Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3235312e302f32342d3234203d3e20323633373538.roa
File:                     3136312e3233382e3235312e302f32342d3234203d3e20323633373538.roa (raw, json)
Hash identifier:          C2aKorSPpY2M46DLh6XYZtdu5ERq48ju03s9BeSLKos=
Subject key identifier:   33:88:C2:C5:14:E2:72:33:7A:FF:1E:0D:4F:6A:48:9A:AD:11:CF:E6
Certificate issuer:       /CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
Certificate serial:       4780F73D891B954A6DA74494B876B7EFB5A227B9
Authority key identifier: 6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3235312e302f32342d3234203d3e20323633373538.roa
Signing time:             Fri 13 Jun 2025 22:22:13 +0000
ROA not before:           Fri 13 Jun 2025 22:17:13 +0000
ROA not after:            Fri 12 Jun 2026 22:22:13 +0000
asID:                     263758
IP address blocks:        161.238.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:80:f7:3d:89:1b:95:4a:6d:a7:44:94:b8:76:b7:ef:b5:a2:27:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
        Validity
            Not Before: Jun 13 22:17:13 2025 GMT
            Not After : Jun 12 22:22:13 2026 GMT
        Subject: CN=3388C2C514E272337AFF1E0D4F6A489AAD11CFE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:e0:c7:ca:1a:5a:c1:53:62:6c:1c:4e:df:
                    50:1b:9b:cd:d7:b9:ee:f7:33:d1:a2:d2:f6:98:73:
                    fe:71:f7:ee:34:3b:3d:d4:61:b0:3a:08:22:ff:e0:
                    03:38:93:ae:29:90:98:26:06:ef:75:01:b9:55:98:
                    77:cd:79:48:69:b7:e0:66:b6:04:51:30:ed:42:47:
                    7e:c4:40:73:c9:48:9a:f1:28:65:70:78:93:ff:5c:
                    87:fe:1f:01:0c:9f:15:e2:61:88:8e:9f:bc:57:3a:
                    c6:f6:ed:db:98:a5:e1:0c:50:a0:0d:1d:60:be:dd:
                    37:a0:1a:10:ec:48:83:c6:bf:1d:34:e5:79:bd:44:
                    56:81:ac:50:0d:ea:91:78:c1:6c:27:35:e9:e1:8e:
                    1b:81:34:c4:a2:c3:4e:69:f9:18:d6:ac:91:ef:d0:
                    ed:27:11:53:01:b8:8a:69:45:f4:42:1a:df:8b:5f:
                    71:1c:44:65:57:16:f3:11:72:6e:c8:99:8f:d8:33:
                    51:b9:b9:49:09:8b:44:49:19:47:fa:62:75:1a:e0:
                    39:3e:17:0e:d7:18:b3:fa:0b:51:84:ea:07:9c:40:
                    ce:a5:aa:74:3c:db:e3:09:d6:bd:c1:29:4a:17:3b:
                    c0:3e:4e:ec:fa:22:20:80:1b:d0:3e:4f:e4:f3:02:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:88:C2:C5:14:E2:72:33:7A:FF:1E:0D:4F:6A:48:9A:AD:11:CF:E6
            X509v3 Authority Key Identifier:
                keyid:6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3235312e302f32342d3234203d3e20323633373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.238.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:3f:2a:a9:bd:23:a1:1c:f0:a0:bd:08:8a:3c:4d:29:b9:
         cc:c9:45:5f:20:c1:6a:1d:4a:86:d1:a5:0e:15:ee:75:d3:ba:
         1a:b0:c1:52:3d:32:57:96:3a:71:39:92:55:8a:01:bb:3f:aa:
         f1:2b:de:36:ea:de:c1:09:c1:25:31:2d:50:84:d6:a5:c5:12:
         97:fe:b4:c6:53:33:df:12:56:be:7d:9c:80:ff:72:61:53:6a:
         bd:83:df:25:30:c1:e4:d1:5b:41:09:dc:aa:67:ee:f1:87:26:
         0a:77:b1:ec:54:75:1f:4e:f8:fd:6d:15:7b:bc:26:e8:51:68:
         b1:15:e0:b1:e8:12:a4:f7:37:72:b9:b5:2c:99:98:6d:64:b4:
         3e:fe:7f:bf:d8:36:bb:0a:a7:83:28:02:0e:e8:42:69:e3:ba:
         b4:bd:0a:a7:cd:40:96:98:3f:2c:8e:5d:ad:d3:04:60:d3:db:
         1c:e3:dc:8a:f9:0f:51:5f:48:7e:57:f2:2b:82:d1:f7:f0:f4:
         e3:14:45:b8:c7:a1:6e:e9:29:21:a3:40:61:40:18:aa:d3:10:
         38:40:8f:83:b6:52:32:78:92:47:0d:44:ef:28:25:c4:8c:09:
         89:ba:77:e1:a4:3e:f4:af:d4:4d:f6:df:bf:6d:62:dd:b0:fe:
         25:04:c7:7e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUR4D3PYkblUptp0SUuHa377WiJ7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFGMjIxMEVDNzk4QTRERDQ0RDFBOEE3RjU1RDEzNUNE
MTM0ODNFNTAeFw0yNTA2MTMyMjE3MTNaFw0yNjA2MTIyMjIyMTNaMDMxMTAvBgNV
BAMTKDMzODhDMkM1MTRFMjcyMzM3QUZGMUUwRDRGNkE0ODlBQUQxMUNGRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwreDHyhpawVNibBxO31Abm83X
ue73M9Gi0vaYc/5x9+40Oz3UYbA6CCL/4AM4k64pkJgmBu91AblVmHfNeUhpt+Bm
tgRRMO1CR37EQHPJSJrxKGVweJP/XIf+HwEMnxXiYYiOn7xXOsb27duYpeEMUKAN
HWC+3TegGhDsSIPGvx005Xm9RFaBrFAN6pF4wWwnNenhjhuBNMSiw05p+RjWrJHv
0O0nEVMBuIppRfRCGt+LX3EcRGVXFvMRcm7ImY/YM1G5uUkJi0RJGUf6YnUa4Dk+
Fw7XGLP6C1GE6gecQM6lqnQ82+MJ1r3BKUoXO8A+Tuz6IiCAG9A+T+TzAnELAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUM4jCxRTicjN6/x4NT2pImq0Rz+YwHwYDVR0j
BBgwFoAUavIhDseYpN1E0ain9V0TXNE0g+UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODg4RjA2MzVCRkNEODkwRTY5NTM4QzRGNDQ4MDkzM0Iw
NDk0MUIyMUUxRDg1QjE1NkFGMEI1Q0Q2ODVDRkUxLzAvNkFGMjIxMEVDNzk4QTRE
RDQ0RDFBOEE3RjU1RDEzNUNEMTM0ODNFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QUYyMjEwRUM3OThBNERENDRE
MUE4QTdGNTVEMTM1Q0QxMzQ4M0U1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg4OEYwNjM1QkZDRDg5MEU2OTUzOEM0RjQ0ODA5MzNCMDQ5NDFCMjFF
MUQ4NUIxNTZBRjBCNUNENjg1Q0ZFMS8wLzMxMzYzMTJlMzIzMzM4MmUzMjM1MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNzM1Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACh
7vswDQYJKoZIhvcNAQELBQADggEBAFe7PyqpvSOhHPCgvQiKPE0puczJRV8gwWod
SobRpQ4V7nXTuhqwwVI9MleWOnE5klWKAbs/qvEr3jbq3sEJwSUxLVCE1qXFEpf+
tMZTM98SVr59nID/cmFTar2D3yUwweTRW0EJ3Kpn7vGHJgp3sexUdR9O+P1tFXu8
JuhRaLEV4LHoEqT3N3K5tSyZmG1ktD7+f7/YNrsKp4MoAg7oQmnjurS9CqfNQJaY
PyyOXa3TBGDT2xzj3Ir5D1FfSH5X8iuC0ffw9OMURbjHoW7pKSGjQGFAGKrTEDhA
j4O2UjJ4kkcNRO8oJcSMCYm6d+GkPvSv1E32379tYt2w/iUEx34=
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:59:53 2025 by rpki-client