Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/3133312e3136312e3233362e302f32322d3232203d3e20323633363837.roa
File:                     3133312e3136312e3233362e302f32322d3232203d3e20323633363837.roa (raw, json)
Hash identifier:          H4oXeWxlQTV9I+qTdP+KfKiEPsMzbvqB2VL6iJ0E9HE=
Subject key identifier:   22:C1:B3:CA:1F:08:48:E6:92:9E:BB:0E:10:38:59:00:49:8D:B2:97
Certificate issuer:       /CN=2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343
Certificate serial:       2251C6CD3CE69CAD94E364EE827077E886C18999
Authority key identifier: 2A:CB:03:DB:51:DD:B7:21:3E:9A:E4:4C:07:C6:BB:7B:82:8B:13:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/3133312e3136312e3233362e302f32322d3232203d3e20323633363837.roa
Signing time:             Tue 04 Feb 2025 18:00:38 +0000
ROA not before:           Tue 04 Feb 2025 17:55:38 +0000
ROA not after:            Tue 03 Feb 2026 18:00:38 +0000
asID:                     263687
IP address blocks:        131.161.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:51:c6:cd:3c:e6:9c:ad:94:e3:64:ee:82:70:77:e8:86:c1:89:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343
        Validity
            Not Before: Feb  4 17:55:38 2025 GMT
            Not After : Feb  3 18:00:38 2026 GMT
        Subject: CN=22C1B3CA1F0848E6929EBB0E10385900498DB297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:2e:af:41:43:c4:14:54:52:09:a0:46:42:
                    1b:93:bf:bf:5a:ed:03:cb:83:9e:48:f8:06:29:13:
                    c7:09:f0:40:2e:4e:f7:a5:04:cc:e3:42:83:ac:7e:
                    ba:98:e1:d8:0a:ed:2d:f6:ed:9f:7b:9d:aa:5e:aa:
                    c3:13:6d:98:b2:c0:6a:e1:a6:fd:aa:2c:38:9a:2e:
                    b7:b6:45:87:df:4c:22:ba:2d:5d:59:ef:8e:b5:86:
                    b0:23:57:e3:9f:3f:a0:37:75:5a:bc:c9:8f:47:c2:
                    f5:9b:74:75:bc:66:8e:7f:3b:5d:2e:a4:54:3b:7e:
                    da:74:e1:29:2e:64:5c:63:01:b0:55:36:d4:e6:a8:
                    f8:ab:7b:4c:4b:6e:72:0c:11:82:df:98:d0:79:f9:
                    33:98:bc:e4:2a:8a:36:0f:bb:d1:65:b8:fd:63:74:
                    c6:3d:c6:02:6d:95:a0:a5:0b:78:de:04:39:58:fc:
                    20:32:98:0c:25:e1:82:6f:a5:7c:76:ab:70:af:eb:
                    a2:f3:22:3f:38:af:0a:49:79:21:81:82:b5:b3:5b:
                    d3:cb:ce:96:38:a9:a6:8c:b5:e0:74:6a:27:7c:bf:
                    72:c5:35:91:a6:52:1c:56:d8:c3:bc:45:b8:f5:d7:
                    b9:d4:7e:0d:63:0d:68:3d:c9:6a:17:64:9e:8b:ca:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C1:B3:CA:1F:08:48:E6:92:9E:BB:0E:10:38:59:00:49:8D:B2:97
            X509v3 Authority Key Identifier:
                keyid:2A:CB:03:DB:51:DD:B7:21:3E:9A:E4:4C:07:C6:BB:7B:82:8B:13:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/3133312e3136312e3233362e302f32322d3232203d3e20323633363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:7c:5a:62:b3:73:bb:3c:be:7f:8f:6d:23:f6:81:1a:e6:1d:
