Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/3133382e33362e32342e302f32322d3234203d3e20323731383034.roa
File:                     3133382e33362e32342e302f32322d3234203d3e20323731383034.roa (raw, json)
Hash identifier:          YniqSEtfIrILkh1HWoHcU8H5ST77mStS8QVmcWIeX+A=
Subject key identifier:   B2:E5:90:0A:24:39:41:4A:4D:47:18:1F:4F:E1:51:F2:B4:C0:A7:26
Certificate issuer:       /CN=F2AE7C052E238AB3E9EBF19E56710078113440CB
Certificate serial:       6863A446162B95FE41E7B5D24825186B26714E26
Authority key identifier: F2:AE:7C:05:2E:23:8A:B3:E9:EB:F1:9E:56:71:00:78:11:34:40:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/3133382e33362e32342e302f32322d3234203d3e20323731383034.roa
Signing time:             Tue 04 Feb 2025 18:08:37 +0000
ROA not before:           Tue 04 Feb 2025 18:03:37 +0000
ROA not after:            Tue 03 Feb 2026 18:08:37 +0000
asID:                     271804
IP address blocks:        138.36.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:63:a4:46:16:2b:95:fe:41:e7:b5:d2:48:25:18:6b:26:71:4e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AE7C052E238AB3E9EBF19E56710078113440CB
        Validity
            Not Before: Feb  4 18:03:37 2025 GMT
            Not After : Feb  3 18:08:37 2026 GMT
        Subject: CN=B2E5900A2439414A4D47181F4FE151F2B4C0A726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:0f:db:0c:11:16:0f:a9:d1:b2:1f:9e:1a:
                    36:66:11:60:9a:00:49:6c:62:53:4e:61:b1:e9:42:
                    07:31:a6:cf:95:17:28:7e:21:18:57:81:57:a3:6a:
                    4d:1e:cf:2d:0e:7d:89:13:5e:23:09:8f:b8:01:8b:
                    1a:20:f4:9d:03:1b:92:1c:13:c0:27:e1:0a:10:1e:
                    82:4e:4c:13:c2:c7:72:dc:a9:7f:65:23:b9:1b:8e:
                    4b:db:30:40:06:eb:cf:96:9f:8b:17:8a:7c:d2:61:
                    5a:dc:64:f5:e7:5b:c3:e8:d5:92:8d:62:4b:1c:12:
                    9c:11:08:78:2f:a2:dd:bd:45:f1:71:cc:de:2e:22:
                    49:29:68:59:9d:4b:d6:70:b3:8d:cf:4a:1f:ea:b6:
                    da:8a:0b:e5:48:91:fe:61:c3:e7:76:24:fb:4c:b0:
                    f0:39:c2:e6:86:18:67:97:1a:df:c6:59:38:ff:98:
                    07:c8:ba:49:da:0d:a4:99:55:7f:d6:d9:4a:f1:e0:
                    41:f6:3f:b4:6c:3d:ea:ef:5f:85:8c:95:33:d9:11:
                    df:82:cf:fa:14:45:0a:75:96:32:f0:25:f2:8a:6f:
                    3d:7d:37:ef:66:7f:9e:e3:b6:7c:07:e5:88:14:93:
                    5a:b9:1a:83:de:00:85:33:ac:54:8a:dd:80:48:0f:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E5:90:0A:24:39:41:4A:4D:47:18:1F:4F:E1:51:F2:B4:C0:A7:26
            X509v3 Authority Key Identifier:
                keyid:F2:AE:7C:05:2E:23:8A:B3:E9:EB:F1:9E:56:71:00:78:11:34:40:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AE7C052E238AB3E9EBF19E56710078113440CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/950D2C46E7AC6641E2A1A46250A1C852BEFFC3CCB40C5464E0ECA6FF3D79F1BF/0/3133382e33362e32342e302f32322d3234203d3e20323731383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:59:65:67:24:13:ed:3b:bc:9f:56:00:66:7c:50:a3:da:18:
