Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e39322e302f32332d3234203d3e203134373534.roa
File:                     3138362e3135312e39322e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier:          XoLxjIAtY9ANicWQJ723m8MY7Cz+sbi8P6tvREJ7DVQ=
Subject key identifier:   D5:CE:8C:01:C3:52:0F:3B:47:04:AB:3A:EE:76:06:DB:77:94:AB:BA
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       1A845A32E55867728ADB0B1860BE3617F52D7348
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e39322e302f32332d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:12 +0000
ROA not before:           Tue 04 Feb 2025 18:50:12 +0000
ROA not after:            Tue 03 Feb 2026 18:55:12 +0000
asID:                     14754
IP address blocks:        186.151.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 07:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:84:5a:32:e5:58:67:72:8a:db:0b:18:60:be:36:17:f5:2d:73:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:12 2025 GMT
            Not After : Feb  3 18:55:12 2026 GMT
        Subject: CN=D5CE8C01C3520F3B4704AB3AEE7606DB7794ABBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:5c:aa:e2:a0:75:70:41:ff:9b:f4:f4:18:
                    1c:05:7f:02:19:1b:f1:37:7b:ec:cd:74:72:2b:43:
                    1c:59:96:4e:aa:5a:0f:a1:47:29:40:5d:c7:21:61:
                    a2:7f:c9:b3:80:a0:6a:c1:1d:93:b4:e1:91:6c:84:
                    ee:07:75:26:0f:96:f8:ce:80:db:37:ab:ff:c6:e0:
                    89:3f:2d:1c:82:a7:cc:f8:cc:68:c0:38:d4:6b:cb:
                    6d:6d:e6:c7:e3:54:38:02:0a:5a:5d:c5:81:69:d4:
                    24:46:44:14:b5:48:b8:5b:53:78:47:9a:1e:d2:ec:
                    f0:4d:24:59:ea:8e:a8:dd:c5:fc:10:34:e6:52:40:
                    50:dd:f8:b4:27:d8:b3:9e:6d:55:89:2f:ca:28:08:
                    a5:d0:4f:03:0b:8c:a2:11:24:0d:9d:c1:96:f4:8c:
                    96:9f:5e:3c:6b:1a:e3:84:5e:3c:4f:10:01:9f:3b:
                    bb:fa:98:6b:5f:6f:d5:06:67:78:0b:20:6d:81:7b:
                    6c:0b:17:35:ba:48:2c:45:3c:0e:c2:e4:81:f1:22:
                    71:11:df:60:e5:b1:5c:27:58:7a:5a:68:23:f8:55:
                    16:7d:ba:18:5a:7a:65:91:63:b3:5b:b1:c9:0a:7d:
                    59:58:cf:0d:29:c8:e7:67:0c:12:f0:84:4e:02:a8:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CE:8C:01:C3:52:0F:3B:47:04:AB:3A:EE:76:06:DB:77:94:AB:BA
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e39322e302f32332d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:2c:f8:a4:f2:8b:ee:e4:79:06:69:7d:29:4a:77:bb:b1:a8:
         ab:02:ed:72:97:f2:1c:c5:a1:ab:ae:0b:d6:d1:bd:bf:a9:9d:
         53:6c:c1:fa:f2:a6:48:ac:3a:3f:76:f8:37:a5:43:7a:49:46:
         3a:90:7e:1e:d4:31:2e:a2:c8:fc:1f:79:52:b9:b7:8b:5d:7d:
         4b:7e:26:e4:a1:25:a1:70:52:6b:f1:61:98:52:70:14:65:bc:
         d8:20:44:88:01:84:73:96:82:45:df:9e:27:64:50:b8:42:05:
         9f:c6:5e:89:ba:6d:3e:2f:ae:06:f7:ad:9b:14:e6:45:cd:07:
         68:a0:b3:57:65:49:5d:2c:d4:f9:f2:2d:c6:4a:43:34:b9:e3:
         fe:df:b6:9d:68:da:6b:73:66:7a:79:ae:8c:d1:7b:22:2f:ac:
         97:54:13:b3:13:b3:c2:7f:66:3d:4b:c1:7a:cb:79:35:b6:44:
         24:bc:29:de:18:35:4a:31:94:1c:95:70:f7:2e:62:15:df:01:
         ce:bf:76:72:bf:36:b7:94:f3:c2:8d:89:a0:ca:cb:dd:1e:4f:
         be:c4:9e:e9:43:7c:a9:4a:3a:f7:be:e7:f4:c2:b6:98:a8:ec:
         3f:9e:c7:6f:77:1d:e5:21:51:cc:67:53:ad:f2:a7:fd:fb:96:
         c2:2c:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:05:29 2025 by rpki-client