Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138342e302f32322d3232203d3e20323635373238.roa
File:                     3136302e3233382e3138342e302f32322d3232203d3e20323635373238.roa (raw, json)
Hash identifier:          TQyOv4xCW0x09STnq9h5vaG+RVFBPAa2244rsTNVK1Q=
Subject key identifier:   CB:94:55:35:03:E7:B4:A1:AE:4C:B5:87:E8:2C:45:61:EF:DB:55:9D
Certificate issuer:       /CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
Certificate serial:       43AD28EC0880D278039062410157F8B90FDE71A4
Authority key identifier: B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138342e302f32322d3232203d3e20323635373238.roa
Signing time:             Fri 02 May 2025 21:17:40 +0000
ROA not before:           Fri 02 May 2025 21:12:40 +0000
ROA not after:            Fri 01 May 2026 21:17:40 +0000
asID:                     265728
IP address blocks:        160.238.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 06:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ad:28:ec:08:80:d2:78:03:90:62:41:01:57:f8:b9:0f:de:71:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
        Validity
            Not Before: May  2 21:12:40 2025 GMT
            Not After : May  1 21:17:40 2026 GMT
        Subject: CN=CB94553503E7B4A1AE4CB587E82C4561EFDB559D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:24:43:53:02:78:8d:e1:0c:80:7a:06:6d:
                    a5:9b:fc:be:28:30:74:4f:24:76:57:ac:a3:a1:09:
                    88:da:51:a2:30:ae:06:1a:74:be:c4:c4:e8:e1:13:
                    9d:e2:46:a9:4c:95:28:6f:03:7f:d6:34:b2:5d:b4:
                    9f:2d:0c:3b:78:46:d3:5e:98:8b:96:1f:66:6d:c9:
                    47:a1:98:59:d6:a0:86:8c:25:89:e0:42:67:84:0b:
                    d2:1b:96:bd:d9:1f:b3:1b:46:e8:58:8f:d8:60:44:
                    be:a6:b1:ee:90:ab:fa:24:c2:02:15:e2:48:b6:02:
                    27:99:e3:3a:65:4e:c3:fb:37:f4:3e:da:da:51:d7:
                    6a:2c:7a:ce:27:39:1a:0d:c0:df:5d:4c:38:b9:05:
                    0f:f0:07:57:1f:20:5a:21:5e:c2:d0:87:f5:20:76:
                    c3:7b:9d:6a:ff:64:55:9b:01:52:28:3d:c6:28:79:
                    61:00:50:52:4e:5d:ae:8b:e2:f1:d9:1e:2e:81:ff:
                    99:96:d7:35:fa:5d:a1:2f:67:c4:11:75:c7:ab:59:
                    7e:78:f7:22:57:96:39:2b:4e:9f:e9:41:10:1c:62:
                    c3:ca:1f:ac:30:c7:90:95:6a:16:4a:1d:60:91:8d:
                    cd:ac:48:74:f5:b8:10:c4:30:fe:b0:45:23:46:99:
                    4a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:94:55:35:03:E7:B4:A1:AE:4C:B5:87:E8:2C:45:61:EF:DB:55:9D
            X509v3 Authority Key Identifier:
                keyid:B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138342e302f32322d3232203d3e20323635373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:15:4b:28:c4:e3:a9:73:fc:f6:be:4e:8f:a1:ce:21:c8:69:
         f4:e2:b2:ae:ef:74:40:b0:38:0b:55:32:0d:5a:1e:cf:f7:c5:
         ec:5b:8b:f1:9e:c2:94:af:e7:1d:61:55:47:fa:a6:b8:22:4e:
         8b:33:80:ae:b1:48:9a:2a:d6:43:f7:57:26:dd:99:3d:0f:16:
         c4:a2:8a:93:75:4b:3e:ee:97:c5:df:03:41:84:7a:b4:f3:84:
         ee:a3:5a:6a:45:a8:de:27:6c:13:b1:0d:19:a0:fa:32:3c:e3:
         1e:24:22:dd:aa:fa:03:09:ea:6b:2f:eb:cd:8a:5e:d2:b6:1d:
         ab:a1:65:9d:1c:31:55:89:58:b9:a8:d3:f6:4d:ed:b0:89:51:
         a3:d5:62:b3:2c:25:d2:48:5b:0a:c8:e4:64:9b:4c:05:ab:fb:
         b8:f7:a8:88:dd:72:db:1f:4f:3d:0c:e9:63:de:d8:ad:f0:c1:
         e9:c2:ab:28:72:92:50:14:4e:15:1a:16:66:ea:ae:94:ce:96:
         b3:9a:60:de:67:66:73:67:f8:ff:ca:3f:3c:23:9b:9d:15:25:
         ea:aa:ba:99:89:85:d5:74:7d:e2:d0:72:e7:16:82:ea:78:52:
         98:ec:31:66:d7:bc:9d:3f:e9:10:0d:8c:1b:ec:e7:e0:50:aa:
         63:9c:85:da
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUQ60o7AiA0ngDkGJBAVf4uQ/ecaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdFMUFCRUMwMTBBQkI5QUY0NjNCRjIyQjE2QzU2MUI1
QzJDNDQ0NDAeFw0yNTA1MDIyMTEyNDBaFw0yNjA1MDEyMTE3NDBaMDMxMTAvBgNV
BAMTKENCOTQ1NTM1MDNFN0I0QTFBRTRDQjU4N0U4MkM0NTYxRUZEQjU1OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMSRDUwJ4jeEMgHoGbaWb/L4o
MHRPJHZXrKOhCYjaUaIwrgYadL7ExOjhE53iRqlMlShvA3/WNLJdtJ8tDDt4RtNe
mIuWH2ZtyUehmFnWoIaMJYngQmeEC9Iblr3ZH7MbRuhYj9hgRL6mse6Qq/okwgIV
4ki2AieZ4zplTsP7N/Q+2tpR12oses4nORoNwN9dTDi5BQ/wB1cfIFohXsLQh/Ug
dsN7nWr/ZFWbAVIoPcYoeWEAUFJOXa6L4vHZHi6B/5mW1zX6XaEvZ8QRdcerWX54
9yJXljkrTp/pQRAcYsPKH6wwx5CVahZKHWCRjc2sSHT1uBDEMP6wRSNGmUoBAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUy5RVNQPntKGuTLWH6CxFYe/bVZ0wHwYDVR0j
BBgwFoAUt+Gr7AEKu5r0Y78isWxWG1wsREQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTUxMUQ2ODFFNzJGOUQ4MTRGN0JEOEZDMzlEMUZFRDdF
QTNGOTRBQjcwNEY2ODhDOEMzOEYxQTUxNzMyQkRDLzAvQjdFMUFCRUMwMTBBQkI5
QUY0NjNCRjIyQjE2QzU2MUI1QzJDNDQ0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CN0UxQUJFQzAxMEFCQjlBRjQ2
M0JGMjJCMTZDNTYxQjVDMkM0NDQ0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1MTFENjgxRTcyRjlEODE0RjdCRDhGQzM5RDFGRUQ3RUEzRjk0QUI3
MDRGNjg4QzhDMzhGMUE1MTczMkJEQy8wLzMxMzYzMDJlMzIzMzM4MmUzMTM4MzQy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzUzNzMyMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKg
7rgwDQYJKoZIhvcNAQELBQADggEBACEVSyjE46lz/Pa+To+hziHIafTisq7vdECw
OAtVMg1aHs/3xexbi/GewpSv5x1hVUf6prgiToszgK6xSJoq1kP3VybdmT0PFsSi
ipN1Sz7ul8XfA0GEerTzhO6jWmpFqN4nbBOxDRmg+jI84x4kIt2q+gMJ6msv682K
XtK2HauhZZ0cMVWJWLmo0/ZN7bCJUaPVYrMsJdJIWwrI5GSbTAWr+7j3qIjdctsf
Tz0M6WPe2K3wwenCqyhyklAUThUaFmbqrpTOlrOaYN5nZnNn+P/KPzwjm50VJeqq
upmJhdV0feLQcucWgup4UpjsMWbXvJ0/6RANjBvs5+BQqmOchdo=
-----END CERTIFICATE-----
Generated at Thu May 8 19:15:50 2025 by rpki-client