Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230322e302f32332d3234203d3e20323636373731.roa
File:                     3136302e31392e3230322e302f32332d3234203d3e20323636373731.roa (raw, json)
Hash identifier:          Y+62yYo9+pCOdnygT+mvZwDIBAp09vSQvW2/5wizcq0=
Subject key identifier:   7D:D5:A4:DE:BE:DA:B8:B8:FC:C7:F9:87:4F:B3:19:0A:04:F4:15:68
Certificate issuer:       /CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
Certificate serial:       5EC6C19FEB04014FAA1D439A2590DA1AED3D2D87
Authority key identifier: DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230322e302f32332d3234203d3e20323636373731.roa
Signing time:             Thu 08 May 2025 01:18:01 +0000
ROA not before:           Thu 08 May 2025 01:13:01 +0000
ROA not after:            Thu 07 May 2026 01:18:01 +0000
asID:                     266771
IP address blocks:        160.19.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c6:c1:9f:eb:04:01:4f:aa:1d:43:9a:25:90:da:1a:ed:3d:2d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
        Validity
            Not Before: May  8 01:13:01 2025 GMT
            Not After : May  7 01:18:01 2026 GMT
        Subject: CN=7DD5A4DEBEDAB8B8FCC7F9874FB3190A04F41568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:57:1b:db:01:f0:57:8d:fd:8e:ce:87:a3:3a:
                    f8:c3:28:71:1b:bf:cb:1d:f2:0f:25:b7:00:87:51:
                    44:de:ca:4b:59:56:91:3e:a4:5a:d1:44:24:53:fb:
                    8c:b6:b5:4f:c9:9f:5b:47:3c:f5:00:0f:52:c8:f4:
                    c2:67:cf:ab:1e:b9:6e:49:68:33:05:ef:dc:30:ca:
                    24:ca:69:bc:26:07:45:19:e5:98:96:48:43:bd:e7:
                    5f:3c:63:ad:ab:23:4f:14:31:8f:5b:47:1f:88:1c:
                    9c:9e:b2:5a:eb:e8:4c:2c:95:11:de:cd:04:0c:d6:
                    70:f3:6f:a7:6f:01:73:2d:e0:30:e3:38:8c:01:af:
                    94:e0:89:ff:6f:50:9d:ed:b7:d1:6a:7e:7f:89:af:
                    72:42:41:13:30:db:af:24:86:89:a9:d0:cb:9e:51:
                    0c:b6:55:0b:c1:11:4d:64:83:45:5d:da:67:cd:e4:
                    a1:4a:29:39:66:69:2f:4e:ff:15:c3:5c:50:dc:27:
                    08:5a:07:8e:a5:7a:dc:d6:d6:eb:87:ff:c5:b7:dc:
                    c3:1b:a4:cf:ed:3e:43:2e:07:9f:d2:1f:2d:b8:72:
                    b4:15:3f:61:c5:3f:02:a1:b5:01:99:2f:5e:8b:bb:
                    e5:9b:32:62:1c:92:9d:97:80:cb:ee:ca:29:5b:0d:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D5:A4:DE:BE:DA:B8:B8:FC:C7:F9:87:4F:B3:19:0A:04:F4:15:68
            X509v3 Authority Key Identifier:
                keyid:DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230322e302f32332d3234203d3e20323636373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:1b:0c:22:3a:f2:08:3f:49:23:6c:5f:cc:75:3d:51:0e:7e:
         49:2c:84:98:68:94:25:88:58:83:4e:00:8d:cf:30:83:62:6f:
         9c:6f:f5:98:a5:37:69:65:52:39:ad:9d:a9:0e:65:18:9e:12:
         2f:01:cc:b1:f6:34:e4:f7:83:82:fa:75:b8:9c:e2:fa:88:75:
         ca:bb:7f:89:7c:dd:ba:7d:0e:f1:00:49:76:d1:02:60:d4:9f:
         83:f5:63:3b:3b:de:4c:91:4a:42:39:31:bb:f2:22:42:76:48:
         b8:5f:75:d7:57:02:38:af:c1:a2:e9:3c:ec:bc:22:ac:f7:35:
         ca:5b:c4:e4:7a:96:e8:ba:f7:4c:a5:ec:58:ae:65:5b:40:07:
         2c:4f:22:0d:34:d7:6c:03:73:cd:97:53:6c:f9:07:4e:29:0a:
         0d:a9:84:b2:f1:a5:00:c7:2f:a8:b0:ab:12:e0:b3:31:f2:b3:
         4b:83:d2:94:4c:f5:e9:2f:23:70:e0:66:8f:d0:dd:bc:99:b8:
         c4:3b:17:1a:0b:7f:02:33:31:69:03:3f:18:1c:6c:12:b4:f3:
         dd:e1:1b:b5:e8:a1:b5:68:87:35:9a:16:93:52:6f:3e:40:5b:
         46:16:31:bc:e7:8c:6f:40:cf:7c:7e:9e:e4:f3:72:3f:4a:1d:
         f2:85:ba:d7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXsbBn+sEAU+qHUOaJZDaGu09LYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMyNDI3NEU1QzhFOTIzNDJFMTAxRDA3MUZGREZBNDVF
QjczNDY0RDAeFw0yNTA1MDgwMTEzMDFaFw0yNjA1MDcwMTE4MDFaMDMxMTAvBgNV
BAMTKDdERDVBNERFQkVEQUI4QjhGQ0M3Rjk4NzRGQjMxOTBBMDRGNDE1NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbVxvbAfBXjf2OzoejOvjDKHEb
v8sd8g8ltwCHUUTeyktZVpE+pFrRRCRT+4y2tU/Jn1tHPPUAD1LI9MJnz6seuW5J
aDMF79wwyiTKabwmB0UZ5ZiWSEO95188Y62rI08UMY9bRx+IHJyeslrr6EwslRHe
zQQM1nDzb6dvAXMt4DDjOIwBr5Tgif9vUJ3tt9Fqfn+Jr3JCQRMw268khomp0Mue
UQy2VQvBEU1kg0Vd2mfN5KFKKTlmaS9O/xXDXFDcJwhaB46letzW1uuH/8W33MMb
pM/tPkMuB5/SHy24crQVP2HFPwKhtQGZL16Lu+WbMmIckp2XgMvuyilbDeefAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfdWk3r7auLj8x/mHT7MZCgT0FWgwHwYDVR0j
BBgwFoAU3CQnTlyOkjQuEB0HH/36RetzRk0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84N0U1MTUyQjQwQ0YzOTQxMjJGQUFCQzcwNzYwMUM0MjY4
MTlDNzE4M0Q1RTQyNUI0RTkyRTkyODM4OEU5NTJBLzAvREMyNDI3NEU1QzhFOTIz
NDJFMTAxRDA3MUZGREZBNDVFQjczNDY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQzI0Mjc0RTVDOEU5MjM0MkUx
MDFEMDcxRkZERkE0NUVCNzM0NjRELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODdFNTE1MkI0MENGMzk0MTIyRkFBQkM3MDc2MDFDNDI2ODE5QzcxODNE
NUU0MjVCNEU5MkU5MjgzODhFOTUyQS8wLzMxMzYzMDJlMzEzOTJlMzIzMDMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM2MzczNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBPK
MA0GCSqGSIb3DQEBCwUAA4IBAQByGwwiOvIIP0kjbF/MdT1RDn5JLISYaJQliFiD
TgCNzzCDYm+cb/WYpTdpZVI5rZ2pDmUYnhIvAcyx9jTk94OC+nW4nOL6iHXKu3+J
fN26fQ7xAEl20QJg1J+D9WM7O95MkUpCOTG78iJCdki4X3XXVwI4r8Gi6TzsvCKs
9zXKW8TkepbouvdMpexYrmVbQAcsTyINNNdsA3PNl1Ns+QdOKQoNqYSy8aUAxy+o
sKsS4LMx8rNLg9KUTPXpLyNw4GaP0N28mbjEOxcaC38CMzFpAz8YHGwStPPd4Ru1
6KG1aIc1mhaTUm8+QFtGFjG854xvQM98fp7k83I/Sh3yhbrX
-----END CERTIFICATE-----
Generated at Sat May 17 13:28:24 2025 by rpki-client