Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e302e302f31362d3234203d3e2036353033.roa
File:                     3134382e3234332e302e302f31362d3234203d3e2036353033.roa (raw, json)
Hash identifier:          asgnjsydXZBXdxzXnqQwbkkd+I9z35pax6vwsyU10JU=
Subject key identifier:   F7:B7:40:35:78:1C:9E:73:B8:63:8E:44:0E:43:AB:A9:76:44:52:4D
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       5D9D88C21D641401A7F242308A00C93B3DE809A9
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e302e302f31362d3234203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:18:56 +0000
ROA not before:           Tue 04 Feb 2025 18:13:56 +0000
ROA not after:            Tue 03 Feb 2026 18:18:56 +0000
asID:                     6503
IP address blocks:        148.243.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9d:88:c2:1d:64:14:01:a7:f2:42:30:8a:00:c9:3b:3d:e8:09:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:56 2025 GMT
            Not After : Feb  3 18:18:56 2026 GMT
        Subject: CN=F7B74035781C9E73B8638E440E43ABA97644524D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:06:e2:f7:84:13:52:23:e4:c5:22:fb:7f:
                    2e:51:78:a6:fa:ca:c4:71:fb:9b:a3:7a:fc:f9:65:
                    4a:13:d3:fc:9a:47:a3:76:09:4d:f9:ba:c2:55:bc:
                    b3:db:c0:3a:77:ea:37:a7:a2:7e:34:46:22:19:5b:
                    20:b6:15:89:b9:37:66:12:0a:88:0a:8d:0d:12:e2:
                    e8:ae:c5:3c:c9:9b:59:d9:f8:6f:9a:dc:b7:aa:55:
                    fc:19:7f:5c:bb:1f:85:b3:10:0d:35:8f:68:1d:2e:
                    19:d8:ed:27:36:07:26:00:18:46:70:5a:a7:20:86:
                    ea:c9:e0:e1:d9:e7:81:34:01:0b:ec:e4:46:75:23:
                    4e:a7:da:4b:a5:08:f8:69:62:51:36:bb:9c:88:b9:
                    b6:cb:78:c8:bb:4e:87:f6:66:d2:2a:d2:15:b8:73:
                    3a:da:55:a2:d8:68:d1:45:46:70:82:da:11:cb:08:
                    2c:47:67:cd:39:53:af:b7:d2:48:49:bc:31:ae:23:
                    4d:2a:46:2d:f9:71:b3:b5:bb:ca:ce:b7:5a:ab:f4:
                    7c:00:9c:aa:a6:2c:ab:a6:98:ec:f4:0f:b5:e7:31:
                    d0:20:7b:8c:a5:e5:c4:44:fe:89:be:2d:42:c7:d3:
                    b3:ac:9e:3c:50:1f:85:60:c6:a4:9a:b6:eb:4d:63:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B7:40:35:78:1C:9E:73:B8:63:8E:44:0E:43:AB:A9:76:44:52:4D
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e302e302f31362d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:04:7e:71:31:da:2e:b9:01:7c:fd:c7:12:b0:bd:70:2e:50:
         0c:8b:e6:46:38:56:64:15:63:0c:08:f0:69:1a:59:1b:b7:2f:
         2f:bc:f2:e6:f7:33:e7:a2:62:a7:19:22:9a:23:92:22:92:bd:
