Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32322d3232203d3e20323635373731.roa
File:                     3132382e3230312e3130382e302f32322d3232203d3e20323635373731.roa (raw, json)
Hash identifier:          lPCXyM+TeDa3g9ULYYerVR5N4v3N7xkEzf3vXDWSZy4=
Subject key identifier:   2C:6F:A5:C9:4F:17:EF:DA:CD:AA:F5:B2:FB:92:EC:09:60:84:F2:F1
Certificate issuer:       /CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Certificate serial:       73E92BC320C3C4C31CA0FFD6BA8A0735C0F2C4AF
Authority key identifier: 8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32322d3232203d3e20323635373731.roa
Signing time:             Tue 04 Feb 2025 18:28:46 +0000
ROA not before:           Tue 04 Feb 2025 18:23:46 +0000
ROA not after:            Tue 03 Feb 2026 18:28:46 +0000
asID:                     265771
IP address blocks:        128.201.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e9:2b:c3:20:c3:c4:c3:1c:a0:ff:d6:ba:8a:07:35:c0:f2:c4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
        Validity
            Not Before: Feb  4 18:23:46 2025 GMT
            Not After : Feb  3 18:28:46 2026 GMT
        Subject: CN=2C6FA5C94F17EFDACDAAF5B2FB92EC096084F2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:61:de:19:be:76:17:0e:7e:51:f1:f8:2f:3c:
                    71:b2:f6:8f:73:11:e3:aa:16:53:52:31:b1:d2:87:
                    3a:9e:79:63:c3:6f:d3:68:78:16:66:d1:74:51:38:
                    fd:12:35:81:96:1c:8f:b4:f9:76:fd:b7:3b:f4:a9:
                    ce:51:44:14:e1:08:f5:67:b2:46:41:ff:23:50:4c:
                    fb:9b:be:40:37:20:77:8b:e4:a2:57:db:b0:43:20:
                    dd:8d:96:9a:e4:c8:97:bc:da:8b:ac:c8:f5:14:a3:
                    f6:91:8f:ad:9b:a5:13:35:e5:c6:99:96:f6:b5:62:
                    ef:77:6d:78:1e:00:20:c7:70:bc:07:40:27:37:0c:
                    f5:62:2b:90:b2:89:b2:a3:b7:d3:e2:91:4a:12:1b:
                    81:7c:c3:52:8b:3f:17:40:2f:b2:5c:44:b1:58:af:
                    7c:0b:67:71:1a:04:ec:7e:9c:50:02:a0:df:63:fe:
                    5e:c0:1c:4a:c3:86:e0:a1:c8:e4:91:45:40:75:b1:
                    3c:70:07:1b:25:51:44:42:18:b9:87:97:ed:c0:24:
                    d6:54:55:d4:a1:8c:30:be:a7:15:f5:58:05:3c:55:
                    6b:02:19:80:46:b8:70:96:1a:0b:74:29:96:a8:40:
                    99:da:3e:2e:53:6f:5b:05:70:f0:d5:49:dd:93:49:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6F:A5:C9:4F:17:EF:DA:CD:AA:F5:B2:FB:92:EC:09:60:84:F2:F1
            X509v3 Authority Key Identifier:
                keyid:8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32322d3232203d3e20323635373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:4a:57:45:64:03:61:a4:a1:fd:03:67:c8:31:bb:d2:c7:c8:
