Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138362e312e3232352e302f32342d3234203d3e203532343236.roa
File:                     3138362e312e3232352e302f32342d3234203d3e203532343236.roa (raw, json)
Hash identifier:          WOmEhcu+b+EVk7QiH8w5tDmNHMFFMV0r9DfXZEiDChs=
Subject key identifier:   AE:CC:3E:FE:E4:A5:D0:AE:7F:E1:4D:96:B6:D8:80:74:02:82:FA:38
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       4D75201F2F82C48E9BF7C04B53AE007BBFC7299C
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138362e312e3232352e302f32342d3234203d3e203532343236.roa
Signing time:             Tue 05 Mar 2024 18:05:25 +0000
ROA not before:           Tue 05 Mar 2024 18:00:25 +0000
ROA not after:            Tue 04 Mar 2025 18:05:25 +0000
asID:                     52426
IP address blocks:        186.1.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 01:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:75:20:1f:2f:82:c4:8e:9b:f7:c0:4b:53:ae:00:7b:bf:c7:29:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Mar  5 18:00:25 2024 GMT
            Not After : Mar  4 18:05:25 2025 GMT
        Subject: CN=AECC3EFEE4A5D0AE7FE14D96B6D880740282FA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:35:24:49:ec:67:72:c1:47:a2:74:f6:b8:
                    b1:73:99:99:35:07:2f:bf:ea:2e:6d:d9:fc:66:73:
                    2b:93:98:16:4d:6e:89:31:d9:0a:cc:5d:bc:7b:3f:
                    c8:e8:b3:bf:c2:ef:4e:f7:c1:07:e9:fb:ed:9c:89:
                    6e:52:69:91:d4:24:e6:ad:90:6f:78:a8:ed:ce:c9:
                    c8:4b:02:52:37:4b:04:5a:de:9a:bd:20:fa:63:b5:
                    b2:a4:a6:19:1b:c7:d6:d5:e5:24:a8:71:34:32:81:
                    4a:2c:ce:b8:79:ca:27:fc:3a:7c:ce:9b:88:60:3a:
                    74:99:6e:5f:2d:c8:15:95:28:68:44:0b:39:ed:97:
                    64:48:f4:4f:58:76:11:ac:6b:c9:2a:6a:85:02:48:
                    3b:d3:42:4e:9f:d2:5d:0c:2d:8d:6e:98:11:93:a7:
                    e3:0c:c6:a4:a8:2a:4b:8c:11:61:22:7e:07:14:f6:
                    78:88:7d:db:89:97:ba:d6:56:e9:9a:85:2b:66:51:
                    f4:ca:d9:76:80:64:e4:aa:68:4c:8e:9c:97:42:a6:
                    eb:bc:c4:a6:ec:57:9e:c1:86:7e:3e:26:35:51:0a:
                    e4:7b:a9:e2:28:73:df:db:77:c8:a1:69:aa:6c:91:
                    24:be:eb:b5:25:1c:72:4f:f3:04:c6:26:7b:ce:36:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CC:3E:FE:E4:A5:D0:AE:7F:E1:4D:96:B6:D8:80:74:02:82:FA:38
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138362e312e3232352e302f32342d3234203d3e203532343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:cd:87:91:18:26:85:91:d2:21:e5:53:42:35:77:e5:f0:e1:
         17:b3:9a:68:30:15:06:43:b6:93:9d:0b:71:e7:da:9c:fe:c6:
         c4:d1:7f:a4:1f:1e:ba:80:fe:cf:3e:cd:d5:3a:6e:d8:b0:05:
         5b:70:02:e0:c0:5c:70:4e:a3:56:11:96:d9:25:2b:a1:f7:69:
         f7:98:48:26:d9:1d:3a:5a:e2:99:41:52:36:a9:f3:32:a2:59:
         e2:6b:b5:81:61:a1:31:45:50:44:79:cb:a4:c1:b2:b8:85:b1:
         5d:53:e5:2d:71:c2:fa:f9:0e:34:9b:a0:96:85:88:cb:c6:e8:
         48:93:71:ed:67:d0:44:4f:0d:a8:bc:21:76:d4:9e:17:3b:48:
         cf:be:a4:c7:d4:e0:45:02:d7:56:42:fb:9f:be:87:40:73:47:
         e7:3e:ae:37:e4:77:00:4a:1d:4b:d2:fc:d0:42:4d:2c:77:49:
         39:08:0c:87:bc:78:fb:0f:78:35:4f:57:43:3b:cc:81:75:82:
         c1:0d:ba:51:7f:ad:f3:98:d9:d9:b8:b9:08:d2:92:15:2b:ff:
         74:7c:04:3f:ca:a6:bd:6a:2c:4e:db:9e:cb:87:c0:ac:ca:e4:
         30:9e:5c:1e:b4:50:52:c7:c1:76:03:32:b5:5b:f3:e3:28:23:
         fb:ab:54:c4
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTXUgHy+CxI6b98BLU64Ae7/HKZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcyNkJEQjA2NjAwOUU0NTczQkEzNUQ1RkVBRkNDQjQz
MTMzMENENzAeFw0yNDAzMDUxODAwMjVaFw0yNTAzMDQxODA1MjVaMDMxMTAvBgNV
BAMTKEFFQ0MzRUZFRTRBNUQwQUU3RkUxNEQ5NkI2RDg4MDc0MDI4MkZBMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7zUkSexncsFHonT2uLFzmZk1
By+/6i5t2fxmcyuTmBZNbokx2QrMXbx7P8jos7/C7073wQfp++2ciW5SaZHUJOat
kG94qO3OychLAlI3SwRa3pq9IPpjtbKkphkbx9bV5SSocTQygUoszrh5yif8OnzO
m4hgOnSZbl8tyBWVKGhECzntl2RI9E9YdhGsa8kqaoUCSDvTQk6f0l0MLY1umBGT
p+MMxqSoKkuMEWEifgcU9niIfduJl7rWVumahStmUfTK2XaAZOSqaEyOnJdCpuu8
xKbsV57Bhn4+JjVRCuR7qeIoc9/bd8ihaapskSS+67UlHHJP8wTGJnvONrdBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUrsw+/uSl0K5/4U2WttiAdAKC+jgwHwYDVR0j
BBgwFoAUlya9sGYAnkVzujXV/q/MtDEzDNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOUJDNzE1QzU3NUY3RDUzRDE1MDNERDgyMzZFNTE5NzMx
OEQxODkyNkJCRTRDNzdDQjY1RERFQjEzMDQ4RkI3LzAvOTcyNkJEQjA2NjAwOUU0
NTczQkEzNUQ1RkVBRkNDQjQzMTMzMENENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzI2QkRCMDY2MDA5RTQ1NzNC
QTM1RDVGRUFGQ0NCNDMxMzMwQ0Q3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzlCQzcxNUM1NzVGN0Q1M0QxNTAzREQ4MjM2RTUxOTczMThEMTg5MjZC
QkU0Qzc3Q0I2NURERUIxMzA0OEZCNy8wLzMxMzgzNjJlMzEyZTMyMzIzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzNDMyMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6AeEwDQYJ
KoZIhvcNAQELBQADggEBAB/Nh5EYJoWR0iHlU0I1d+Xw4RezmmgwFQZDtpOdC3Hn
2pz+xsTRf6QfHrqA/s8+zdU6btiwBVtwAuDAXHBOo1YRltklK6H3afeYSCbZHTpa
4plBUjap8zKiWeJrtYFhoTFFUER5y6TBsriFsV1T5S1xwvr5DjSboJaFiMvG6EiT
ce1n0ERPDai8IXbUnhc7SM++pMfU4EUC11ZC+5++h0BzR+c+rjfkdwBKHUvS/NBC
TSx3STkIDIe8ePsPeDVPV0M7zIF1gsENulF/rfOY2dm4uQjSkhUr/3R8BD/Kpr1q
LE7bnsuHwKzK5DCeXB60UFLHwXYDMrVb8+MoI/urVMQ=
-----END CERTIFICATE-----
Generated at Sat May 4 05:39:14 2024 by rpki-client on console-fra.rpki-client.org