         2d:b7:c2:6c:f8:b3:74:93:ed:e1:3d:11:1c:db:cf:45:dd:30:
         77:b3:be:3e:e5:e0:e7:b1:f0:9d:0b:de:99:c6:29:b0:6f:89:
         36:34:1e:df:21:a4:27:f1:4c:b6:2a:b1:73:be:b3:be:6b:82:
         9e:eb:53:2e:d8:03:80:91:da:9c:85:73:71:91:c2:db:49:1e:
         f0:59:f3:37:ac:59:4f:ee:d8:ec:de:06:a8:21:e6:0d:b7:da:
         e9:db:61:80:cd:cc:3b:e9:20:80:67:ba:9b:3c:5c:a7:4c:9c:
         c9:a7:58:4d:79:5c:71:07:49:8f:91:12:05:84:78:e7:8a:f7:
         52:17:51:ae:3f:76:31:f5:05:40:db:8c:9f:13:b1:18:6f:01:
         a6:a6:68:ae:9e:79:20:8d:61:bc:14:d9:7d:c1:7d:83:a2:0d:
         1f:94:bc:b3:f3:d7:dc:1f:6a:fd:57:4b:e3:38:db:7a:24:55:
         49:86:eb:93:09:5e:99:f3:b4:6b:e2:32:fa:2a:73:5e:d0:95:
         4b:ae:d6:28
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUXZ2Iwh1kFAGn8kIwigDJOz3oCakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NzUwNzA2MzRGRkRGM0Q4RDFDNzE5OTUyMDkzNTk0
QTU0Qzc2RTAeFw0yNTAyMDQxODEzNTZaFw0yNjAyMDMxODE4NTZaMDMxMTAvBgNV
BAMTKEY3Qjc0MDM1NzgxQzlFNzNCODYzOEU0NDBFNDNBQkE5NzY0NDUyNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLwbi94QTUiPkxSL7fy5ReKb6
ysRx+5ujevz5ZUoT0/yaR6N2CU35usJVvLPbwDp36jenon40RiIZWyC2FYm5N2YS
CogKjQ0S4uiuxTzJm1nZ+G+a3LeqVfwZf1y7H4WzEA01j2gdLhnY7Sc2ByYAGEZw
WqcghurJ4OHZ54E0AQvs5EZ1I06n2kulCPhpYlE2u5yIubbLeMi7Tof2ZtIq0hW4
czraVaLYaNFFRnCC2hHLCCxHZ805U6+30khJvDGuI00qRi35cbO1u8rOt1qr9HwA
nKqmLKummOz0D7XnMdAge4yl5cRE/om+LULH07OsnjxQH4VgxqSatutNYzdpAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQU97dANXgcnnO4Y45EDkOrqXZEUk0wHwYDVR0j
BBgwFoAUpXdQcGNP/fPY0ccZlSCTWUpUx24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTZCODQ0NTg4OUIxQTE3NzlDMzI0NkZBQ0QwNDYyREIy
RjNEMTRBOTU1RUMyQ0VDM0ZDNTVEQURDRUNENTYxLzAvQTU3NzUwNzA2MzRGRkRG
M0Q4RDFDNzE5OTUyMDkzNTk0QTU0Qzc2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTc3NTA3MDYzNEZGREYzRDhE
MUM3MTk5NTIwOTM1OTRBNTRDNzZFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU2Qjg0NDU4ODlCMUExNzc5QzMyNDZGQUNEMDQ2MkRCMkYzRDE0QTk1
NUVDMkNFQzNGQzU1REFEQ0VDRDU2MS8wLzMxMzQzODJlMzIzNDMzMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM2MzUzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlPMwDQYJKoZI
hvcNAQELBQADggEBABoEfnEx2i65AXz9xxKwvXAuUAyL5kY4VmQVYwwI8GkaWRu3
Ly+88ub3M+eiYqcZIpojkiKSvS23wmz4s3ST7eE9ERzbz0XdMHezvj7l4Oex8J0L
3pnGKbBviTY0Ht8hpCfxTLYqsXO+s75rgp7rUy7YA4CR2pyFc3GRwttJHvBZ8zes
WU/u2OzeBqgh5g232unbYYDNzDvpIIBnups8XKdMnMmnWE15XHEHSY+REgWEeOeK
91IXUa4/djH1BUDbjJ8TsRhvAaamaK6eeSCNYbwU2X3BfYOiDR+UvLPz19wfav1X
S+M423okVUmG65MJXpnztGviMvoqc17QlUuu1ig=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:20 2025 by rpki-client