Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e302e302f31392d3234203d3e203232333638.roa
File:                     3138312e3137342e302e302f31392d3234203d3e203232333638.roa (raw, json)
Hash identifier:          WBSZfm+3yVrpkslK6/e1nz1rFCXBFZUa6+u4UIWCXWk=
Subject key identifier:   6C:03:71:0F:81:2B:09:B9:01:FD:5A:C2:12:F0:53:EC:48:F4:7C:40
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       03D1611C01A2F38230BAA882227E1D15F2A9248A
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e302e302f31392d3234203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:14 +0000
ROA not before:           Tue 04 Feb 2025 18:17:14 +0000
ROA not after:            Tue 03 Feb 2026 18:22:14 +0000
asID:                     22368
IP address blocks:        181.174.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d1:61:1c:01:a2:f3:82:30:ba:a8:82:22:7e:1d:15:f2:a9:24:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:14 2025 GMT
            Not After : Feb  3 18:22:14 2026 GMT
        Subject: CN=6C03710F812B09B901FD5AC212F053EC48F47C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:b8:b3:22:66:eb:f7:d2:ad:17:f2:aa:29:
                    bd:2b:f9:ff:a2:cd:7d:ff:90:5e:10:bb:78:20:f9:
                    3c:d8:02:31:a5:16:42:19:c1:00:71:72:37:11:cc:
                    e6:b1:3f:2d:0e:2d:d0:ce:82:7f:af:ed:ac:9e:ec:
                    cc:e6:8c:0c:fa:41:a6:58:65:f7:b5:d7:4b:55:02:
                    83:47:68:d9:53:a2:3f:f0:6b:62:db:95:97:c3:19:
                    87:7e:b1:5f:f7:4e:73:b9:40:6e:ca:df:2a:eb:bc:
                    94:be:35:c9:99:fc:f5:89:5f:9a:4b:c2:ea:09:e0:
                    38:60:26:7a:5f:22:37:28:93:d0:0d:52:f1:c9:b1:
                    70:14:ef:36:6f:e0:a2:07:f4:56:d4:cb:ec:07:ef:
                    dc:26:39:89:40:79:75:0b:90:b8:84:33:dc:63:0a:
                    68:68:f1:60:24:6c:c6:dd:71:53:78:14:26:5a:c6:
                    e1:d7:80:fc:85:57:7e:b6:f3:68:26:ae:a4:74:4f:
                    31:ff:b8:b7:f9:87:5e:9b:97:d6:88:57:a1:30:d2:
                    8d:24:3b:a1:69:e0:85:92:40:af:d2:3c:ba:e9:ce:
                    d8:2f:14:a9:91:84:df:00:15:5e:d5:7d:40:80:18:
                    11:28:e9:67:60:06:9d:3d:91:bf:57:b6:5c:f4:c1:
                    46:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:03:71:0F:81:2B:09:B9:01:FD:5A:C2:12:F0:53:EC:48:F4:7C:40
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e302e302f31392d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:0c:08:f4:85:f5:1b:9c:e1:fc:69:ab:b1:1e:a4:5a:ab:cd:
         25:d0:96:7e:83:bb:fd:d5:9e:f3:75:ba:2e:97:4d:c8:a4:5b:
         ea:2c:35:19:76:a6:65:34:7d:9a:10:46:97:95:16:bb:f7:21:
         10:79:f2:f0:bd:33:7c:cc:54:70:44:c1:86:0e:ff:46:d7:62:
         4b:ad:7e:81:46:09:8f:b9:28:5c:30:1d:f9:f5:ca:40:8c:c3:
         69:cc:45:2c:47:60:18:16:ca:7a:26:53:d0:fd:90:08:76:fd:
         cc:c0:51:b5:7a:37:d6:ef:01:6d:3e:2c:d0:47:38:a2:cc:33:
         ad:3c:9a:65:06:d9:6b:19:75:67:fd:a7:86:d9:a7:90:0a:ae:
         ee:36:ee:d8:bf:3f:db:75:30:6d:94:e3:af:e9:8f:30:9c:ad:
         8d:44:92:bb:9d:04:61:44:17:3f:7b:70:3b:1d:e9:18:de:35:
         74:af:7c:16:82:70:73:2f:49:97:58:72:2a:97:00:8b:69:b6:
         2b:e3:48:52:6a:55:f0:a3:a2:5c:92:6d:f7:50:6a:c0:11:13:
         f0:b6:de:44:de:13:9a:4c:c2:66:9f:0c:ab:03:55:6e:44:67:
         20:a1:02:b7:9e:ac:36:f3:f4:82:5a:fe:0e:c7:96:d5:01:3e:
         ef:65:47:7b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUA9FhHAGi84IwuqiCIn4dFfKpJIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNTAyMDQxODE3MTRaFw0yNjAyMDMxODIyMTRaMDMxMTAvBgNV
BAMTKDZDMDM3MTBGODEyQjA5QjkwMUZENUFDMjEyRjA1M0VDNDhGNDdDNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BrizImbr99KtF/KqKb0r+f+i
zX3/kF4Qu3gg+TzYAjGlFkIZwQBxcjcRzOaxPy0OLdDOgn+v7aye7MzmjAz6QaZY
Zfe110tVAoNHaNlToj/wa2LblZfDGYd+sV/3TnO5QG7K3yrrvJS+NcmZ/PWJX5pL
wuoJ4DhgJnpfIjcok9ANUvHJsXAU7zZv4KIH9FbUy+wH79wmOYlAeXULkLiEM9xj
Cmho8WAkbMbdcVN4FCZaxuHXgPyFV36282gmrqR0TzH/uLf5h16bl9aIV6Ew0o0k
O6Fp4IWSQK/SPLrpztgvFKmRhN8AFV7VfUCAGBEo6WdgBp09kb9Xtlz0wUa/AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUbANxD4ErCbkB/VrCEvBT7Ej0fEAwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzgzMTJlMzEzNzM0MmUzMDJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzIzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW1rgAwDQYJ
KoZIhvcNAQELBQADggEBAAIMCPSF9Ruc4fxpq7EepFqrzSXQln6Du/3VnvN1ui6X
TcikW+osNRl2pmU0fZoQRpeVFrv3IRB58vC9M3zMVHBEwYYO/0bXYkutfoFGCY+5
KFwwHfn1ykCMw2nMRSxHYBgWynomU9D9kAh2/czAUbV6N9bvAW0+LNBHOKLMM608
mmUG2WsZdWf9p4bZp5AKru427ti/P9t1MG2U46/pjzCcrY1EkrudBGFEFz97cDsd
6RjeNXSvfBaCcHMvSZdYciqXAItptivjSFJqVfCjolySbfdQasARE/C23kTeE5pM
wmafDKsDVW5EZyChAreerDbz9IJa/g7HltUBPu9lR3s=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:12 2025 by rpki-client