:34:54:4e:3c:
                    c4:12:22:51:85:16:e1:a4:80:55:72:c5:14:7d:fe:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D8:5C:A0:8A:33:10:67:F5:B6:59:52:16:EF:7E:AD:36:84:3D:16
            X509v3 Authority Key Identifier:
                keyid:4C:78:CC:97:6D:FE:47:B8:14:77:BC:C5:95:C4:69:01:51:40:DE:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/4C78CC976DFE47B81477BCC595C469015140DEDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C78CC976DFE47B81477BCC595C469015140DEDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA9A08D7DE5F9D286D58F723E30EE9AEBB94BC057CD886728AF6F611050EE5B6/0/3132382e3230312e3134362e302f32342d3234203d3e203535303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:1f:31:97:2d:8e:28:33:52:22:5b:62:6b:47:f3:72:b7:93:
         2e:76:7a:6b:d2:2e:91:03:f5:7c:3d:3b:20:8d:f3:64:ed:2a:
         cf:78:21:6f:d3:3d:a2:15:8b:73:36:66:f4:73:6c:63:de:43:
         93:12:a0:c5:fb:62:64:4d:e8:9c:a0:83:ba:a0:3d:3c:86:5f:
         c4:e4:4d:e2:29:c0:69:22:fe:ce:e2:48:d2:95:d2:47:3e:d2:
         f0:7e:6c:ae:14:1c:e3:9c:26:f5:5e:45:ff:b7:1f:3f:b0:8c:
         48:95:93:fb:5a:5b:d5:0d:a6:42:31:41:d3:cd:2a:c3:3e:44:
         81:99:84:6a:96:02:00:3a:30:2b:21:90:cc:2b:dd:99:a1:6b:
         ef:73:ae:29:d4:f9:7d:b2:fa:9b:b8:24:d1:70:c8:3b:fa:6f:
         9d:5a:b1:c0:0c:a2:9b:f5:be:32:82:e5:57:66:a6:1d:61:d7:
         41:59:2b:b9:d6:f4:7c:65:68:3c:e2:32:88:5a:c9:46:ab:cb:
         d7:50:58:e2:0a:c0:7e:0d:48:eb:3a:64:b8:4b:a7:a3:16:16:
         37:d5:b5:ca:8a:96:42:89:ee:2a:f7:96:34:f6:73:c2:64:76:
         8d:65:5b:18:ed:61:61:22:de:74:f7:14:88:41:43:af:a1:bc:
         8b:3a:d6:58
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUQzsmf0xysohj6icgX4H16s3KlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM3OENDOTc2REZFNDdCODE0NzdCQ0M1OTVDNDY5MDE1
MTQwREVEQjAeFw0yNTA1MTgyMzI1MDBaFw0yNjA1MTcyMzMwMDBaMDMxMTAvBgNV
BAMTKDkxRDg1Q0EwOEEzMzEwNjdGNUI2NTk1MjE2RUY3RUFEMzY4NDNEMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+/TChKlbaAfG1F61GzvEhWj5
+CVgq+4l6epBI17ES5GtH5lIA0Lij15RGdxUIDZOGXzwfJTR6o4m7C5ij97F6yiJ
ORryIcx+Q1I8OeE6JSXJmjQ83MBoMj1Z6K56qrK8SdWsDW6UWoF2V1GAjkQzTWQI
8mI5kOW5ZasI55S+Zfm0tJ5Jt9oGuJ87rvJdxRX3IA04jMmZ8WTOVlDC40k5mBuP
RSK7c4odVrUZ9j75qygYwITyw87xtYnEtTZUFDszvjiJNXIaZz0a6vURxgPHrO1U
0pr06NesDLufjuCxljMAE2y5gn4fZxP5NFROPMQSIlGFFuGkgFVyxRR9/mPPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkdhcoIozEGf1tllSFu9+rTaEPRYwHwYDVR0j
BBgwFoAUTHjMl23+R7gUd7zFlcRpAVFA3tswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQTlBMDhEN0RFNUY5RDI4NkQ1OEY3MjNFMzBFRTlBRUJC
OTRCQzA1N0NEODg2NzI4QUY2RjYxMTA1MEVFNUI2LzAvNEM3OENDOTc2REZFNDdC
ODE0NzdCQ0M1OTVDNDY5MDE1MTQwREVEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Qzc4Q0M5NzZERkU0N0I4MTQ3
N0JDQzU5NUM0NjkwMTUxNDBERURCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREE5QTA4RDdERTVGOUQyODZENThGNzIzRTMwRUU5QUVCQjk0QkMwNTdD
RDg4NjcyOEFGNkY2MTEwNTBFRTVCNi8wLzMxMzIzODJlMzIzMDMxMmUzMTM0MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM1MzAzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgMmS
MA0GCSqGSIb3DQEBCwUAA4IBAQA1HzGXLY4oM1IiW2JrR/Nyt5Mudnpr0i6RA/V8
PTsgjfNk7SrPeCFv0z2iFYtzNmb0c2xj3kOTEqDF+2JkTeicoIO6oD08hl/E5E3i
KcBpIv7O4kjSldJHPtLwfmyuFBzjnCb1XkX/tx8/sIxIlZP7WlvVDaZCMUHTzSrD
PkSBmYRqlgIAOjArIZDMK92ZoWvvc64p1Pl9svqbuCTRcMg7+m+dWrHADKKb9b4y
guVXZqYdYddBWSu51vR8ZWg84jKIWslGq8vXUFjiCsB+DUjrOmS4S6ejFhY31bXK
ipZCie4q95Y09nPCZHaNZVsY7WFhIt509xSIQUOvobyLOtZY
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:06:56 2025 by rpki-client