Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/3138372e36322e39322e302f32322d3234203d3e20323639393039.roa
File:                     3138372e36322e39322e302f32322d3234203d3e20323639393039.roa (raw, json)
Hash identifier:          ju/sgo11iyHfbT63pye5HuI6XHkzptFqqLrZab2OObI=
Subject key identifier:   86:D7:2C:DA:57:45:C6:F0:2B:11:9C:9C:79:DD:B3:87:7F:C7:08:8E
Certificate issuer:       /CN=39FD1072D43B257A38B879FECC702EF7B9ED64BC
Certificate serial:       2537AA334AA68EDA2752DBDCC79B941CD44E0289
Authority key identifier: 39:FD:10:72:D4:3B:25:7A:38:B8:79:FE:CC:70:2E:F7:B9:ED:64:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/3138372e36322e39322e302f32322d3234203d3e20323639393039.roa
Signing time:             Tue 04 Feb 2025 18:46:53 +0000
ROA not before:           Tue 04 Feb 2025 18:41:53 +0000
ROA not after:            Tue 03 Feb 2026 18:46:53 +0000
asID:                     269909
IP address blocks:        187.62.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:37:aa:33:4a:a6:8e:da:27:52:db:dc:c7:9b:94:1c:d4:4e:02:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39FD1072D43B257A38B879FECC702EF7B9ED64BC
        Validity
            Not Before: Feb  4 18:41:53 2025 GMT
            Not After : Feb  3 18:46:53 2026 GMT
        Subject: CN=86D72CDA5745C6F02B119C9C79DDB3877FC7088E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:be:78:bc:31:00:81:d8:64:9d:9a:17:04:f0:
                    bf:93:d7:56:e7:43:8a:7c:2c:ce:5d:ef:07:5c:bb:
                    e8:38:61:3b:d6:39:bf:21:ef:ee:85:62:57:fa:1d:
                    f1:b0:5a:1f:ae:85:b0:4d:a9:4f:f8:81:6e:da:c7:
                    de:5d:7e:3f:fa:1e:4f:5a:33:35:0a:45:1e:fb:52:
                    58:22:c3:34:a6:52:e5:10:19:e6:a8:3b:a5:30:ed:
                    81:06:2a:ee:9e:fd:2f:d9:18:eb:d6:ad:ef:b0:dc:
                    99:89:0c:c8:b6:55:f0:96:c5:4e:5f:e1:17:fc:6e:
                    28:a9:f1:0e:50:a8:af:03:a0:42:e5:ab:d8:48:dc:
                    a6:95:80:a7:0b:45:d0:e5:03:d3:67:28:ef:5f:a5:
                    d2:14:22:b6:2a:c1:1b:0f:a7:e8:ca:a7:cb:ae:98:
                    a9:dd:5a:ed:e1:9f:79:e3:65:9e:5b:06:5d:ef:3c:
                    46:1f:99:49:44:3b:41:4b:e5:c9:76:92:66:25:d3:
                    b3:48:14:e1:73:bc:db:67:48:3d:13:4d:82:9b:60:
                    b4:68:db:b0:fc:86:02:2f:98:a2:c4:cc:1d:ee:db:
                    73:4f:39:97:f2:06:19:35:08:98:b7:18:6e:39:bc:
                    89:88:f0:d8:31:43:43:5c:5b:20:2a:96:2b:d4:5f:
                    1f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D7:2C:DA:57:45:C6:F0:2B:11:9C:9C:79:DD:B3:87:7F:C7:08:8E
            X509v3 Authority Key Identifier:
                keyid:39:FD:10:72:D4:3B:25:7A:38:B8:79:FE:CC:70:2E:F7:B9:ED:64:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39FD1072D43B257A38B879FECC702EF7B9ED64BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D991E9E73D1BA4DD4E7FC949778EF3FFC84D5C69DDC87449EA4F03BDB317E70/0/3138372e36322e39322e302f32322d3234203d3e20323639393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:67:91:c0:e0:a2:68:da:ce:b8:b5:7b:42:aa:76:02:b5:14:
         a7:65:88:12:dd:76:27:61:9d:cb:f2:fa:4f:47:a1:ea:b1:28:
         5a:70:54:d8:44:81:58:e8:8f:5c:db:cf:b8:95:d9:2f:3a:7b:
         4c:51:62:95:70:65:af:d3:35:fa:46:ca:e4:6c:09:60:56:18:
         ed:7e:c7:97:7e:b4:3e:fd:00:86:4b:77:da:8c:ee:fb:42:29:
         1a:66:b4:38:c6:83:94:70:4a:ad:4b:a6:5e:a7:e9:ed:a0:9c:
         ec:d2:a4:a9:9c:ac:2b:ea:e7:53:e3:30:8b:0d:d2:6f:45:2a:
         44:15:e3:b6:79:72:73:77:31:bf:01:19:75:10:3e:d8:0d:fe:
         36:cb:f6:5a:86:be:98:e3:2e:a9:05:6b:27:bb:28:b9:04:58:
         1c:bb:2d:81:f7:71:6f:b4:9e:6b:81:f2:f2:2f:ef:51:3f:f1:
         dd:b5:ed:8a:28:2f:31:91:42:b4:09:8f:fa:68:f0:5b:74:77:
         91:06:a3:ac:2b:bc:52:50:7e:1b:30:80:02:60:de:bb:da:8e:
         a7:fc:fa:98:62:2d:b3:36:64:70:ed:aa:34:b2:11:a5:f4:a1:
         6f:5d:e2:b1:18:d5:43:53:12:3e:f7:11:6d:e6:cc:4d:a1:ce:
         a1:a3:fb:55
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJTeqM0qmjtonUtvcx5uUHNROAokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlGRDEwNzJENDNCMjU3QTM4Qjg3OUZFQ0M3MDJFRjdC
OUVENjRCQzAeFw0yNTAyMDQxODQxNTNaFw0yNjAyMDMxODQ2NTNaMDMxMTAvBgNV
BAMTKDg2RDcyQ0RBNTc0NUM2RjAyQjExOUM5Qzc5RERCMzg3N0ZDNzA4OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfvni8MQCB2GSdmhcE8L+T11bn
Q4p8LM5d7wdcu+g4YTvWOb8h7+6FYlf6HfGwWh+uhbBNqU/4gW7ax95dfj/6Hk9a
MzUKRR77UlgiwzSmUuUQGeaoO6Uw7YEGKu6e/S/ZGOvWre+w3JmJDMi2VfCWxU5f
4Rf8biip8Q5QqK8DoELlq9hI3KaVgKcLRdDlA9NnKO9fpdIUIrYqwRsPp+jKp8uu
mKndWu3hn3njZZ5bBl3vPEYfmUlEO0FL5cl2kmYl07NIFOFzvNtnSD0TTYKbYLRo
27D8hgIvmKLEzB3u23NPOZfyBhk1CJi3GG45vImI8NgxQ0NcWyAqlivUXx/lAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhtcs2ldFxvArEZyced2zh3/HCI4wHwYDVR0j
BBgwFoAUOf0QctQ7JXo4uHn+zHAu97ntZLwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDk5MUU5RTczRDFCQTRERDRFN0ZDOTQ5Nzc4RUYzRkZD
ODRENUM2OUREQzg3NDQ5RUE0RjAzQkRCMzE3RTcwLzAvMzlGRDEwNzJENDNCMjU3
QTM4Qjg3OUZFQ0M3MDJFRjdCOUVENjRCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOUZEMTA3MkQ0M0IyNTdBMzhC
ODc5RkVDQzcwMkVGN0I5RUQ2NEJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0Q5OTFFOUU3M0QxQkE0REQ0RTdGQzk0OTc3OEVGM0ZGQzg0RDVDNjlE
REM4NzQ0OUVBNEYwM0JEQjMxN0U3MC8wLzMxMzgzNzJlMzYzMjJlMzkzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArs+XDAN
BgkqhkiG9w0BAQsFAAOCAQEAaWeRwOCiaNrOuLV7Qqp2ArUUp2WIEt12J2Gdy/L6
T0eh6rEoWnBU2ESBWOiPXNvPuJXZLzp7TFFilXBlr9M1+kbK5GwJYFYY7X7Hl360
Pv0Ahkt32ozu+0IpGma0OMaDlHBKrUumXqfp7aCc7NKkqZysK+rnU+Mwiw3Sb0Uq
RBXjtnlyc3cxvwEZdRA+2A3+Nsv2Woa+mOMuqQVrJ7souQRYHLstgfdxb7Sea4Hy
8i/vUT/x3bXtiigvMZFCtAmP+mjwW3R3kQajrCu8UlB+GzCAAmDeu9qOp/z6mGIt
szZkcO2qNLIRpfShb13isRjVQ1MSPvcRbebMTaHOoaP7VQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:05 2025 by rpki-client