         1d:95:84:05:08:4e:71:7e:10:54:bf:6a:0c:14:ff:c6:b9:77:
         1f:ab:a1:64:96:aa:d7:a4:5d:27:f7:79:c2:ec:6a:84:e2:db:
         39:05:59:ab:1f:6d:6c:53:19:97:c1:88:ae:0a:aa:37:d8:4b:
         ff:9a:8a:18:2e:62:1e:d4:f4:09:84:56:cd:ee:11:69:fe:67:
         95:26:f2:ea:1d:c4:b8:4a:ba:99:1f:b0:be:a8:8d:a6:48:71:
         30:1b:74:f1:d5:4e:6f:16:1f:28:a3:de:ca:f2:5e:f2:8c:e7:
         1e:71:ae:47:c7:63:b5:cb:7f:3b:c0:5c:83:61:a9:7f:58:50:
         64:a9:3e:b2:60:eb:6e:b2:78:2a:4c:12:91:c7:10:8c:fc:9f:
         0f:99:42:d1:d8:f2:4d:49:fd:96:15:e3:7e:68:48:19:4a:bd:
         26:9d:7c:9b:46:8e:3f:7a:57:17:e3:be:ea:15:31:97:e0:3e:
         f8:4d:37:58:de:20:04:55:6d:9d:6c:8c:43:19:8c:ed:68:8e:
         e2:67:a7:a0:3b:31:7a:ad:ec:9a:57:d3:cd:e3:df:16:22:95:
         65:b0:59:2b:eb:cf:34:f2:79:8c:cf:74:40:4f:d6:a9:0c:76:
         93:41:96:39
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUc+krwyDDxMMcoP/WuooHNcDyxK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERBOUM0NTY1NTFBOUZBNDMxODU2NUU0RUY1QkY0QzZC
NUY5QUFDMzAeFw0yNTAyMDQxODIzNDZaFw0yNjAyMDMxODI4NDZaMDMxMTAvBgNV
BAMTKDJDNkZBNUM5NEYxN0VGREFDREFBRjVCMkZCOTJFQzA5NjA4NEYyRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYd4ZvnYXDn5R8fgvPHGy9o9z
EeOqFlNSMbHShzqeeWPDb9NoeBZm0XRROP0SNYGWHI+0+Xb9tzv0qc5RRBThCPVn
skZB/yNQTPubvkA3IHeL5KJX27BDIN2NlprkyJe82ousyPUUo/aRj62bpRM15caZ
lva1Yu93bXgeACDHcLwHQCc3DPViK5CyibKjt9PikUoSG4F8w1KLPxdAL7JcRLFY
r3wLZ3EaBOx+nFACoN9j/l7AHErDhuChyOSRRUB1sTxwBxslUURCGLmHl+3AJNZU
VdShjDC+pxX1WAU8VWsCGYBGuHCWGgt0KZaoQJnaPi5Tb1sFcPDVSd2TSQ0FAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQULG+lyU8X79rNqvWy+5LsCWCE8vEwHwYDVR0j
BBgwFoAUjanEVlUan6QxhWXk71v0xrX5qsMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNkUwQzAwQjkyMUNDQ0M1M0QyNzNBQ0Q2RjNCMjVGQTY0
Mzk4M0IxOTIwNzc4RTEwOTk2QUQxMDAwODc3OUYxLzAvOERBOUM0NTY1NTFBOUZB
NDMxODU2NUU0RUY1QkY0QzZCNUY5QUFDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REE5QzQ1NjU1MUE5RkE0MzE4
NTY1RTRFRjVCRjRDNkI1RjlBQUMzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTZFMEMwMEI5MjFDQ0NDNTNEMjczQUNENkYzQjI1RkE2NDM5ODNCMTky
MDc3OEUxMDk5NkFEMTAwMDg3NzlGMS8wLzMxMzIzODJlMzIzMDMxMmUzMTMwMzgy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzUzNzM3MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKA
yWwwDQYJKoZIhvcNAQELBQADggEBAHVKV0VkA2Gkof0DZ8gxu9LHyB2VhAUITnF+
EFS/agwU/8a5dx+roWSWqtekXSf3ecLsaoTi2zkFWasfbWxTGZfBiK4KqjfYS/+a
ihguYh7U9AmEVs3uEWn+Z5Um8uodxLhKupkfsL6ojaZIcTAbdPHVTm8WHyij3sry
XvKM5x5xrkfHY7XLfzvAXINhqX9YUGSpPrJg626yeCpMEpHHEIz8nw+ZQtHY8k1J
/ZYV435oSBlKvSadfJtGjj96VxfjvuoVMZfgPvhNN1jeIARVbZ1sjEMZjO1ojuJn
p6A7MXqt7JpX083j3xYilWWwWSvrzzTyeYzPdEBP1qkMdpNBljk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:36 2025 by rpki-client