Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3232302e302f32322d3234203d3e203532323238.roa
File:                     3138362e3135392e3232302e302f32322d3234203d3e203532323238.roa (raw, json)
Hash identifier:          jEHbN8t7qseo7gGx3d6r5+qytyNJitKIw9Am+ZPLLgQ=
Subject key identifier:   94:DD:18:C7:32:46:1B:EE:2C:42:A9:E7:D0:3D:65:CD:72:B7:62:DF
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       5165CD55B0AFB204640A92088FDBCF8B7B2B98E7
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3232302e302f32322d3234203d3e203532323238.roa
Signing time:             Tue 04 Feb 2025 18:01:51 +0000
ROA not before:           Tue 04 Feb 2025 17:56:51 +0000
ROA not after:            Tue 03 Feb 2026 18:01:51 +0000
asID:                     52228
IP address blocks:        186.159.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:65:cd:55:b0:af:b2:04:64:0a:92:08:8f:db:cf:8b:7b:2b:98:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Feb  4 17:56:51 2025 GMT
            Not After : Feb  3 18:01:51 2026 GMT
        Subject: CN=94DD18C732461BEE2C42A9E7D03D65CD72B762DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:da:46:68:ca:7b:26:0f:0a:31:9a:f5:b4:
                    67:3f:02:8b:df:cb:97:1c:14:90:02:4d:b3:f0:32:
                    89:23:88:a9:21:14:01:1b:56:d1:c5:46:67:8d:70:
                    40:52:37:fe:5a:fc:88:20:78:99:64:5e:dc:f1:0d:
                    b9:f9:51:97:f1:ad:4d:b7:60:d6:99:54:e2:89:88:
                    a2:87:5f:ef:b8:c0:ab:c8:01:08:2a:04:a3:b6:15:
                    68:1e:75:e5:8b:8b:3b:cc:6b:62:5f:1e:39:e7:c6:
                    57:a1:26:72:96:74:11:37:f0:66:3a:ac:73:3f:71:
                    d5:92:1e:38:89:eb:35:ea:b1:05:0d:47:a7:16:73:
                    06:5d:d1:3c:59:e2:db:e6:52:79:1e:dc:7b:78:28:
                    6b:3c:07:52:e9:e6:b5:7a:e0:7b:9a:ef:d1:ac:31:
                    fd:f1:17:a5:e9:cb:91:1b:2d:48:5c:72:9c:e8:b0:
                    04:b8:a7:91:98:09:6c:a6:fc:05:3b:f2:61:bc:5e:
                    17:6d:f0:4b:1b:e1:f8:80:61:25:de:97:d6:eb:7d:
                    23:91:d7:9d:34:07:50:11:09:cf:bc:33:3a:83:a7:
                    a9:bb:9f:2d:1e:13:88:df:11:5d:9d:2a:07:3d:2c:
                    4e:a3:60:8c:bb:ca:d2:ce:3c:bd:91:8c:31:51:4c:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DD:18:C7:32:46:1B:EE:2C:42:A9:E7:D0:3D:65:CD:72:B7:62:DF
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3232302e302f32322d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:9c:2e:32:b3:ce:8b:20:04:30:4a:55:da:57:2c:45:7e:03:
         3a:6c:c6:86:3e:d7:2b:06:66:c4:02:54:ae:75:c1:cc:70:0a:
         ae:85:7e:83:ed:4e:b2:63:6b:8f:14:18:9d:52:fe:d4:13:62:
         2d:b1:73:bc:7d:52:e9:6e:29:db:c8:a9:61:7f:f0:e2:81:e0:
         c7:07:e9:cf:3a:6e:e7:38:f4:a8:02:97:1e:e2:80:a1:ed:8c:
         f1:c5:07:85:c7:60:b3:8a:45:fd:86:16:ce:41:c5:9b:7f:82:
         66:6f:64:9c:05:e6:59:b2:b5:b9:82:4b:41:af:1c:3f:1f:a1:
         89:de:f3:48:48:61:d0:bb:b9:19:f0:2c:1e:a4:d8:34:24:22:
         d4:50:99:15:66:d4:69:33:1a:05:b4:71:b8:cd:80:5e:d0:2b:
         2e:e8:0f:8b:52:56:3e:85:3c:dc:66:40:b8:ca:29:2d:d2:65:
         d9:21:da:99:cf:11:bf:fc:2f:7b:54:e3:24:39:9f:f7:73:57:
         ac:e3:4a:12:15:e1:26:e4:67:0e:af:1b:c6:90:bb:21:59:5e:
         b2:ae:66:7e:94:85:38:df:be:6d:cd:47:75:d2:e3:67:0c:9f:
         bb:e9:55:2e:9f:19:34:6b:cc:55:a1:d2:4e:13:04:44:0c:6a:
         fb:58:4a:e1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUWXNVbCvsgRkCpIIj9vPi3srmOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxMUFDQkE3MkU4MEMwMEZFQzEzRDMwQUM2NzYxMzhB
N0FDNDhDNzAeFw0yNTAyMDQxNzU2NTFaFw0yNjAyMDMxODAxNTFaMDMxMTAvBgNV
BAMTKDk0REQxOEM3MzI0NjFCRUUyQzQyQTlFN0QwM0Q2NUNENzJCNzYyREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzdpGaMp7Jg8KMZr1tGc/Aovf
y5ccFJACTbPwMokjiKkhFAEbVtHFRmeNcEBSN/5a/IggeJlkXtzxDbn5UZfxrU23
YNaZVOKJiKKHX++4wKvIAQgqBKO2FWgedeWLizvMa2JfHjnnxlehJnKWdBE38GY6
rHM/cdWSHjiJ6zXqsQUNR6cWcwZd0TxZ4tvmUnke3Ht4KGs8B1Lp5rV64Hua79Gs
Mf3xF6Xpy5EbLUhccpzosAS4p5GYCWym/AU78mG8Xhdt8Esb4fiAYSXel9brfSOR
1500B1ARCc+8MzqDp6m7ny0eE4jfEV2dKgc9LE6jYIy7ytLOPL2RjDFRTDOPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlN0YxzJGG+4sQqnn0D1lzXK3Yt8wHwYDVR0j
BBgwFoAU9RGsunLoDAD+wT0wrGdhOKesSMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUExQTQ3QzgyRTU0NDM1M0U0QkQzNjc5RDI1NTI4REQz
MzZDMEMzQkU3RjlDOEI4ODQ1NEU3QzQxN0I2OUZGLzAvRjUxMUFDQkE3MkU4MEMw
MEZFQzEzRDMwQUM2NzYxMzhBN0FDNDhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTExQUNCQTcyRTgwQzAwRkVD
MTNEMzBBQzY3NjEzOEE3QUM0OEM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVBMUE0N0M4MkU1NDQzNTNFNEJEMzY3OUQyNTUyOEREMzM2QzBDM0JF
N0Y5QzhCODg0NTRFN0M0MTdCNjlGRi8wLzMxMzgzNjJlMzEzNTM5MmUzMjMyMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzIzMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCup/c
MA0GCSqGSIb3DQEBCwUAA4IBAQBDnC4ys86LIAQwSlXaVyxFfgM6bMaGPtcrBmbE
AlSudcHMcAquhX6D7U6yY2uPFBidUv7UE2ItsXO8fVLpbinbyKlhf/DigeDHB+nP
Om7nOPSoApce4oCh7YzxxQeFx2CzikX9hhbOQcWbf4Jmb2ScBeZZsrW5gktBrxw/
H6GJ3vNISGHQu7kZ8CwepNg0JCLUUJkVZtRpMxoFtHG4zYBe0Csu6A+LUlY+hTzc
ZkC4yikt0mXZIdqZzxG//C97VOMkOZ/3c1es40oSFeEm5GcOrxvGkLshWV6yrmZ+
lIU4375tzUd10uNnDJ+76VUunxk0a8xVodJOEwREDGr7WErh
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:09:22 2025 by rpki-client