Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3138372e3139312e38302e302f32302d3234203d3e203139333733.roa
File:                     3138372e3139312e38302e302f32302d3234203d3e203139333733.roa (raw, json)
Hash identifier:          Cu5ZVtCvR712X9JK+xnXIk3K8wUkzxng722Prn/5gCE=
Subject key identifier:   63:3D:6F:C2:DF:6B:30:20:0A:2C:98:5D:F8:F6:18:0A:8F:DF:C5:ED
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       4E1B7FCD19BAE039D2D8021068603AAF2C7DD0A9
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3138372e3139312e38302e302f32302d3234203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:50:00 +0000
ROA not before:           Sun 16 Feb 2025 06:45:00 +0000
ROA not after:            Sun 15 Feb 2026 06:50:00 +0000
asID:                     19373
IP address blocks:        187.191.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1b:7f:cd:19:ba:e0:39:d2:d8:02:10:68:60:3a:af:2c:7d:d0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:45:00 2025 GMT
            Not After : Feb 15 06:50:00 2026 GMT
        Subject: CN=633D6FC2DF6B30200A2C985DF8F6180A8FDFC5ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:78:e0:f2:81:96:bd:e3:a7:80:a5:9e:b2:
                    51:86:30:a3:b4:2a:65:0d:a3:fd:bd:e0:03:e0:ba:
                    95:81:a3:1e:ca:21:d5:e6:05:c7:e0:bc:39:3f:17:
                    de:41:66:7f:a9:a4:4f:2a:24:73:af:4c:86:2c:3d:
                    96:df:fc:a3:eb:41:d8:10:3a:f6:96:00:8e:1d:c2:
                    12:83:0e:6e:e8:e7:df:08:12:eb:b4:a1:90:7c:77:
                    cd:e7:68:0d:ac:44:c5:53:ea:9b:4f:9d:96:31:2b:
                    f0:51:27:49:3f:12:00:2c:40:6e:87:5e:b4:4a:39:
                    78:5a:a4:dd:98:de:40:e9:66:e2:ee:3b:f0:c1:19:
                    a0:42:6c:9a:a9:5c:32:e7:e8:87:7c:66:be:66:a5:
                    5d:c2:53:0f:16:64:ee:94:57:7d:88:57:b0:ea:bc:
                    c1:fe:21:12:82:ed:b5:1d:aa:f1:a4:9f:b9:11:d2:
                    0e:eb:39:82:20:a7:af:ee:45:f0:55:b2:6c:e8:38:
                    2a:c3:4f:a7:72:46:ab:ec:0b:01:2c:8c:78:44:0f:
                    48:61:4f:33:0e:ca:ee:83:c7:c8:d1:ef:c3:af:63:
                    d7:16:f7:e2:f6:cd:b9:7a:7a:ea:10:4f:65:36:aa:
                    06:00:1f:de:79:4e:2b:d0:73:c1:4d:82:6b:5d:a8:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3D:6F:C2:DF:6B:30:20:0A:2C:98:5D:F8:F6:18:0A:8F:DF:C5:ED
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3138372e3139312e38302e302f32302d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.191.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:f4:8c:ab:f5:33:a8:32:fd:16:31:cd:b5:1c:34:ac:b1:
         f1:61:d6:a5:01:6f:64:48:4f:59:fd:0e:8a:a1:11:6c:e4:54:
         ea:19:2e:a0:db:e3:60:d0:eb:03:6b:be:ad:d3:23:fd:d5:6e:
         7e:bb:0f:7b:e4:7e:3a:e7:30:bb:aa:f8:71:d1:48:e9:bf:8c:
         40:b5:97:ee:8f:96:d8:a7:73:ed:f6:4d:fc:d0:89:35:dc:49:
         76:89:eb:0a:12:47:81:76:a1:8d:43:a6:7e:a5:0f:ce:bb:42:
         e1:b8:c8:1a:d8:dc:13:54:e9:a8:e5:f7:bd:88:8c:91:f4:51:
         8b:f4:2f:c7:ff:ca:01:af:0e:da:c7:9f:08:95:cc:2b:3a:7b:
         59:b6:12:18:0f:2f:7e:90:62:a8:a1:e5:15:54:9d:49:f8:16:
         9d:a4:dc:5c:0a:28:89:a9:a5:ff:a9:44:85:b5:e6:64:65:f0:
         16:4c:30:35:0a:43:73:d5:10:fc:af:ca:b4:db:80:89:e0:7d:
         12:fc:ba:9c:ea:38:43:61:5e:9b:a4:9b:8e:cd:9f:a9:0a:6f:
         25:6c:42:0a:08:d0:7e:8f:7f:5f:a1:c8:bb:04:a3:13:80:86:
         d9:a6:56:39:e0:49:33:6f:ae:d4:3b:00:e7:b7:bd:32:17:f9:
         ce:6d:bc:f6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTht/zRm64DnS2AIQaGA6ryx90KkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBNjI4NjNCNUVCREY2QzI3QjU2NzQxQzNCOEIyNjI0
RTM3OTExOTAeFw0yNTAyMTYwNjQ1MDBaFw0yNjAyMTUwNjUwMDBaMDMxMTAvBgNV
BAMTKDYzM0Q2RkMyREY2QjMwMjAwQTJDOTg1REY4RjYxODBBOEZERkM1RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2CHjg8oGWveOngKWeslGGMKO0
KmUNo/294APgupWBox7KIdXmBcfgvDk/F95BZn+ppE8qJHOvTIYsPZbf/KPrQdgQ
OvaWAI4dwhKDDm7o598IEuu0oZB8d83naA2sRMVT6ptPnZYxK/BRJ0k/EgAsQG6H
XrRKOXhapN2Y3kDpZuLuO/DBGaBCbJqpXDLn6Id8Zr5mpV3CUw8WZO6UV32IV7Dq
vMH+IRKC7bUdqvGkn7kR0g7rOYIgp6/uRfBVsmzoOCrDT6dyRqvsCwEsjHhED0hh
TzMOyu6Dx8jR78OvY9cW9+L2zbl6euoQT2U2qgYAH955TivQc8FNgmtdqHulAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYz1vwt9rMCAKLJhd+PYYCo/fxe0wHwYDVR0j
BBgwFoAUVKYoY7Xr32wntWdBw7iyYk43kRkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjBEODY0OTA0NjBCN0Q2MzEzMzhGNzA5MUU2NjBCMzM3
RjlDRDExMkYyNUJEOTBFMEYzMUVFREEyMjgzNURCLzAvNTRBNjI4NjNCNUVCREY2
QzI3QjU2NzQxQzNCOEIyNjI0RTM3OTExOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEE2Mjg2M0I1RUJERjZDMjdC
NTY3NDFDM0I4QjI2MjRFMzc5MTE5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTYwRDg2NDkwNDYwQjdENjMxMzM4RjcwOTFFNjYwQjMzN0Y5Q0QxMTJG
MjVCRDkwRTBGMzFFRURBMjI4MzVEQi8wLzMxMzgzNzJlMzEzOTMxMmUzODMwMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzOTMzMzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLu/UDAN
BgkqhkiG9w0BAQsFAAOCAQEAeS70jKv1M6gy/RYxzbUcNKyx8WHWpQFvZEhPWf0O
iqERbORU6hkuoNvjYNDrA2u+rdMj/dVufrsPe+R+Oucwu6r4cdFI6b+MQLWX7o+W
2Kdz7fZN/NCJNdxJdonrChJHgXahjUOmfqUPzrtC4bjIGtjcE1TpqOX3vYiMkfRR
i/Qvx//KAa8O2sefCJXMKzp7WbYSGA8vfpBiqKHlFVSdSfgWnaTcXAooiaml/6lE
hbXmZGXwFkwwNQpDc9UQ/K/KtNuAieB9Evy6nOo4Q2Fem6Sbjs2fqQpvJWxCCgjQ
fo9/X6HIuwSjE4CG2aZWOeBJM2+u1DsA57e9Mhf5zm289g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:26 2025 by rpki-client on console.sobornost.net