Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3133382e3138362e3133362e302f32322d3232203d3e20323634383530.roa
File:                     3133382e3138362e3133362e302f32322d3232203d3e20323634383530.roa (raw, json)
Hash identifier:          DFuGhaXwi6T/+JMFaEu+WaJBBGt75IUH/NVTHTCObQI=
Subject key identifier:   81:D8:53:EA:76:FF:B5:92:C5:0B:D3:DF:1F:3D:55:E3:D9:A4:D7:44
Certificate issuer:       /CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Certificate serial:       150D299804CBFB011FF401A969AFC46C9631A6CF
Authority key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3133382e3138362e3133362e302f32322d3232203d3e20323634383530.roa
Signing time:             Tue 04 Feb 2025 18:39:14 +0000
ROA not before:           Tue 04 Feb 2025 18:34:14 +0000
ROA not after:            Tue 03 Feb 2026 18:39:14 +0000
asID:                     264850
IP address blocks:        138.186.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0d:29:98:04:cb:fb:01:1f:f4:01:a9:69:af:c4:6c:96:31:a6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
        Validity
            Not Before: Feb  4 18:34:14 2025 GMT
            Not After : Feb  3 18:39:14 2026 GMT
        Subject: CN=81D853EA76FFB592C50BD3DF1F3D55E3D9A4D744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d0:fc:41:b0:0e:00:01:42:9c:c7:96:5c:55:
                    68:35:88:59:30:fd:40:53:0d:aa:c7:8a:be:0f:af:
                    39:d6:db:35:d2:4c:84:be:c5:52:c1:7a:32:9c:2c:
                    2a:0c:6d:71:94:d2:b4:78:6b:66:0f:52:6b:e4:5e:
                    44:79:46:78:27:3e:5e:16:1f:55:fa:e2:e9:b9:f6:
                    e8:2b:56:02:9b:d4:17:68:f8:04:d6:0a:c3:c5:6f:
                    8c:4e:f1:e7:94:48:18:e5:00:8a:79:f5:df:8a:05:
                    a0:e1:bd:b3:f8:19:a1:d4:b9:21:d5:1e:0a:9d:98:
                    d1:5d:ba:2a:b2:6e:6b:7f:ea:5f:23:88:41:69:9c:
                    2c:13:e9:bc:b7:10:b8:b8:dc:4d:fd:ff:ee:dc:b6:
                    2f:e0:77:10:67:4f:df:2c:d7:77:e3:b9:eb:32:62:
                    c7:a0:83:53:6d:1b:1e:ff:28:5c:36:77:88:f7:ed:
                    f0:85:1b:18:69:03:06:29:06:a4:f9:24:ee:65:1a:
                    d9:12:d3:2d:ff:03:85:cb:f8:29:7c:a9:f4:ea:57:
                    2c:ee:0c:de:2f:4b:20:bc:30:30:ee:7c:f4:f7:84:
                    9e:b6:a1:74:4e:ff:57:5f:bc:b4:60:7d:b5:f4:2e:
                    2f:73:fe:4f:6c:e1:e2:ac:3f:e3:97:d4:c0:df:a5:
                    09:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D8:53:EA:76:FF:B5:92:C5:0B:D3:DF:1F:3D:55:E3:D9:A4:D7:44
            X509v3 Authority Key Identifier:
                keyid:FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3133382e3138362e3133362e302f32322d3232203d3e20323634383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:cc:41:b6:2b:5f:65:8b:b7:3f:32:e7:ca:59:2a:26:fc:09:
