Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34302e302f32322d3232203d3e20323635353137.roa
File:                     3134332e3235352e34302e302f32322d3232203d3e20323635353137.roa (raw, json)
Hash identifier:          JKRuQwbGbNvXmdZCd90zRGtSyxVwO8jjcBw6RXXgFoQ=
Subject key identifier:   B9:38:7B:37:D3:18:07:9E:8C:CF:DA:61:CC:C7:D2:DE:DF:5F:96:B7
Certificate issuer:       /CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
Certificate serial:       4C23AC341E33D2FD5095F3996B672DB4AA50835A
Authority key identifier: 8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34302e302f32322d3232203d3e20323635353137.roa
Signing time:             Mon 07 Apr 2025 17:14:10 +0000
ROA not before:           Mon 07 Apr 2025 17:09:10 +0000
ROA not after:            Mon 06 Apr 2026 17:14:10 +0000
asID:                     265517
IP address blocks:        143.255.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:23:ac:34:1e:33:d2:fd:50:95:f3:99:6b:67:2d:b4:aa:50:83:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
        Validity
            Not Before: Apr  7 17:09:10 2025 GMT
            Not After : Apr  6 17:14:10 2026 GMT
        Subject: CN=B9387B37D318079E8CCFDA61CCC7D2DEDF5F96B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:e5:b9:9d:80:6c:09:bf:08:92:a6:49:39:
                    98:1d:69:d4:fe:1b:1c:f8:45:7b:73:4f:89:ae:5b:
                    5f:63:fb:58:6f:d1:3a:69:48:bb:0a:b3:94:f1:62:
                    bc:74:5a:09:79:1d:e9:99:7c:6e:88:63:09:e4:b7:
                    c6:c8:c6:cb:93:68:4f:e5:bf:7d:c9:ec:14:54:30:
                    f4:17:c5:84:5a:56:25:5f:42:7f:47:72:00:1d:9c:
                    cb:70:55:20:a5:ca:ba:2a:f2:f2:65:bf:7b:88:80:
                    0c:65:e6:e5:dc:c2:b0:71:72:fd:32:51:2f:73:83:
                    40:98:a3:b5:a7:f7:95:18:cf:e0:f9:b3:47:bb:0d:
                    26:d8:b0:cf:dd:68:b7:ff:b7:91:c6:77:18:b8:30:
                    64:b2:5a:a7:fa:4c:bd:ed:c8:75:8a:de:0e:8a:d8:
                    c5:71:f8:8a:1d:75:c1:7a:f0:a0:c8:a7:4c:87:82:
                    5b:84:0d:ec:b1:1e:3e:c0:27:d0:44:68:1e:64:79:
                    62:55:b0:81:8f:9e:a1:9b:63:32:35:95:af:a3:31:
                    c9:07:18:67:61:f3:0f:55:3b:5f:26:16:25:45:e0:
                    50:a0:0b:31:05:f9:86:ed:8b:a0:cd:27:4a:34:a9:
                    7f:f6:61:8a:16:f0:3c:2c:01:d5:27:3f:48:e2:ff:
                    44:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:38:7B:37:D3:18:07:9E:8C:CF:DA:61:CC:C7:D2:DE:DF:5F:96:B7
            X509v3 Authority Key Identifier:
                keyid:8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34302e302f32322d3232203d3e20323635353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:df:f6:f9:a0:e1:44:1c:8b:99:73:6b:b3:01:94:cc:6d:a1:
         0b:66:77:38:b8:04:11:53:3f:ec:cb:62:56:e2:f3:68:b0:9b:
         8f:0b:5e:af:8c:7a:62:02:f3:9d:3e:6a:36:ae:82:81:18:61:
         76:31:4c:1f:84:11:3e:d4:dc:2e:e0:ce:c7:23:bd:1c:7a:dc:
         bf:c9:ed:e1:73:a0:f5:90:94:0c:c3:fd:4b:26:9d:91:ad:5c:
         f1:1b:8f:99:9b:a1:78:e3:84:74:03:73:f0:3e:9c:42:07:f2:
         2d:58:aa:3a:94:d7:f6:52:bc:b3:e8:34:3a:3f:05:90:95:bf:
         cd:34:89:3f:e8:07:75:f9:51:35:3a:3c:e0:b8:63:64:ee:55:
         a6:5e:50:e8:f5:2e:3e:0a:06:4f:de:66:96:f3:25:93:fb:5f:
         f6:5b:7e:52:32:26:9b:bd:b9:28:58:18:f3:a0:d5:99:f6:e5:
         ba:57:40:86:63:8f:76:40:51:a6:96:4c:c3:4c:f0:18:2f:64:
         c4:f6:8b:2b:ff:31:cc:53:5a:02:c1:a5:9a:9b:81:c8:04:08:
         85:67:7a:74:8d:a9:68:60:8a:87:ba:b2:51:8b:4b:9c:2e:f4:
         ff:89:cd:52:81:98:c8:f4:b3:aa:2d:c5:dd:dc:09:6d:3f:29:
         a9:cc:7f:fc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTCOsNB4z0v1QlfOZa2cttKpQg1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE5MDEzNDlFOURFNDQ2NDZENUVCQjRGQkJEODA4Qjg5
NEQ2ODgyRDAeFw0yNTA0MDcxNzA5MTBaFw0yNjA0MDYxNzE0MTBaMDMxMTAvBgNV
BAMTKEI5Mzg3QjM3RDMxODA3OUU4Q0NGREE2MUNDQzdEMkRFREY1Rjk2QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0N+W5nYBsCb8IkqZJOZgdadT+
Gxz4RXtzT4muW19j+1hv0TppSLsKs5TxYrx0Wgl5HemZfG6IYwnkt8bIxsuTaE/l
v33J7BRUMPQXxYRaViVfQn9HcgAdnMtwVSClyroq8vJlv3uIgAxl5uXcwrBxcv0y
US9zg0CYo7Wn95UYz+D5s0e7DSbYsM/daLf/t5HGdxi4MGSyWqf6TL3tyHWK3g6K
2MVx+IoddcF68KDIp0yHgluEDeyxHj7AJ9BEaB5keWJVsIGPnqGbYzI1la+jMckH
GGdh8w9VO18mFiVF4FCgCzEF+Ybti6DNJ0o0qX/2YYoW8DwsAdUnP0ji/0QTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUuTh7N9MYB56Mz9phzMfS3t9flrcwHwYDVR0j
BBgwFoAUipATSeneRGRtXrtPu9gIuJTWiC0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzM1NkQwMUY3NzE5NTA5RTAxNDk2MEQ3MTU4ODFFMkVE
MEY1NUI5QjA2QjQ1NTU5NzYzNDNDOEFERjJFOUUwLzAvOEE5MDEzNDlFOURFNDQ2
NDZENUVCQjRGQkJEODA4Qjg5NEQ2ODgyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTkwMTM0OUU5REU0NDY0NkQ1
RUJCNEZCQkQ4MDhCODk0RDY4ODJELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMzNTZEMDFGNzcxOTUwOUUwMTQ5NjBENzE1ODgxRTJFRDBGNTVCOUIw
NkI0NTU1OTc2MzQzQzhBREYyRTlFMC8wLzMxMzQzMzJlMzIzNTM1MmUzNDMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1MzUzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj/8o
MA0GCSqGSIb3DQEBCwUAA4IBAQCT3/b5oOFEHIuZc2uzAZTMbaELZnc4uAQRUz/s
y2JW4vNosJuPC16vjHpiAvOdPmo2roKBGGF2MUwfhBE+1Nwu4M7HI70cety/ye3h
c6D1kJQMw/1LJp2RrVzxG4+Zm6F444R0A3PwPpxCB/ItWKo6lNf2Uryz6DQ6PwWQ
lb/NNIk/6Ad1+VE1OjzguGNk7lWmXlDo9S4+CgZP3maW8yWT+1/2W35SMiabvbko
WBjzoNWZ9uW6V0CGY492QFGmlkzDTPAYL2TE9osr/zHMU1oCwaWam4HIBAiFZ3p0
jaloYIqHurJRi0ucLvT/ic1SgZjI9LOqLcXd3AltPympzH/8
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:42:59 2025 by rpki-client on console.sobornost.net