Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3138362e3139302e3235342e302f32342d3234203d3e20323632313931.roa
File:                     3138362e3139302e3235342e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          hGMG5Zi8lJUWmZrzG3wA3WZGLh7KKzxsIeusHuU8vMo=
Subject key identifier:   0A:50:DA:7B:90:F9:3F:7E:72:29:25:45:8C:F9:EB:20:8C:B0:10:43
Certificate issuer:       /CN=E05464F45EEB0ED0894BBD64663203701E769A12
Certificate serial:       713FED3400163D4C281F728A498693D1B0D71B22
Authority key identifier: E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3138362e3139302e3235342e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 19:58:42 +0000
ROA not before:           Tue 04 Feb 2025 19:53:42 +0000
ROA not after:            Tue 03 Feb 2026 19:58:42 +0000
asID:                     262191
IP address blocks:        186.190.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3f:ed:34:00:16:3d:4c:28:1f:72:8a:49:86:93:d1:b0:d7:1b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E05464F45EEB0ED0894BBD64663203701E769A12
        Validity
            Not Before: Feb  4 19:53:42 2025 GMT
            Not After : Feb  3 19:58:42 2026 GMT
        Subject: CN=0A50DA7B90F93F7E722925458CF9EB208CB01043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1a:d6:ed:b5:b7:6b:ee:76:97:77:8f:5c:8d:
                    37:02:16:91:7e:79:f4:19:f4:f2:56:37:09:c5:6e:
                    05:c6:6a:d6:ba:58:bc:ef:2e:1c:4b:e3:32:25:8e:
                    84:4d:9f:ca:4a:c7:6e:5f:f9:67:bc:cb:32:fa:f4:
                    f4:55:f5:51:a5:17:62:ce:d7:ff:87:9f:e2:b2:a7:
                    53:ec:6a:74:5e:e2:2b:ca:94:c4:7f:16:51:36:64:
                    82:4e:35:57:c9:98:b7:34:0e:60:7b:c2:4d:21:d2:
                    63:82:d0:62:f9:00:d9:a1:ee:04:41:70:da:d8:97:
                    6e:fb:da:63:e8:d1:24:54:33:33:8e:ee:fe:89:d3:
                    20:a2:95:a4:ed:a9:28:50:34:38:e2:83:35:25:94:
                    02:fe:7a:44:88:f3:71:d1:6b:0f:ea:ac:35:96:e0:
                    c9:38:d5:3a:6e:17:74:1d:b5:d9:2f:dc:e1:b9:5a:
                    83:21:7f:e0:bd:f6:d5:3b:bb:59:c6:3f:83:17:e2:
                    06:0a:3f:9c:43:c0:12:aa:22:88:db:f5:ab:ed:20:
                    b6:2b:99:be:07:1c:fe:95:16:b8:05:88:f2:2e:b6:
                    b3:01:59:0c:e6:85:22:cb:87:73:f5:af:82:18:e1:
                    bc:fe:33:18:6a:88:1f:cc:83:8f:69:4d:83:f0:bc:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:50:DA:7B:90:F9:3F:7E:72:29:25:45:8C:F9:EB:20:8C:B0:10:43
            X509v3 Authority Key Identifier:
                keyid:E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3138362e3139302e3235342e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:79:cf:60:8e:ff:11:82:ce:c3:5a:b4:44:36:f6:53:9e:ab:
         ab:f8:56:b6:6d:5b:ea:74:5c:c7:b1:95:7b:f0:6d:42:ec:e0:
         a5:b0:ea:75:3c:fd:52:f5:83:71:f8:91:58:69:7a:be:9e:87:
         06:4e:a0:61:42:60:93:e8:46:1c:1b:5f:86:50:df:60:8e:e6:
         e8:56:c3:0a:d8:32:d2:c2:2e:b8:ab:17:3e:0e:f5:f9:b1:98:
         79:6e:45:ad:09:a5:bd:a7:e6:ed:1a:9b:c3:e7:9d:7b:63:d2:
         ac:c3:fa:94:30:8f:9d:2f:18:80:39:47:c6:e5:c5:84:50:9a:
         e2:3c:76:5f:2e:a1:95:e8:b2:08:b3:10:f1:b7:f1:3b:60:cb:
         9e:3c:d8:5b:fe:aa:47:7d:21:17:4a:e5:27:05:e7:5e:d6:9f:
         4f:ec:3b:e6:27:38:87:0e:ba:d0:a3:50:f6:a3:0f:e9:07:62:
         00:0d:09:50:38:36:ff:6e:38:a3:d0:e9:9a:9a:7a:7e:6e:b7:
         a4:46:d6:00:25:80:b3:ba:ac:7d:fe:1d:2a:4b:29:5b:b6:9d:
         91:f4:8b:01:a2:68:ce:72:ba:7d:24:33:8a:ff:78:45:c8:e7:
         9b:de:f4:31:b9:ea:c2:ff:33:9a:bc:23:b4:e4:b8:9e:97:c5:
         78:8a:08:cb
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUcT/tNAAWPUwoH3KKSYaT0bDXGyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA1NDY0RjQ1RUVCMEVEMDg5NEJCRDY0NjYzMjAzNzAx
RTc2OUExMjAeFw0yNTAyMDQxOTUzNDJaFw0yNjAyMDMxOTU4NDJaMDMxMTAvBgNV
BAMTKDBBNTBEQTdCOTBGOTNGN0U3MjI5MjU0NThDRjlFQjIwOENCMDEwNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgGtbttbdr7naXd49cjTcCFpF+
efQZ9PJWNwnFbgXGata6WLzvLhxL4zIljoRNn8pKx25f+We8yzL69PRV9VGlF2LO
1/+Hn+Kyp1PsanRe4ivKlMR/FlE2ZIJONVfJmLc0DmB7wk0h0mOC0GL5ANmh7gRB
cNrYl2772mPo0SRUMzOO7v6J0yCilaTtqShQNDjigzUllAL+ekSI83HRaw/qrDWW
4Mk41TpuF3Qdtdkv3OG5WoMhf+C99tU7u1nGP4MX4gYKP5xDwBKqIojb9avtILYr
mb4HHP6VFrgFiPIutrMBWQzmhSLLh3P1r4IY4bz+MxhqiB/Mg49pTYPwvCF3AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUClDae5D5P35yKSVFjPnrIIywEEMwHwYDVR0j
BBgwFoAU4FRk9F7rDtCJS71kZjIDcB52mhIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNENERkU3MkMyNzZFQzdBQTE5OTI0OTIzMUYwQTQ1MkQ5
QjRCNUIxMzI0QTU1M0M0ODEwN0Y2NjYyMEQ4N0Q5LzAvRTA1NDY0RjQ1RUVCMEVE
MDg5NEJCRDY0NjYzMjAzNzAxRTc2OUExMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMDU0NjRGNDVFRUIwRUQwODk0
QkJENjQ2NjMyMDM3MDFFNzY5QTEyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzRDREZFNzJDMjc2RUM3QUExOTkyNDkyMzFGMEE0NTJEOUI0QjVCMTMy
NEE1NTNDNDgxMDdGNjY2MjBEODdEOS8wLzMxMzgzNjJlMzEzOTMwMmUzMjM1MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6
vv4wDQYJKoZIhvcNAQELBQADggEBACd5z2CO/xGCzsNatEQ29lOeq6v4VrZtW+p0
XMexlXvwbULs4KWw6nU8/VL1g3H4kVhper6ehwZOoGFCYJPoRhwbX4ZQ32CO5uhW
wwrYMtLCLrirFz4O9fmxmHluRa0Jpb2n5u0am8PnnXtj0qzD+pQwj50vGIA5R8bl
xYRQmuI8dl8uoZXosgizEPG38Ttgy5482Fv+qkd9IRdK5ScF517Wn0/sO+YnOIcO
utCjUPajD+kHYgANCVA4Nv9uOKPQ6Zqaen5ut6RG1gAlgLO6rH3+HSpLKVu2nZH0
iwGiaM5yun0kM4r/eEXI55ve9DG56sL/M5q8I7TkuJ6XxXiKCMs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:53 2025 by rpki-client