         f1:1f:ba:92:dd:e6:45:d8:06:3a:f3:e6:a2:de:91:8a:a7:c3:
         ed:4d:f3:00:02:00:fd:0a:8f:04:b5:5a:a6:90:48:31:a1:4d:
         b4:a5:41:a7:22:f5:fd:ea:b5:91:a6:cd:d0:33:89:9b:d1:f8:
         eb:ae:cd:1d:ba:00:4a:ba:11:f7:24:d1:5a:9c:de:37:a7:23:
         0c:6a:69:39:74:e8:57:2c:7c:dd:85:f2:e9:51:7f:cb:96:9f:
         c4:d0:9b:77:ae:1f:78:8d:3d:42:72:85:c9:16:e1:e5:41:e2:
         6a:b2:76:5d:25:57:80:65:30:94:0c:f8:29:d3:bc:95:56:83:
         22:68:48:a9:65:1f:5a:fd:d4:ad:ea:a9:63:95:03:c1:de:e9:
         5e:dd:50:fb:f5:c0:1c:4d:6a:4c:bd:9e:32:4c:7e:e3:2c:3a:
         28:77:77:37:ce:af:31:f2:98:ae:07:87:e1:93:5a:31:f8:8e:
         0a:d7:0e:97:6c:d1:5a:bb:38:9d:8f:e6:54:0f:0c:66:1a:e0:
         c1:99:c7:8e:6e:5b:34:d1:e6:88:92:76:dc:88:bf:43:bd:6d:
         9f:68:4a:61:b7:81:a3:7a:51:df:ba:1b:99:56:52:7e:90:fc:
         72:50:db:6e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUFQ0pmATL+wEf9AGpaa/EbJYxps8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE3QTkyNjA5Q0FERTZBNzhDMUUxNzhERUZFN0M5QzI0
Q0Y3NTE2OTAeFw0yNTAyMDQxODM0MTRaFw0yNjAyMDMxODM5MTRaMDMxMTAvBgNV
BAMTKDgxRDg1M0VBNzZGRkI1OTJDNTBCRDNERjFGM0Q1NUUzRDlBNEQ3NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa0PxBsA4AAUKcx5ZcVWg1iFkw
/UBTDarHir4PrznW2zXSTIS+xVLBejKcLCoMbXGU0rR4a2YPUmvkXkR5RngnPl4W
H1X64um59ugrVgKb1Bdo+ATWCsPFb4xO8eeUSBjlAIp59d+KBaDhvbP4GaHUuSHV
HgqdmNFduiqybmt/6l8jiEFpnCwT6by3ELi43E39/+7cti/gdxBnT98s13fjuesy
Ysegg1NtGx7/KFw2d4j37fCFGxhpAwYpBqT5JO5lGtkS0y3/A4XL+Cl8qfTqVyzu
DN4vSyC8MDDufPT3hJ62oXRO/1dfvLRgfbX0Li9z/k9s4eKsP+OX1MDfpQn/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUgdhT6nb/tZLFC9PfHz1V49mk10QwHwYDVR0j
BBgwFoAU+nqSYJyt5qeMHheN7+fJwkz3UWkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OUYwRkQ4MjczQkQxNzkyNDY3ODBGOEJGMkQ3REIwQUU1
NkZFMzNFRUUwMjBEMDc1NTBENjBFMjNGRDAxRjJFLzAvRkE3QTkyNjA5Q0FERTZB
NzhDMUUxNzhERUZFN0M5QzI0Q0Y3NTE2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQTdBOTI2MDlDQURFNkE3OEMx
RTE3OERFRkU3QzlDMjRDRjc1MTY5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTlGMEZEODI3M0JEMTc5MjQ2NzgwRjhCRjJEN0RCMEFFNTZGRTMzRUVF
MDIwRDA3NTUwRDYwRTIzRkQwMUYyRS8wLzMxMzMzODJlMzEzODM2MmUzMTMzMzYy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzQzODM1MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
uogwDQYJKoZIhvcNAQELBQADggEBAAvMQbYrX2WLtz8y58pZKib8CfEfupLd5kXY
Bjrz5qLekYqnw+1N8wACAP0KjwS1WqaQSDGhTbSlQaci9f3qtZGmzdAziZvR+Ouu
zR26AEq6Efck0Vqc3jenIwxqaTl06FcsfN2F8ulRf8uWn8TQm3euH3iNPUJyhckW
4eVB4mqydl0lV4BlMJQM+CnTvJVWgyJoSKllH1r91K3qqWOVA8He6V7dUPv1wBxN
aky9njJMfuMsOih3dzfOrzHymK4Hh+GTWjH4jgrXDpds0Vq7OJ2P5lQPDGYa4MGZ
x45uWzTR5oiSdtyIv0O9bZ9oSmG3gaN6Ud+6G5lWUn6Q/HJQ224=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:38 2025 by rpki-client