Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa
File:                     3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa (raw, json)
Hash identifier:          o++tbVYNGfXTgG2ZM4JDkbYUOlez3yG+fLJv7M6G6mk=
Subject key identifier:   9B:7F:3C:0C:68:AA:B5:B4:23:F9:D4:B3:CD:70:30:AB:2C:0D:D3:A8
Certificate issuer:       /CN=CF2E2C753A200707CD61AACD7110A7372C505538
Certificate serial:       43F5AF561AB29E3CE84B2F4523C2969BA996075F
Authority key identifier: CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa
Signing time:             Fri 14 Mar 2025 15:11:51 +0000
ROA not before:           Fri 14 Mar 2025 15:06:51 +0000
ROA not after:            Fri 13 Mar 2026 15:11:51 +0000
asID:                     263726
IP address blocks:        186.189.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl
                          rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f5:af:56:1a:b2:9e:3c:e8:4b:2f:45:23:c2:96:9b:a9:96:07:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF2E2C753A200707CD61AACD7110A7372C505538
        Validity
            Not Before: Mar 14 15:06:51 2025 GMT
            Not After : Mar 13 15:11:51 2026 GMT
        Subject: CN=9B7F3C0C68AAB5B423F9D4B3CD7030AB2C0DD3A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:f7:19:3f:f9:4a:9a:07:a6:44:f8:ff:e6:
                    41:fe:92:a4:f8:5e:e5:98:ff:84:3c:70:2c:43:2a:
                    21:eb:90:7a:6a:57:8f:5e:84:04:0d:61:6b:3b:e7:
                    8e:69:0a:ba:22:ac:93:a2:96:76:3e:8e:78:bd:08:
                    85:9b:27:69:7c:0c:0e:6d:08:85:85:41:a4:a8:29:
                    4a:52:b4:e2:ca:12:d7:f1:60:7b:a6:84:6b:74:97:
                    f3:64:77:84:2c:fd:79:a4:1b:a4:a6:bc:51:ad:28:
                    94:6e:f5:47:12:d9:90:78:3c:18:a1:b7:d2:a3:e6:
                    b5:5a:7d:a7:3e:36:db:9d:d1:76:1e:b4:51:93:9f:
                    63:c2:dd:b4:e6:13:19:a0:ef:42:f1:72:cb:97:96:
                    54:3b:32:17:e8:ea:22:8a:81:dc:27:8c:37:3e:d9:
                    6c:f4:96:e5:ed:a5:57:7e:fa:3d:40:ef:c2:34:f8:
                    0b:1b:ac:c7:8f:9a:74:e1:ef:c8:da:7d:a1:3e:74:
                    3c:de:a0:b0:6b:0f:a1:0b:77:22:01:8a:57:28:47:
                    c5:6e:9e:40:2f:84:bd:1d:d5:b8:4c:34:33:4a:17:
                    2f:a2:e6:f2:bf:84:cd:1e:ba:68:3a:0f:2b:80:18:
                    1a:cc:4b:ef:d6:6f:96:86:4c:a6:68:43:23:01:61:
                    66:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7F:3C:0C:68:AA:B5:B4:23:F9:D4:B3:CD:70:30:AB:2C:0D:D3:A8
            X509v3 Authority Key Identifier:
                keyid:CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:4d:5a:c7:bc:14:0f:27:d8:13:4d:8b:f6:29:58:56:0b:19:
         3b:57:4b:49:7a:99:96:32:0a:51:26:1d:1e:03:f0:45:6a:9a:
         4a:e2:d5:7d:d5:81:d0:a3:5a:d1:30:5c:4b:05:a1:d6:ff:6f:
         e1:72:dc:c7:2f:7f:bc:4c:d6:4f:1f:8f:50:3a:55:57:11:39:
         fd:d7:9e:d1:b7:32:64:13:fd:58:90:77:6c:dd:de:8f:b5:26:
         df:8b:df:37:95:cf:b0:4a:a5:42:b7:b7:48:23:18:48:7f:cc:
         b2:51:9d:9b:5c:16:14:d7:97:c2:db:fb:9c:3f:b9:81:b0:87:
         e5:c9:5c:04:37:f0:97:21:a4:83:53:b4:c3:a8:24:df:82:f2:
         eb:e3:48:a3:86:41:dd:d4:4a:cf:8e:15:e5:c5:d6:db:2d:bd:
         f5:09:7b:fb:17:86:1c:c5:a6:82:80:63:19:8c:91:89:0e:04:
         f1:81:cc:57:0b:a1:af:07:65:14:27:81:d4:74:e6:98:cd:ee:
         92:ed:c3:d0:b6:1d:6f:ba:2b:df:85:40:bb:7d:5b:a3:dd:eb:
         3e:78:f4:3c:3f:13:59:b6:dc:4e:5b:88:a6:d4:67:98:cd:ae:
         e8:b4:0e:9e:eb:12:ec:5d:e0:b3:0d:a5:20:c9:30:58:72:5f:
         94:48:90:d8
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUQ/WvVhqynjzoSy9FI8KWm6mWB18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YyRTJDNzUzQTIwMDcwN0NENjFBQUNENzExMEE3Mzcy
QzUwNTUzODAeFw0yNTAzMTQxNTA2NTFaFw0yNjAzMTMxNTExNTFaMDMxMTAvBgNV
BAMTKDlCN0YzQzBDNjhBQUI1QjQyM0Y5RDRCM0NENzAzMEFCMkMwREQzQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASPcZP/lKmgemRPj/5kH+kqT4
XuWY/4Q8cCxDKiHrkHpqV49ehAQNYWs7545pCroirJOilnY+jni9CIWbJ2l8DA5t
CIWFQaSoKUpStOLKEtfxYHumhGt0l/Nkd4Qs/XmkG6SmvFGtKJRu9UcS2ZB4PBih
t9Kj5rVafac+Ntud0XYetFGTn2PC3bTmExmg70LxcsuXllQ7Mhfo6iKKgdwnjDc+
2Wz0luXtpVd++j1A78I0+AsbrMePmnTh78jafaE+dDzeoLBrD6ELdyIBilcoR8Vu
nkAvhL0d1bhMNDNKFy+i5vK/hM0eumg6DyuAGBrMS+/Wb5aGTKZoQyMBYWYFAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUm388DGiqtbQj+dSzzXAwqywN06gwHwYDVR0j
BBgwFoAUzy4sdTogBwfNYarNcRCnNyxQVTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDhFMjZGRjRCNTcwRTNCMENBODhFODQwRjU3ODcwQzJB
NDY1OEVDMENGODM1QTNDRjQ5QjNCNTMwQTU4Mzc0LzAvQ0YyRTJDNzUzQTIwMDcw
N0NENjFBQUNENzExMEE3MzcyQzUwNTUzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRjJFMkM3NTNBMjAwNzA3Q0Q2
MUFBQ0Q3MTEwQTczNzJDNTA1NTM4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzA4RTI2RkY0QjU3MEUzQjBDQTg4RTg0MEY1Nzg3MEMyQTQ2NThFQzBD
RjgzNUEzQ0Y0OUIzQjUzMEE1ODM3NC8wLzMxMzgzNjJlMzEzODM5MmUzMjM0MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNzMyMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6
vfQwDQYJKoZIhvcNAQELBQADggEBAHNNWse8FA8n2BNNi/YpWFYLGTtXS0l6mZYy
ClEmHR4D8EVqmkri1X3VgdCjWtEwXEsFodb/b+Fy3Mcvf7xM1k8fj1A6VVcROf3X
ntG3MmQT/ViQd2zd3o+1Jt+L3zeVz7BKpUK3t0gjGEh/zLJRnZtcFhTXl8Lb+5w/
uYGwh+XJXAQ38JchpINTtMOoJN+C8uvjSKOGQd3USs+OFeXF1tstvfUJe/sXhhzF
poKAYxmMkYkOBPGBzFcLoa8HZRQngdR05pjN7pLtw9C2HW+6K9+FQLt9W6Pd6z54
9Dw/E1m23E5biKbUZ5jNrui0Dp7rEuxd4LMNpSDJMFhyX5RIkNg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:51 2025 by rpki-client