Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e38382e302f32322d3234203d3e203134373534.roa
File:                     3138362e3135312e38382e302f32322d3234203d3e203134373534.roa (raw, json)
Hash identifier:          ZLBdpyxHKGmCIyHcKd4lzSyTpkNoy2cJACd4gyRgNxU=
Subject key identifier:   8C:C7:64:20:FC:AD:3B:9A:52:D2:69:F5:C6:39:B1:F2:A3:53:87:91
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       3E8A54D9616650874B8C4FB44C79A2D13D344AED
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e38382e302f32322d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:14 +0000
ROA not before:           Tue 04 Feb 2025 18:50:14 +0000
ROA not after:            Tue 03 Feb 2026 18:55:14 +0000
asID:                     14754
IP address blocks:        186.151.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 17:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8a:54:d9:61:66:50:87:4b:8c:4f:b4:4c:79:a2:d1:3d:34:4a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:14 2025 GMT
            Not After : Feb  3 18:55:14 2026 GMT
        Subject: CN=8CC76420FCAD3B9A52D269F5C639B1F2A3538791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:ba:89:bb:e0:c8:78:e0:4c:10:b3:22:9c:
                    a9:7b:11:bf:28:37:e1:6b:c3:06:6a:d4:b9:08:60:
                    08:7c:f5:d7:34:ac:8c:c4:ba:ce:72:df:4b:ff:99:
                    f6:44:eb:59:1f:21:45:91:52:a3:e4:ff:bb:25:f8:
                    82:bb:0a:22:78:ea:06:bb:1e:6d:52:44:59:69:14:
                    e6:f7:5c:b1:ed:73:6d:73:98:7d:07:07:5d:b9:ae:
                    74:23:5f:bc:c2:3e:a9:8b:81:98:7b:8d:95:94:b6:
                    4c:b9:53:a6:cc:e1:c5:f2:41:a2:89:9b:83:d1:13:
                    62:86:f3:ae:87:0a:1a:76:1e:c4:4c:0a:f8:b9:7b:
                    3c:0d:ab:d4:38:3e:e2:84:45:ac:79:0f:2b:b4:0d:
                    50:1b:9c:fa:e3:99:42:37:9c:40:bd:82:75:2d:63:
                    b5:31:cd:3b:e6:76:c2:88:6c:f8:43:61:2d:6e:07:
                    a7:d3:0e:e1:51:8e:21:ab:6f:94:9c:33:40:fe:9c:
                    df:b1:ae:12:6c:58:95:2e:17:92:22:61:16:fb:f1:
                    f0:85:55:5c:cc:fc:b0:ad:42:f0:53:b6:d0:0a:ad:
                    fc:a7:29:9a:85:62:1c:a1:3b:fc:80:a6:83:cd:9e:
                    b3:5c:98:36:67:53:be:83:b0:ce:c0:84:12:9b:53:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C7:64:20:FC:AD:3B:9A:52:D2:69:F5:C6:39:B1:F2:A3:53:87:91
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e38382e302f32322d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:ad:76:b8:63:43:c7:0e:63:b8:d8:f4:75:83:f0:d8:cb:23:
         b8:06:c8:40:20:60:6c:5e:ac:f0:94:90:e1:a2:05:20:ec:a5:
         ed:c5:85:ee:83:31:7a:4c:d3:ee:4b:39:7e:c3:03:7e:bb:d9:
         9c:c9:43:a6:76:7d:39:c7:0f:e7:09:d8:52:2a:3a:05:68:83:
         32:47:50:2d:34:56:95:a3:1c:b3:27:db:75:c1:75:2d:7d:9c:
         0e:c2:e4:57:93:b8:01:59:a2:49:7c:98:2b:4d:d0:b6:62:54:
         ba:23:de:b1:7d:02:92:b2:63:34:70:80:53:b9:8b:96:5b:68:
         57:38:be:08:35:65:39:88:c1:a6:a9:82:cc:62:3c:0c:4e:c5:
         c4:aa:04:d1:7e:3c:89:40:0d:44:62:0f:2a:15:54:2b:02:35:
         75:19:c7:93:c5:6e:a9:0a:92:53:ce:06:1f:61:03:6a:2f:84:
         cd:a4:41:bd:12:2a:3a:3c:81:36:12:8a:77:40:d4:2f:4e:ff:
         ec:02:a5:4d:04:2c:50:e8:e3:52:3a:a3:43:1d:29:be:40:2c:
         cd:99:fd:d0:b4:17:1f:30:db:32:3a:8a:40:0d:d6:0f:82:f8:
         0a:8c:9d:bb:1e:28:20:5c:88:52:b8:0f:33:b7:e9:bc:80:b4:
         01:13:e3:db
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPopU2WFmUIdLjE+0THmi0T00Su0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNTAyMDQxODUwMTRaFw0yNjAyMDMxODU1MTRaMDMxMTAvBgNV
BAMTKDhDQzc2NDIwRkNBRDNCOUE1MkQyNjlGNUM2MzlCMUYyQTM1Mzg3OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBLqJu+DIeOBMELMinKl7Eb8o
N+FrwwZq1LkIYAh89dc0rIzEus5y30v/mfZE61kfIUWRUqPk/7sl+IK7CiJ46ga7
Hm1SRFlpFOb3XLHtc21zmH0HB125rnQjX7zCPqmLgZh7jZWUtky5U6bM4cXyQaKJ
m4PRE2KG866HChp2HsRMCvi5ezwNq9Q4PuKERax5Dyu0DVAbnPrjmUI3nEC9gnUt
Y7UxzTvmdsKIbPhDYS1uB6fTDuFRjiGrb5ScM0D+nN+xrhJsWJUuF5IiYRb78fCF
VVzM/LCtQvBTttAKrfynKZqFYhyhO/yApoPNnrNcmDZnU76DsM7AhBKbU4wDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUjMdkIPytO5pS0mn1xjmx8qNTh5EwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMxMzgzNjJlMzEzNTMxMmUzODM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNDM3MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArqXWDAN
BgkqhkiG9w0BAQsFAAOCAQEAKK12uGNDxw5juNj0dYPw2MsjuAbIQCBgbF6s8JSQ
4aIFIOyl7cWF7oMxekzT7ks5fsMDfrvZnMlDpnZ9OccP5wnYUio6BWiDMkdQLTRW
laMcsyfbdcF1LX2cDsLkV5O4AVmiSXyYK03QtmJUuiPesX0CkrJjNHCAU7mLllto
Vzi+CDVlOYjBpqmCzGI8DE7FxKoE0X48iUANRGIPKhVUKwI1dRnHk8VuqQqSU84G
H2EDai+EzaRBvRIqOjyBNhKKd0DUL07/7AKlTQQsUOjjUjqjQx0pvkAszZn90LQX
HzDbMjqKQA3WD4L4Coydux4oIFyIUrgPM7fpvIC0ARPj2w==
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:33:01 2025 by rpki-client