Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e33312e3135352e302f32342d3234203d3e20323635373035.roa
File:                     3138362e33312e3135352e302f32342d3234203d3e20323635373035.roa (raw, json)
Hash identifier:          5n6L3KFUWWVBQkGV1IJHTIVuMzxeqcWwfCx34t68BNk=
Subject key identifier:   83:65:D9:F4:FE:E7:EC:68:26:11:4B:47:8E:C3:89:99:44:BC:A1:DD
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       4BC33B3DB81D57E86B7B2CB588D2569F0CBE6B92
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e33312e3135352e302f32342d3234203d3e20323635373035.roa
Signing time:             Tue 04 Feb 2025 18:17:57 +0000
ROA not before:           Tue 04 Feb 2025 18:12:57 +0000
ROA not after:            Tue 03 Feb 2026 18:17:57 +0000
asID:                     265705
IP address blocks:        186.31.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c3:3b:3d:b8:1d:57:e8:6b:7b:2c:b5:88:d2:56:9f:0c:be:6b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:57 2025 GMT
            Not After : Feb  3 18:17:57 2026 GMT
        Subject: CN=8365D9F4FEE7EC6826114B478EC3899944BCA1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:da:21:87:1a:80:5a:b3:a8:31:3a:a4:77:
                    b8:6d:32:27:1e:ad:d5:2a:b9:35:b7:d4:2c:0b:4e:
                    57:0e:7c:e1:f6:b2:75:06:2c:f9:9a:9a:4a:bd:be:
                    8f:b4:b2:75:58:6c:0f:a5:ca:7c:13:cb:dc:22:03:
                    3d:9b:fb:ed:0a:39:d0:3f:de:3e:62:ea:03:f0:11:
                    af:9a:4c:8e:d7:25:93:28:6d:dc:aa:54:71:25:ae:
                    e7:0e:ae:ab:9e:d3:b5:4f:59:b8:79:c2:ef:49:0f:
                    a4:c8:f6:98:e5:0c:d2:82:e7:d7:8c:9e:c8:4c:77:
                    da:e5:7c:8c:11:39:8d:5c:88:f7:1d:73:36:07:d3:
                    96:87:ed:53:1e:0b:f9:e2:89:8a:08:66:e5:ba:87:
                    cb:e8:3f:e3:67:16:cf:65:20:da:c3:c4:0b:30:1d:
                    a8:8c:b2:72:8e:91:24:e0:67:67:22:f1:46:aa:2e:
                    46:23:36:7a:b5:c1:6c:4a:78:58:74:2a:43:31:77:
                    0d:51:f1:5d:32:e9:3c:6b:59:34:fd:da:65:b9:d4:
                    82:28:ad:d1:59:d7:ef:e1:d5:e9:e2:c7:98:3c:4c:
                    97:92:ed:cb:20:8a:c9:56:01:b5:07:86:eb:80:62:
                    05:d1:26:80:92:8a:76:0f:6a:5b:63:ef:7f:3d:c7:
                    1a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:65:D9:F4:FE:E7:EC:68:26:11:4B:47:8E:C3:89:99:44:BC:A1:DD
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e33312e3135352e302f32342d3234203d3e20323635373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.31.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:ca:03:92:a5:5a:ac:b7:37:f9:9e:2c:36:bf:00:25:c9:f7:
         cd:77:fd:7b:d3:77:14:a3:d2:88:53:6f:e0:08:d8:c4:d0:f0:
