Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234312e302f32342d3234203d3e20323632393331.roa
File:                     3139312e3130322e3234312e302f32342d3234203d3e20323632393331.roa (raw, json)
Hash identifier:          aB1fRJhhXc1l9H8mVOA0s8X/AU2p/4y4CLbtvi7Qjv0=
Subject key identifier:   87:BC:C7:DD:20:CC:5F:35:0E:D8:8E:89:81:36:64:9A:99:1A:4E:95
Certificate issuer:       /CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
Certificate serial:       638300B67D409594E442D586A4D82D8C0DFCE875
Authority key identifier: A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234312e302f32342d3234203d3e20323632393331.roa
Signing time:             Tue 04 Feb 2025 18:23:07 +0000
ROA not before:           Tue 04 Feb 2025 18:18:07 +0000
ROA not after:            Tue 03 Feb 2026 18:23:07 +0000
asID:                     262931
IP address blocks:        191.102.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:83:00:b6:7d:40:95:94:e4:42:d5:86:a4:d8:2d:8c:0d:fc:e8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A78765AD08967A6A9A5165858220DC333AEEBF8D
        Validity
            Not Before: Feb  4 18:18:07 2025 GMT
            Not After : Feb  3 18:23:07 2026 GMT
        Subject: CN=87BCC7DD20CC5F350ED88E898136649A991A4E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:72:cb:b7:c7:7f:7b:17:cf:ad:fe:69:79:
                    fc:e4:ef:39:66:8c:f2:ec:bb:14:cd:36:87:ec:8d:
                    61:74:29:8c:b5:d0:da:72:72:a2:48:fe:df:df:9b:
                    9e:7e:f3:bf:e7:03:b1:50:e0:1b:1a:70:7e:ab:6a:
                    07:36:b8:10:b5:17:ae:dc:ea:c5:92:8a:5e:d7:2d:
                    79:eb:f1:ed:c5:93:9d:8f:35:48:de:33:b4:75:c7:
                    17:55:6d:28:fa:a4:d5:fe:dc:1c:4a:c2:42:97:c5:
                    81:e2:50:9a:31:4b:5d:a9:a3:17:68:17:38:7a:27:
                    53:be:d8:7f:ba:0c:79:43:80:04:d6:b7:59:e1:8e:
                    07:bc:e2:6d:ec:35:af:84:15:24:89:70:26:0f:0d:
                    a3:e9:25:ac:88:26:1e:5c:10:37:1f:9a:13:49:d2:
                    e4:d8:15:2a:90:b8:f0:7b:40:6a:06:29:55:9e:de:
                    d2:2c:b1:ca:97:b2:18:7b:78:2e:65:7b:2c:8a:23:
                    b9:b6:43:1b:c1:d8:28:12:43:d7:58:d2:4b:c3:2b:
                    69:1c:ac:af:3f:2d:d9:e8:12:d3:42:7e:b8:35:10:
                    2a:e3:b7:e1:06:67:d9:bc:3c:25:7b:ee:e7:01:99:
                    25:b1:d9:26:93:98:9e:50:14:28:5a:39:e7:98:53:
                    54:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BC:C7:DD:20:CC:5F:35:0E:D8:8E:89:81:36:64:9A:99:1A:4E:95
            X509v3 Authority Key Identifier:
                keyid:A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/3139312e3130322e3234312e302f32342d3234203d3e20323632393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:5a:f2:4c:e6:2a:70:38:1e:78:e3:5c:ab:f7:d9:58:09:d9:
         8b:9b:3b:11:32:38:4b:10:15:bf:d4:97:c8:cf:c3:97:74:3b:
         64:3d:46:e5:36:3c:68:5a:e8:a1:47:70:a9:4b:49:6e:a0:7b:
         85:5e:0d:b7:ea:64:55:83:ce:de:0c:35:cd:a2:01:3a:8a:ab:
         ed:94:a6:10:fa:92:0d:7b:2b:b1:3b:2c:10:43:de:14:cc:d8:
         a2:86:04:b6:05:7f:5d:90:d5:bc:75:0b:83:9b:6a:a1:a7:68:
         b3:d3:7f:0f:3c:59:cc:f2:93:35:a3:fa:fb:da:f2:37:83:39:
         57:1e:f9:e0:00:99:0c:72:da:ee:a8:25:68:dc:16:97:8a:0a:
         a2:41:c4:e8:31:7b:ee:e8:37:e1:34:b8:b0:7b:fb:bc:29:8a:
         b0:4f:6f:6a:c4:aa:c4:b4:d9:1d:49:bf:94:5c:cc:ed:e2:4c:
         36:db:17:f1:64:aa:85:63:23:9f:ae:c5:5d:28:ee:a8:8c:ed:
         3b:b3:ae:db:a0:fd:fc:f3:87:df:3f:b5:08:8c:2f:41:e3:c6:
         bf:e6:56:cb:0d:54:26:4d:58:5f:00:95:d2:20:79:65:4d:47:
         6c:4d:64:f3:57:95:54:b2:d9:1e:b7:6b:23:fe:5c:73:3e:36:
         93:6f:c2:d9
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUY4MAtn1AlZTkQtWGpNgtjA386HUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc4NzY1QUQwODk2N0E2QTlBNTE2NTg1ODIyMERDMzMz
QUVFQkY4RDAeFw0yNTAyMDQxODE4MDdaFw0yNjAyMDMxODIzMDdaMDMxMTAvBgNV
BAMTKDg3QkNDN0REMjBDQzVGMzUwRUQ4OEU4OTgxMzY2NDlBOTkxQTRFOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbTHLLt8d/exfPrf5pefzk7zlm
jPLsuxTNNofsjWF0KYy10NpycqJI/t/fm55+87/nA7FQ4BsacH6ragc2uBC1F67c
6sWSil7XLXnr8e3Fk52PNUjeM7R1xxdVbSj6pNX+3BxKwkKXxYHiUJoxS12poxdo
Fzh6J1O+2H+6DHlDgATWt1nhjge84m3sNa+EFSSJcCYPDaPpJayIJh5cEDcfmhNJ
0uTYFSqQuPB7QGoGKVWe3tIsscqXshh7eC5leyyKI7m2QxvB2CgSQ9dY0kvDK2kc
rK8/LdnoEtNCfrg1ECrjt+EGZ9m8PCV77ucBmSWx2SaTmJ5QFChaOeeYU1QBAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUh7zH3SDMXzUO2I6JgTZkmpkaTpUwHwYDVR0j
BBgwFoAUp4dlrQiWemqaUWWFgiDcMzruv40wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTU2ODk4REM4N0ZEQjU0RUQ1Q0YwRjIwNEY1MkY3NDgx
Njk0QjMwMEI5QUM2Q0IwRTk2ODdFRjk0MENFN0FFLzAvQTc4NzY1QUQwODk2N0E2
QTlBNTE2NTg1ODIyMERDMzMzQUVFQkY4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzg3NjVBRDA4OTY3QTZBOUE1
MTY1ODU4MjIwREMzMzNBRUVCRjhELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREU1Njg5OERDODdGREI1NEVENUNGMEYyMDRGNTJGNzQ4MTY5NEIzMDBC
OUFDNkNCMEU5Njg3RUY5NDBDRTdBRS8wLzMxMzkzMTJlMzEzMDMyMmUzMjM0MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzOTMzMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/
ZvEwDQYJKoZIhvcNAQELBQADggEBAI5a8kzmKnA4HnjjXKv32VgJ2YubOxEyOEsQ
Fb/Ul8jPw5d0O2Q9RuU2PGha6KFHcKlLSW6ge4VeDbfqZFWDzt4MNc2iATqKq+2U
phD6kg17K7E7LBBD3hTM2KKGBLYFf12Q1bx1C4ObaqGnaLPTfw88WczykzWj+vva
8jeDOVce+eAAmQxy2u6oJWjcFpeKCqJBxOgxe+7oN+E0uLB7+7wpirBPb2rEqsS0
2R1Jv5RczO3iTDbbF/FkqoVjI5+uxV0o7qiM7Tuzrtug/fzzh98/tQiML0Hjxr/m
VssNVCZNWF8AldIgeWVNR2xNZPNXlVSy2R63ayP+XHM+NpNvwtk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:54 2025 by rpki-client