Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e39392e302f32342d3234203d3e203238353039.roa
File:                     3134382e3234332e39392e302f32342d3234203d3e203238353039.roa (raw, json)
Hash identifier:          9mrUVkoMX2Ky+/kh0jd8cL3ej9ZTCstJpp/MgD9L748=
Subject key identifier:   69:08:E6:54:A0:90:A0:BC:D0:1E:55:D2:4D:29:42:C8:08:B8:D4:60
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       1C6AD4A98EE822F5F9A7B403712B548888476065
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e39392e302f32342d3234203d3e203238353039.roa
Signing time:             Tue 04 Feb 2025 18:18:59 +0000
ROA not before:           Tue 04 Feb 2025 18:13:59 +0000
ROA not after:            Tue 03 Feb 2026 18:18:59 +0000
asID:                     28509
IP address blocks:        148.243.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6a:d4:a9:8e:e8:22:f5:f9:a7:b4:03:71:2b:54:88:88:47:60:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:59 2025 GMT
            Not After : Feb  3 18:18:59 2026 GMT
        Subject: CN=6908E654A090A0BCD01E55D24D2942C808B8D460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:55:08:9a:2e:92:fa:c4:d7:9b:a4:4e:f8:
                    de:5d:14:b2:41:e5:26:5b:93:96:14:d0:4f:f3:90:
                    71:f2:54:28:81:79:b2:14:19:32:6f:20:d5:7f:b6:
                    d8:40:3c:54:72:c2:eb:57:68:a6:89:40:8a:18:d0:
                    1b:ff:2a:38:f7:3e:22:6a:f8:fd:02:b0:7a:22:74:
                    e4:83:6d:5b:bc:c1:7e:b2:5d:c0:91:ba:88:08:f3:
                    42:a6:5e:97:43:3c:68:73:c6:3c:cb:fb:f8:1c:56:
                    b0:38:53:bc:98:b1:44:65:53:e0:c6:5e:99:dd:c5:
                    f4:54:7e:0a:ce:3c:0e:da:d2:d1:60:83:51:88:db:
                    64:f6:73:df:93:43:61:3b:6f:27:5d:c1:b8:91:65:
                    e2:04:cd:9d:80:f1:72:ec:8e:00:02:4b:63:b9:d8:
                    74:b8:6f:4b:ff:37:5c:72:5a:f5:b8:37:70:fd:2d:
                    8a:0b:48:f3:1e:c7:a4:96:53:84:2a:6b:3e:c6:fe:
                    1e:2c:09:dc:08:f9:46:f4:68:1d:93:a1:a1:61:9a:
                    d5:f3:1a:92:19:20:a9:9c:08:2c:3b:b3:c1:ec:96:
                    d1:70:0b:88:16:82:d8:70:31:14:a2:b0:0f:c9:2a:
                    ef:59:6b:4b:31:b5:2f:ae:e7:68:f3:f2:bb:f5:2a:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:08:E6:54:A0:90:A0:BC:D0:1E:55:D2:4D:29:42:C8:08:B8:D4:60
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e39392e302f32342d3234203d3e203238353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:fa:61:90:fc:a3:e2:09:10:3d:22:c0:6f:89:47:9e:94:
         00:f2:44:2f:85:1d:fa:2f:64:94:05:68:e1:47:87:c8:54:7d:
         74:d5:2e:e7:7d:3c:d7:21:d2:dd:e8:5c:b9:a9:52:d0:3e:0d:
         32:ff:43:64:38:1b:fb:0b:f3:c3:24:cf:56:2a:ac:92:27:90:
         86:43:15:43:33:6e:ec:cc:8d:7a:a7:28:e3:4b:28:e5:6a:01:
         37:48:f6:b6:f9:02:5b:68:f5:61:61:2b:1e:8d:a0:43:05:a1:
         10:45:d1:e9:0a:e8:e3:31:09:37:3f:f0:e5:ce:95:e4:8d:9f:
         a1:4d:0b:85:ea:24:6b:f0:db:db:49:08:cc:df:3b:6d:89:61:
         5a:71:de:9c:9d:33:97:b2:64:7a:ea:b4:48:26:26:86:47:2e:
         31:27:59:40:88:0b:f9:fd:64:26:cc:e9:e2:a6:da:9e:28:e8:
         2f:77:d2:9e:41:10:f4:af:3a:5b:0d:9c:d0:b3:bb:5f:77:12:
         6f:41:16:d3:a4:0b:0b:e5:f8:b5:97:c3:0f:bc:0f:2b:b5:4e:
         dd:4a:22:3d:7e:51:e8:4f:c9:bc:df:dc:93:7f:e3:88:3d:72:
         b2:86:63:91:5a:a7:db:11:4c:da:f9:88:45:76:c5:1b:4f:c9:
         4e:dd:59:0b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHGrUqY7oIvX5p7QDcStUiIhHYGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NzUwNzA2MzRGRkRGM0Q4RDFDNzE5OTUyMDkzNTk0
QTU0Qzc2RTAeFw0yNTAyMDQxODEzNTlaFw0yNjAyMDMxODE4NTlaMDMxMTAvBgNV
BAMTKDY5MDhFNjU0QTA5MEEwQkNEMDFFNTVEMjREMjk0MkM4MDhCOEQ0NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9lUImi6S+sTXm6RO+N5dFLJB
5SZbk5YU0E/zkHHyVCiBebIUGTJvINV/tthAPFRywutXaKaJQIoY0Bv/Kjj3PiJq
+P0CsHoidOSDbVu8wX6yXcCRuogI80KmXpdDPGhzxjzL+/gcVrA4U7yYsURlU+DG
XpndxfRUfgrOPA7a0tFgg1GI22T2c9+TQ2E7byddwbiRZeIEzZ2A8XLsjgACS2O5
2HS4b0v/N1xyWvW4N3D9LYoLSPMex6SWU4Qqaz7G/h4sCdwI+Ub0aB2ToaFhmtXz
GpIZIKmcCCw7s8HsltFwC4gWgthwMRSisA/JKu9Za0sxtS+u52jz8rv1Kt/hAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUaQjmVKCQoLzQHlXSTSlCyAi41GAwHwYDVR0j
BBgwFoAUpXdQcGNP/fPY0ccZlSCTWUpUx24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTZCODQ0NTg4OUIxQTE3NzlDMzI0NkZBQ0QwNDYyREIy
RjNEMTRBOTU1RUMyQ0VDM0ZDNTVEQURDRUNENTYxLzAvQTU3NzUwNzA2MzRGRkRG
M0Q4RDFDNzE5OTUyMDkzNTk0QTU0Qzc2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTc3NTA3MDYzNEZGREYzRDhE
MUM3MTk5NTIwOTM1OTRBNTRDNzZFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU2Qjg0NDU4ODlCMUExNzc5QzMyNDZGQUNEMDQ2MkRCMkYzRDE0QTk1
NUVDMkNFQzNGQzU1REFEQ0VDRDU2MS8wLzMxMzQzODJlMzIzNDMzMmUzOTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM1MzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJTzYzAN
BgkqhkiG9w0BAQsFAAOCAQEAmW36YZD8o+IJED0iwG+JR56UAPJEL4Ud+i9klAVo
4UeHyFR9dNUu53081yHS3ehcualS0D4NMv9DZDgb+wvzwyTPViqskieQhkMVQzNu
7MyNeqco40so5WoBN0j2tvkCW2j1YWErHo2gQwWhEEXR6Qro4zEJNz/w5c6V5I2f
oU0Lheoka/Db20kIzN87bYlhWnHenJ0zl7Jkeuq0SCYmhkcuMSdZQIgL+f1kJszp
4qbanijoL3fSnkEQ9K86Ww2c0LO7X3cSb0EW06QLC+X4tZfDD7wPK7VO3UoiPX5R
6E/JvN/ck3/jiD1ysoZjkVqn2xFM2vmIRXbFG0/JTt1ZCw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:17 2025 by rpki-client