         91:ce:06:f4:01:43:74:4c:8e:91:4d:35:5f:71:28:78:f0:5d:
         6a:7b:dc:75:b7:12:ab:a8:28:d7:d4:c5:af:4d:ed:33:65:b6:
         bb:5e:31:fb:c6:4c:cc:7c:a0:15:c9:d2:da:9e:ff:4d:40:f6:
         d2:32:e6:21:44:4f:91:bd:b3:5b:a4:1e:50:56:94:f1:6f:5d:
         1a:88:ff:d4:b6:69:c9:2c:4c:88:ae:cd:d9:a0:88:0f:4d:73:
         a6:10:4e:6b:7f:a6:5c:7c:50:6e:57:2e:8a:ff:1f:ee:dc:dc:
         dd:37:f9:50:f5:78:7f:fe:ee:84:8c:d3:bf:4f:09:c2:95:ba:
         25:b3:97:03:d2:21:b8:c8:ac:15:5b:c6:fc:58:79:d8:79:04:
         74:02:ca:31:af:ec:db:75:06:65:c8:1c:97:39:6d:a0:94:a6:
         92:74:f1:29:ba:9a:56:77:f8:e1:e0:ee:9a:21:82:26:4b:9f:
         89:b0:66:31:ad:59:86:c3:09:d0:ec:7c:4b:26:01:e6:d1:45:
         59:a8:55:b1:27:98:6d:87:ad:bb:66:0d:63:4b:e6:cc:c2:fa:
         4d:87:e2:8c:34:c8:fe:80:0f:3b:68:0b:db:a3:5c:25:68:43:
         ff:86:ca:9d
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUIlHGzTzmnK2U42TugnB36IbBiZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFDQjAzREI1MUREQjcyMTNFOUFFNDRDMDdDNkJCN0I4
MjhCMTM0MzAeFw0yNTAyMDQxNzU1MzhaFw0yNjAyMDMxODAwMzhaMDMxMTAvBgNV
BAMTKDIyQzFCM0NBMUYwODQ4RTY5MjlFQkIwRTEwMzg1OTAwNDk4REIyOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3i6vQUPEFFRSCaBGQhuTv79a
7QPLg55I+AYpE8cJ8EAuTvelBMzjQoOsfrqY4dgK7S327Z97napeqsMTbZiywGrh
pv2qLDiaLre2RYffTCK6LV1Z7461hrAjV+OfP6A3dVq8yY9HwvWbdHW8Zo5/O10u
pFQ7ftp04SkuZFxjAbBVNtTmqPire0xLbnIMEYLfmNB5+TOYvOQqijYPu9FluP1j
dMY9xgJtlaClC3jeBDlY/CAymAwl4YJvpXx2q3Cv66LzIj84rwpJeSGBgrWzW9PL
zpY4qaaMteB0aid8v3LFNZGmUhxW2MO8Rbj117nUfg1jDWg9yWoXZJ6LysU7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUIsGzyh8ISOaSnrsOEDhZAEmNspcwHwYDVR0j
BBgwFoAUKssD21HdtyE+muRMB8a7e4KLE0MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTRBNUIxNjIzMUREM0JDNzlGRDEyRTZDOTYzRTA2RkRD
MjRBMjM1MTc3Q0M0M0NBNUI2QTBGRTRGQ0Y0QkI2LzAvMkFDQjAzREI1MUREQjcy
MTNFOUFFNDRDMDdDNkJCN0I4MjhCMTM0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUNCMDNEQjUxRERCNzIxM0U5
QUU0NEMwN0M2QkI3QjgyOEIxMzQzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU0QTVCMTYyMzFERDNCQzc5RkQxMkU2Qzk2M0UwNkZEQzI0QTIzNTE3
N0NDNDNDQTVCNkEwRkU0RkNGNEJCNi8wLzMxMzMzMTJlMzEzNjMxMmUzMjMzMzYy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzMzNjM4Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKD
oewwDQYJKoZIhvcNAQELBQADggEBAKF8WmKzc7s8vn+PbSP2gRrmHZHOBvQBQ3RM
jpFNNV9xKHjwXWp73HW3EquoKNfUxa9N7TNltrteMfvGTMx8oBXJ0tqe/01A9tIy
5iFET5G9s1ukHlBWlPFvXRqI/9S2acksTIiuzdmgiA9Nc6YQTmt/plx8UG5XLor/
H+7c3N03+VD1eH/+7oSM079PCcKVuiWzlwPSIbjIrBVbxvxYedh5BHQCyjGv7Nt1
BmXIHJc5baCUppJ08Sm6mlZ3+OHg7pohgiZLn4mwZjGtWYbDCdDsfEsmAebRRVmo
VbEnmG2HrbtmDWNL5szC+k2H4ow0yP6ADztoC9ujXCVoQ/+Gyp0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:15 2025 by rpki-client