         87:c7:6e:f1:88:c7:19:ea:86:e9:a5:5c:be:e3:e7:28:c1:7c:
         d7:e3:24:04:a5:d6:b6:a2:87:cf:2f:40:1a:e4:d9:cb:0f:9a:
         58:c8:d8:2a:a7:d7:a3:d3:af:ab:56:c9:fe:3d:30:19:5b:05:
         26:5a:ee:84:a9:64:03:ed:a5:ce:e6:ab:72:ac:2c:7d:28:68:
         fc:d2:91:a8:98:1e:9f:b9:b9:51:ea:81:be:29:94:45:67:b4:
         18:dd:0f:73:96:f3:b4:29:7a:89:86:bb:da:21:f5:fa:b4:cc:
         72:57:a8:3d:76:56:d6:2b:e4:7a:3d:d9:ba:5a:fb:57:a7:8d:
         32:35:29:df:33:da:0f:38:6c:ac:89:58:16:83:74:a8:73:3c:
         6b:4a:7b:5c:f7:b5:23:95:d5:55:6f:22:9c:73:43:12:1a:52:
         6a:00:a4:45:44:12:a8:79:94:8e:22:90:3d:d6:05:79:90:c9:
         f2:e7:bd:ba:03:90:05:20:fe:f3:3d:f2:8d:49:f5:28:ff:9e:
         33:73:f1:a4:8b:22:b8:cf:47:f9:5d:48:86:cf:59:f9:a5:ff:
         2e:52:7c:ac
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUS8M7PbgdV+hreyy1iNJWnwy+a5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0N0Q0NjIzRDBENzJFMTYxOUNDNkM5NEVGODM1RTlE
M0Q1RTYyMDAeFw0yNTAyMDQxODEyNTdaFw0yNjAyMDMxODE3NTdaMDMxMTAvBgNV
BAMTKDgzNjVEOUY0RkVFN0VDNjgyNjExNEI0NzhFQzM4OTk5NDRCQ0ExREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwA9ohhxqAWrOoMTqkd7htMice
rdUquTW31CwLTlcOfOH2snUGLPmamkq9vo+0snVYbA+lynwTy9wiAz2b++0KOdA/
3j5i6gPwEa+aTI7XJZMobdyqVHElrucOrque07VPWbh5wu9JD6TI9pjlDNKC59eM
nshMd9rlfIwROY1ciPcdczYH05aH7VMeC/niiYoIZuW6h8voP+NnFs9lINrDxAsw
HaiMsnKOkSTgZ2ci8UaqLkYjNnq1wWxKeFh0KkMxdw1R8V0y6TxrWTT92mW51IIo
rdFZ1+/h1enix5g8TJeS7csgislWAbUHhuuAYgXRJoCSinYPaltj7389xxpvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUg2XZ9P7n7GgmEUtHjsOJmUS8od0wHwYDVR0j
BBgwFoAUZEfUYj0NcuFhnMbJTvg16dPV5iAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjQ4RkNGQzIzRkRGRDQyNDEwMjc3N0EwMTdENDJENjgw
NDY4MDc3MTg4QzJGMUU5QTY5MUUwMzBGNEEwQzE1LzAvNjQ0N0Q0NjIzRDBENzJF
MTYxOUNDNkM5NEVGODM1RTlEM0Q1RTYyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDQ3RDQ2MjNEMEQ3MkUxNjE5
Q0M2Qzk0RUY4MzVFOUQzRDVFNjIwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY0OEZDRkMyM0ZERkQ0MjQxMDI3NzdBMDE3RDQyRDY4MDQ2ODA3NzE4
OEMyRjFFOUE2OTFFMDMwRjRBMEMxNS8wLzMxMzgzNjJlMzMzMTJlMzEzNTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzczMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuh+b
MA0GCSqGSIb3DQEBCwUAA4IBAQBmygOSpVqstzf5niw2vwAlyffNd/1703cUo9KI
U2/gCNjE0PCHx27xiMcZ6obppVy+4+cowXzX4yQEpda2oofPL0Aa5NnLD5pYyNgq
p9ej06+rVsn+PTAZWwUmWu6EqWQD7aXO5qtyrCx9KGj80pGomB6fublR6oG+KZRF
Z7QY3Q9zlvO0KXqJhrvaIfX6tMxyV6g9dlbWK+R6Pdm6WvtXp40yNSnfM9oPOGys
iVgWg3SoczxrSntc97UjldVVbyKcc0MSGlJqAKRFRBKoeZSOIpA91gV5kMny5726
A5AFIP7zPfKNSfUo/54zc/GkiyK4z0f5XUiGz1n5pf8uUnys
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:09 2025 by rpki-client