Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3130342e302f32322d3234203d3e203238353339.roa
File:                     3230312e3135392e3130342e302f32322d3234203d3e203238353339.roa (raw, json)
Hash identifier:          +DeE0KoMDe6lLI30YbAdUzZDZvKQlp8Z+6VPgYJgzT0=
Subject key identifier:   31:0C:78:81:5B:FD:EF:7F:96:51:2C:06:DB:49:0A:94:55:59:0A:87
Certificate issuer:       /CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
Certificate serial:       709E2BF35BB372F7DB3B129C59DEE81B11EC7BD5
Authority key identifier: 51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3130342e302f32322d3234203d3e203238353339.roa
Signing time:             Mon 19 May 2025 20:19:39 +0000
ROA not before:           Mon 19 May 2025 20:14:39 +0000
ROA not after:            Mon 18 May 2026 20:19:39 +0000
asID:                     28539
IP address blocks:        201.159.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9e:2b:f3:5b:b3:72:f7:db:3b:12:9c:59:de:e8:1b:11:ec:7b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
        Validity
            Not Before: May 19 20:14:39 2025 GMT
            Not After : May 18 20:19:39 2026 GMT
        Subject: CN=310C78815BFDEF7F96512C06DB490A9455590A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:60:cf:17:be:e8:4a:e3:7e:a8:28:9f:6b:
                    36:1d:6e:db:8f:70:6e:17:d7:9c:93:4e:7e:f2:ab:
                    55:f9:1c:47:18:81:d4:4c:4e:c8:03:fa:ed:72:a2:
                    c7:7e:c8:3b:04:4c:5a:80:88:53:d5:23:4c:25:97:
                    db:e6:a4:10:cf:56:f2:10:bb:02:31:6e:26:06:51:
                    a0:fa:5e:d1:f5:f9:ca:b5:4d:c5:4b:3d:36:ce:08:
                    84:0d:38:fb:d5:c4:c3:0a:1a:76:b5:66:bd:c3:81:
                    91:68:62:0d:95:31:5d:17:a8:f7:1a:9d:0c:b5:32:
                    94:35:46:56:57:57:94:ae:39:19:66:68:8a:80:85:
                    00:e6:5c:5c:67:fe:dc:73:0e:e9:66:6c:eb:cb:75:
                    d4:7e:a0:7d:d0:d2:11:67:9a:45:e0:01:b2:7a:d7:
                    2f:1e:02:ef:48:84:c3:65:a0:93:b5:3d:9b:b2:9f:
                    b7:64:05:cc:68:1f:c4:12:9b:95:16:97:d6:d1:78:
                    16:90:69:a7:a1:21:b4:e0:c5:a0:c6:2f:1b:a8:d3:
                    ae:44:41:d1:8c:f8:f7:42:32:94:fc:cb:fc:68:09:
                    9e:d8:3f:87:e7:50:c6:fc:c1:a0:3f:7b:67:34:44:
                    d1:55:7e:7a:c3:2c:b9:c6:97:c5:e6:f4:84:e8:3f:
                    58:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0C:78:81:5B:FD:EF:7F:96:51:2C:06:DB:49:0A:94:55:59:0A:87
            X509v3 Authority Key Identifier:
                keyid:51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3130342e302f32322d3234203d3e203238353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:8e:e5:ad:7c:e2:42:9f:61:20:d0:22:c2:4a:60:e1:01:57:
         cc:9f:6b:03:41:5f:8d:a6:eb:85:ac:5c:9e:57:a6:84:f5:68:
         12:e1:9c:87:66:ec:38:40:17:c8:d7:91:09:eb:a8:ba:6a:aa:
         23:7d:fa:13:5d:72:25:e3:8e:3f:e2:c3:7a:9b:07:0c:14:24:
         60:21:03:11:51:05:18:ad:bc:17:8f:e4:c7:05:ab:d5:24:7d:
         f2:b8:f8:be:f0:1c:fc:cd:08:ea:4d:eb:22:87:af:68:98:64:
         41:95:6d:56:6e:2d:11:2d:74:39:7d:4c:c4:76:b4:47:be:d4:
         03:3b:ee:bf:d3:3c:00:e3:9f:77:7f:f5:88:29:2a:0c:32:66:
         ee:8b:3c:db:96:9b:67:d8:4c:ea:e2:1a:54:6d:a6:83:28:b3:
         b3:7d:a9:f9:ea:11:9a:84:70:04:9d:87:a3:29:45:30:5f:cc:
         22:cf:a8:79:21:b6:fa:2f:2c:86:31:37:31:80:db:1d:49:0f:
         eb:b6:2a:67:7b:e8:a8:61:c0:90:f1:0b:5a:6c:eb:75:d1:f1:
         5e:6a:54:8b:c4:29:8f:48:72:36:5b:da:0b:69:50:98:53:45:
         d6:a7:2e:a2:fa:28:57:cf:7f:f3:a4:f7:66:b3:2a:00:b4:b6:
         ca:c2:1f:b1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcJ4r81uzcvfbOxKcWd7oGxHse9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEzMENDQ0FCNUMxODFDQzkzNTVEODkzODE4ODQ1MTVC
ODVGNEJBNjAeFw0yNTA1MTkyMDE0MzlaFw0yNjA1MTgyMDE5MzlaMDMxMTAvBgNV
BAMTKDMxMEM3ODgxNUJGREVGN0Y5NjUxMkMwNkRCNDkwQTk0NTU1OTBBODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAM2DPF77oSuN+qCifazYdbtuP
cG4X15yTTn7yq1X5HEcYgdRMTsgD+u1yosd+yDsETFqAiFPVI0wll9vmpBDPVvIQ
uwIxbiYGUaD6XtH1+cq1TcVLPTbOCIQNOPvVxMMKGna1Zr3DgZFoYg2VMV0XqPca
nQy1MpQ1RlZXV5SuORlmaIqAhQDmXFxn/txzDulmbOvLddR+oH3Q0hFnmkXgAbJ6
1y8eAu9IhMNloJO1PZuyn7dkBcxoH8QSm5UWl9bReBaQaaehIbTgxaDGLxuo065E
QdGM+PdCMpT8y/xoCZ7YP4fnUMb8waA/e2c0RNFVfnrDLLnGl8Xm9IToP1gLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUMQx4gVv973+WUSwG20kKlFVZCocwHwYDVR0j
BBgwFoAUUTDMyrXBgcyTVdiTgYhFFbhfS6YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQzQwRjVDNzAyMTUxODc5NzBCMUY5MDQ1NDk3OUIzNzlC
ODAzMTA4Nzg4NTI2MkE3MDUwQUVFNjdCNEE0QUUyLzAvNTEzMENDQ0FCNUMxODFD
QzkzNTVEODkzODE4ODQ1MTVCODVGNEJBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTMwQ0NDQUI1QzE4MUNDOTM1
NUQ4OTM4MTg4NDUxNUI4NUY0QkE2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkM0MEY1QzcwMjE1MTg3OTcwQjFGOTA0NTQ5NzlCMzc5QjgwMzEwODc4
ODUyNjJBNzA1MEFFRTY3QjRBNEFFMi8wLzMyMzAzMTJlMzEzNTM5MmUzMTMwMzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzUzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyZ9o
MA0GCSqGSIb3DQEBCwUAA4IBAQANjuWtfOJCn2Eg0CLCSmDhAVfMn2sDQV+NpuuF
rFyeV6aE9WgS4ZyHZuw4QBfI15EJ66i6aqojffoTXXIl444/4sN6mwcMFCRgIQMR
UQUYrbwXj+THBavVJH3yuPi+8Bz8zQjqTesih69omGRBlW1Wbi0RLXQ5fUzEdrRH
vtQDO+6/0zwA4593f/WIKSoMMmbuizzblptn2Ezq4hpUbaaDKLOzfan56hGahHAE
nYejKUUwX8wiz6h5Ibb6LyyGMTcxgNsdSQ/rtipne+ioYcCQ8QtabOt10fFealSL
xCmPSHI2W9oLaVCYU0XWpy6i+ihXz3/zpPdmsyoAtLbKwh+x
-----END CERTIFICATE-----
Generated at Sun Jun 22 22:34:32 2025 by rpki-client