         84:db:7a:b7:07:29:2d:86:60:83:9a:be:bf:44:e0:9c:27:2f:
         fa:c7:e4:c6:d9:84:40:61:10:d3:f9:c9:29:e0:be:e4:34:2f:
         dc:71:c4:bd:e7:d2:42:67:34:85:ea:35:b1:97:2c:74:31:33:
         83:85:c6:f2:69:40:06:56:d8:e4:35:ae:45:63:b9:29:66:2b:
         24:88:d0:37:19:a1:f7:30:a0:14:14:9e:73:20:5e:93:69:1c:
         75:ba:c1:1d:38:af:e3:1f:ab:e0:5a:19:e2:8a:52:c2:aa:a2:
         a2:17:27:31:4d:fa:70:14:63:c1:63:64:9f:f5:6e:29:01:c9:
         92:90:cc:fe:99:c0:ef:42:ad:9a:07:22:88:8c:12:4d:4e:c3:
         d2:9b:08:75:7b:bf:b7:5d:fe:d5:5d:b0:c7:19:1a:6d:02:d6:
         ff:b6:b7:92:7b:65:5e:0c:ae:f9:4c:55:0a:a5:55:ca:62:d6:
         7d:38:cf:d2:5a:83:60:54:6e:ac:85:ff:38:d7:37:69:d3:4b:
         15:a9:19:e5:c0:ad:ff:43:af:9d:b1:3b:4e:60:28:7d:89:38:
         78:e8:a2:e9:0c:91:9b:60:d7:68:e9:26:4d:a7:52:15:79:5c:
         87:9b:41:89
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaGOkRhYrlf5B57XSSCUYayZxTiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJBRTdDMDUyRTIzOEFCM0U5RUJGMTlFNTY3MTAwNzgx
MTM0NDBDQjAeFw0yNTAyMDQxODAzMzdaFw0yNjAyMDMxODA4MzdaMDMxMTAvBgNV
BAMTKEIyRTU5MDBBMjQzOTQxNEE0RDQ3MTgxRjRGRTE1MUYyQjRDMEE3MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKQ/bDBEWD6nRsh+eGjZmEWCa
AElsYlNOYbHpQgcxps+VFyh+IRhXgVejak0ezy0OfYkTXiMJj7gBixog9J0DG5Ic
E8An4QoQHoJOTBPCx3LcqX9lI7kbjkvbMEAG68+Wn4sXinzSYVrcZPXnW8Po1ZKN
YkscEpwRCHgvot29RfFxzN4uIkkpaFmdS9Zws43PSh/qttqKC+VIkf5hw+d2JPtM
sPA5wuaGGGeXGt/GWTj/mAfIuknaDaSZVX/W2Urx4EH2P7RsPervX4WMlTPZEd+C
z/oURQp1ljLwJfKKbz19N+9mf57jtnwH5YgUk1q5GoPeAIUzrFSK3YBIDx3PAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUsuWQCiQ5QUpNRxgfT+FR8rTApyYwHwYDVR0j
BBgwFoAU8q58BS4jirPp6/GeVnEAeBE0QMswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NTBEMkM0NkU3QUM2NjQxRTJBMUE0NjI1MEExQzg1MkJF
RkZDM0NDQjQwQzU0NjRFMEVDQTZGRjNENzlGMUJGLzAvRjJBRTdDMDUyRTIzOEFC
M0U5RUJGMTlFNTY3MTAwNzgxMTM0NDBDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMkFFN0MwNTJFMjM4QUIzRTlF
QkYxOUU1NjcxMDA3ODExMzQ0MENCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTUwRDJDNDZFN0FDNjY0MUUyQTFBNDYyNTBBMUM4NTJCRUZGQzNDQ0I0
MEM1NDY0RTBFQ0E2RkYzRDc5RjFCRi8wLzMxMzMzODJlMzMzNjJlMzIzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMTM4MzAzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAookGDAN
BgkqhkiG9w0BAQsFAAOCAQEAMFllZyQT7Tu8n1YAZnxQo9oYhNt6twcpLYZgg5q+
v0TgnCcv+sfkxtmEQGEQ0/nJKeC+5DQv3HHEvefSQmc0heo1sZcsdDEzg4XG8mlA
BlbY5DWuRWO5KWYrJIjQNxmh9zCgFBSecyBek2kcdbrBHTiv4x+r4FoZ4opSwqqi
ohcnMU36cBRjwWNkn/VuKQHJkpDM/pnA70KtmgciiIwSTU7D0psIdXu/t13+1V2w
xxkabQLW/7a3kntlXgyu+UxVCqVVymLWfTjP0lqDYFRurIX/ONc3adNLFakZ5cCt
/0OvnbE7TmAofYk4eOii6QyRm2DXaOkmTadSFXlch5tBiQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:01 2025 by rpki-client on console.sobornost.net