Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134392e302f32342d3234203d3e20323635373836.roa
File:                     3139322e3134312e3134392e302f32342d3234203d3e20323635373836.roa (raw, json)
Hash identifier:          jg8T9ybkPhnBkn+YbZp2S9q0chClehbZxWEHhyMx4d8=
Subject key identifier:   6F:BE:05:99:F6:BA:AA:97:22:8A:81:04:31:B0:04:3B:13:F9:9D:A8
Certificate issuer:       /CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
Certificate serial:       58780FDBE6D4CFDCF724253711213A7D8D916F9C
Authority key identifier: 84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134392e302f32342d3234203d3e20323635373836.roa
Signing time:             Tue 04 Feb 2025 18:18:41 +0000
ROA not before:           Tue 04 Feb 2025 18:13:41 +0000
ROA not after:            Tue 03 Feb 2026 18:18:41 +0000
asID:                     265786
IP address blocks:        192.141.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:78:0f:db:e6:d4:cf:dc:f7:24:25:37:11:21:3a:7d:8d:91:6f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
        Validity
            Not Before: Feb  4 18:13:41 2025 GMT
            Not After : Feb  3 18:18:41 2026 GMT
        Subject: CN=6FBE0599F6BAAA97228A810431B0043B13F99DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c4:e6:0b:c0:17:81:c0:d1:06:15:01:02:0d:
                    c3:97:2f:fd:92:2c:b7:cc:be:32:fd:65:80:ec:d9:
                    02:d3:2f:fb:7c:a1:8f:9c:a0:7a:59:5b:29:1f:ff:
                    27:ae:b4:1b:ec:c6:80:47:af:04:bf:13:2a:52:81:
                    27:68:48:7e:5b:1d:04:8d:e8:99:9c:9b:ad:7c:17:
                    94:93:33:04:83:e9:18:54:b1:66:e5:d5:27:31:88:
                    1b:97:13:71:51:22:d3:8e:c6:b3:4d:dc:d5:28:63:
                    ca:f6:f0:ed:0d:c3:41:6e:7c:35:e9:4c:56:9a:1f:
                    f7:ce:02:42:4e:32:ba:68:dd:b9:e2:a0:39:94:e9:
                    93:ca:8e:c1:90:d2:81:da:f3:06:fe:ab:b0:e5:de:
                    bc:74:cd:8b:d6:34:2b:51:d9:32:ef:f2:81:27:83:
                    db:9c:f4:e9:7f:dd:37:3c:1f:13:6b:48:8e:ca:a7:
                    93:3c:de:b9:6b:e6:bf:85:5d:43:16:d7:b1:2e:eb:
                    27:9e:37:b5:41:37:9c:30:9a:94:2e:5e:1f:68:f7:
                    e3:c3:81:86:09:04:fd:2d:f0:d7:b1:4c:c0:40:50:
                    8a:5e:90:e8:d2:dd:4a:35:77:7d:f1:b1:fe:40:ee:
                    95:cb:01:0e:39:0c:81:de:c6:90:12:f8:ac:f7:7e:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BE:05:99:F6:BA:AA:97:22:8A:81:04:31:B0:04:3B:13:F9:9D:A8
            X509v3 Authority Key Identifier:
                keyid:84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134392e302f32342d3234203d3e20323635373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:ae:4d:34:8b:dd:d2:22:a2:f6:df:46:54:30:86:36:57:
         a8:0f:cc:3c:1e:50:b2:7d:b7:bb:56:a0:5a:cb:91:66:75:cf:
         84:d7:bd:d5:a3:eb:78:30:da:0e:bc:a6:f1:8e:1a:67:a2:32:
         d2:ae:f3:3a:c4:64:c3:d5:09:5d:b4:3a:da:21:71:94:1e:8c:
         57:a3:f9:04:d8:00:65:3c:91:01:80:06:0d:2e:72:6f:32:13:
         e5:26:b6:93:07:a0:05:97:ae:3d:7a:c7:09:4b:19:3e:45:25:
         eb:1d:db:c2:cc:06:cc:06:e0:19:a1:5c:ef:ac:8f:be:3d:3d:
         e2:2f:9f:30:e0:34:e3:dc:ae:d4:28:c1:f6:8e:da:6f:fa:73:
         63:6e:23:f7:21:90:31:c7:2c:e9:89:13:18:4e:53:6c:b0:bb:
         0c:93:e0:1e:e1:a1:a0:7a:fb:d9:fd:e3:f5:32:95:a9:1e:7c:
         33:5b:4d:94:ee:a5:37:72:d3:6d:a2:5c:7c:92:d0:52:82:75:
         ef:a1:9e:32:0b:3f:72:6d:0a:24:7d:86:c0:7d:0e:05:e3:a1:
         b4:dd:aa:35:4c:d3:00:6a:7e:a5:29:ee:cc:f9:30:1b:f5:ba:
         84:e8:2b:85:18:75:f9:95:e3:8d:30:88:b9:19:6d:16:24:e2:
         f7:e3:22:88
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUWHgP2+bUz9z3JCU3ESE6fY2Rb5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRCNkUwRUYyMUE0MTQ0ODc4OEZEN0M2OTMzNEYyQkFF
RkNFNjY4OTAeFw0yNTAyMDQxODEzNDFaFw0yNjAyMDMxODE4NDFaMDMxMTAvBgNV
BAMTKDZGQkUwNTk5RjZCQUFBOTcyMjhBODEwNDMxQjAwNDNCMTNGOTlEQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxOYLwBeBwNEGFQECDcOXL/2S
LLfMvjL9ZYDs2QLTL/t8oY+coHpZWykf/yeutBvsxoBHrwS/EypSgSdoSH5bHQSN
6Jmcm618F5STMwSD6RhUsWbl1ScxiBuXE3FRItOOxrNN3NUoY8r28O0Nw0FufDXp
TFaaH/fOAkJOMrpo3bnioDmU6ZPKjsGQ0oHa8wb+q7Dl3rx0zYvWNCtR2TLv8oEn
g9uc9Ol/3Tc8HxNrSI7Kp5M83rlr5r+FXUMW17Eu6yeeN7VBN5wwmpQuXh9o9+PD
gYYJBP0t8NexTMBAUIpekOjS3Uo1d33xsf5A7pXLAQ45DIHexpAS+Kz3fuPHAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUb74Fmfa6qpciioEEMbAEOxP5nagwHwYDVR0j
BBgwFoAUhLbg7yGkFEh4j9fGkzTyuu/OZokwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzM5QkYyQkZDMDcxQjlBOTk1RTA3NzdENjBCRjBBNkI2
RjFDOTZGM0VEMUM3QjMwMkE1Mzk5MTAzQUM4REJFLzAvODRCNkUwRUYyMUE0MTQ0
ODc4OEZEN0M2OTMzNEYyQkFFRkNFNjY4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NEI2RTBFRjIxQTQxNDQ4Nzg4
RkQ3QzY5MzM0RjJCQUVGQ0U2Njg5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjczOUJGMkJGQzA3MUI5QTk5NUUwNzc3RDYwQkYwQTZCNkYxQzk2RjNF
RDFDN0IzMDJBNTM5OTEwM0FDOERCRS8wLzMxMzkzMjJlMzEzNDMxMmUzMTM0Mzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNzM4MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADA
jZUwDQYJKoZIhvcNAQELBQADggEBABjgrk00i93SIqL230ZUMIY2V6gPzDweULJ9
t7tWoFrLkWZ1z4TXvdWj63gw2g68pvGOGmeiMtKu8zrEZMPVCV20OtohcZQejFej
+QTYAGU8kQGABg0ucm8yE+UmtpMHoAWXrj16xwlLGT5FJesd28LMBswG4BmhXO+s
j749PeIvnzDgNOPcrtQowfaO2m/6c2NuI/chkDHHLOmJExhOU2ywuwyT4B7hoaB6
+9n94/UylakefDNbTZTupTdy022iXHyS0FKCde+hnjILP3JtCiR9hsB9DgXjobTd
qjVM0wBqfqUp7sz5MBv1uoToK4UYdfmV440wiLkZbRYk4vfjIog=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:23 2025 by rpki-client