Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3234332e302f32342d3234203d3e203532333437.roa
File:                     3138362e3137372e3234332e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          E8OpXjN9Pz+GY/8kW5hjUjpLR06VVRnlF1mAh8w7doY=
Subject key identifier:   4F:8C:45:98:E3:3D:B3:D8:43:EA:3E:9C:8F:AD:DF:12:A4:52:40:21
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       6BD79C576F15841B3C686E0136434AB9991159F7
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3234332e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 04 Feb 2025 18:20:08 +0000
ROA not before:           Tue 04 Feb 2025 18:15:08 +0000
ROA not after:            Tue 03 Feb 2026 18:20:08 +0000
asID:                     52347
IP address blocks:        186.177.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d7:9c:57:6f:15:84:1b:3c:68:6e:01:36:43:4a:b9:99:11:59:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Feb  4 18:15:08 2025 GMT
            Not After : Feb  3 18:20:08 2026 GMT
        Subject: CN=4F8C4598E33DB3D843EA3E9C8FADDF12A4524021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:70:97:cc:fe:56:ca:14:89:8d:e0:b3:67:
                    fd:a1:f1:92:b0:44:22:cc:5f:f1:38:9e:3e:3c:b9:
                    27:bd:bc:78:db:ea:e6:6d:cc:7f:1c:e1:d7:89:76:
                    41:3e:53:ca:39:c8:08:78:39:56:8e:74:dd:b0:4e:
                    bd:1d:9c:75:35:3f:f0:82:bc:9f:9b:23:10:21:1b:
                    53:e5:bf:34:63:f9:1c:8e:f0:a4:aa:c5:2c:77:fa:
                    23:f3:ff:a6:60:e4:ef:a7:f7:a0:1b:4e:28:cf:f2:
                    c3:c8:32:09:36:af:c5:7b:46:ee:c6:95:62:55:d3:
                    e3:e0:52:02:26:a1:29:30:46:e9:dd:7f:59:76:95:
                    7b:da:46:bd:9f:6b:aa:18:33:27:89:d6:b6:75:98:
                    3f:1a:a4:a1:87:37:3f:01:82:e4:46:2d:6e:f9:99:
                    d8:97:4f:9d:74:fa:b3:8f:6e:f5:70:63:96:bb:14:
                    99:7a:69:ce:dc:6f:35:c4:5a:f6:79:d2:35:62:b1:
                    e2:24:b2:4d:fd:0d:2c:13:34:6e:dd:fd:ca:f9:37:
                    9c:e8:09:18:68:8f:7f:9e:f6:80:1f:39:6c:ed:a2:
                    63:00:35:0c:e7:2f:42:0a:2d:de:3f:72:26:79:14:
                    e2:a2:cc:79:02:95:3d:4d:91:94:db:2b:6b:5e:13:
                    8f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8C:45:98:E3:3D:B3:D8:43:EA:3E:9C:8F:AD:DF:12:A4:52:40:21
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3234332e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:97:ad:7c:48:d4:0c:1c:49:42:4e:b0:d9:39:c8:7f:0b:07:
         47:d4:81:51:75:c5:0b:f5:30:7d:8b:31:8e:4e:d2:3a:37:80:
         8e:6f:51:c9:f1:58:9a:42:78:c5:41:3e:88:bc:38:17:52:54:
         23:88:6b:a2:7a:3c:2e:e6:2a:42:f1:8c:aa:61:fc:21:89:1e:
         c5:30:36:80:e8:e0:43:0a:31:31:ed:67:f3:22:dd:af:83:20:
         da:ce:86:f7:21:e8:c9:59:28:ef:95:f7:5b:b4:5e:7c:29:9c:
         bc:a0:7b:f0:41:2a:e6:f5:94:05:cf:09:15:35:27:db:75:99:
         16:75:5a:ca:68:f1:3e:84:a6:af:55:cf:99:72:b0:8a:1c:da:
         7a:ad:87:9d:05:3f:a7:26:cf:e4:63:68:c0:2f:a7:49:1c:0d:
         27:3b:09:29:65:af:ef:78:85:5e:d5:71:27:df:cc:f6:47:a1:
         17:51:2e:c0:26:07:83:e0:9e:f0:62:3d:00:31:40:89:70:96:
         8b:1a:91:2f:ef:af:a8:38:5c:71:fc:5b:49:e4:c6:81:5b:67:
         43:90:cc:3c:2a:c9:15:f4:38:fc:b8:46:15:98:e8:29:be:43:
         39:08:d3:9f:28:92:90:2a:94:a3:de:b2:d9:5b:ec:1e:37:db:
         d8:4b:0d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:59 2025 by rpki-client