Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/3138362e3134382e3139332e302f32342d3234203d3e203631343631.roa
File:                     3138362e3134382e3139332e302f32342d3234203d3e203631343631.roa (raw, json)
Hash identifier:          4TivZNVrDa2TNHvJcoXvyYnDoK/L9oKJkKe0I2T0yWk=
Subject key identifier:   F3:15:93:CA:30:42:3B:24:BA:2C:62:B5:59:2D:31:4E:8B:CF:5D:02
Certificate issuer:       /CN=6A09FD170F0661512CCD03A620291BCAB5068D05
Certificate serial:       10C794786C8D6EA1B7C3D9DFE937301431846A9D
Authority key identifier: 6A:09:FD:17:0F:06:61:51:2C:CD:03:A6:20:29:1B:CA:B5:06:8D:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A09FD170F0661512CCD03A620291BCAB5068D05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/3138362e3134382e3139332e302f32342d3234203d3e203631343631.roa
Signing time:             Tue 04 Feb 2025 18:37:59 +0000
ROA not before:           Tue 04 Feb 2025 18:32:59 +0000
ROA not after:            Tue 03 Feb 2026 18:37:59 +0000
asID:                     61461
IP address blocks:        186.148.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/6A09FD170F0661512CCD03A620291BCAB5068D05.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/6A09FD170F0661512CCD03A620291BCAB5068D05.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A09FD170F0661512CCD03A620291BCAB5068D05.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c7:94:78:6c:8d:6e:a1:b7:c3:d9:df:e9:37:30:14:31:84:6a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A09FD170F0661512CCD03A620291BCAB5068D05
        Validity
            Not Before: Feb  4 18:32:59 2025 GMT
            Not After : Feb  3 18:37:59 2026 GMT
        Subject: CN=F31593CA30423B24BA2C62B5592D314E8BCF5D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:a9:7d:9e:ca:a0:ba:c4:42:4c:0a:e6:26:
                    e2:b5:2e:6b:53:25:b8:ac:35:fc:95:c0:64:49:f3:
                    07:18:fd:c9:9c:bb:5d:71:8a:eb:95:4c:e6:09:28:
                    05:6e:f4:6d:de:7f:21:ee:ab:88:c2:72:4d:e4:0c:
                    c0:33:30:1d:70:0b:f5:1d:6a:c4:8b:e6:3c:30:a5:
                    c6:67:93:c0:09:20:29:c2:15:b9:cf:0a:da:25:10:
                    55:71:07:66:ed:90:d2:5f:f5:e1:07:6f:8d:5e:e4:
                    16:d0:44:d4:d3:bb:9f:bf:e1:a9:2c:6f:51:de:77:
                    d8:b0:24:88:3c:56:aa:0d:3b:46:3d:73:83:ea:f8:
                    9c:1d:92:30:a9:b5:e3:10:f4:a9:32:e5:17:08:f9:
                    dc:0e:8f:02:79:35:e9:3b:29:46:24:9f:80:08:23:
                    43:f8:15:e1:52:95:d7:71:38:ec:b7:cb:eb:58:9b:
                    4c:2d:10:2a:e2:7e:29:18:cf:a8:80:c2:4b:73:c4:
                    9d:55:22:1f:ef:80:57:41:0a:79:c7:1b:3f:4c:28:
                    df:3e:8b:8b:58:b3:a8:56:33:b9:3b:53:72:24:e3:
                    ad:32:24:59:47:95:43:8d:ce:82:12:7b:ba:1f:70:
                    19:ee:64:f5:88:de:60:be:21:5f:19:39:23:16:72:
                    c1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:15:93:CA:30:42:3B:24:BA:2C:62:B5:59:2D:31:4E:8B:CF:5D:02
            X509v3 Authority Key Identifier:
                keyid:6A:09:FD:17:0F:06:61:51:2C:CD:03:A6:20:29:1B:CA:B5:06:8D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/6A09FD170F0661512CCD03A620291BCAB5068D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A09FD170F0661512CCD03A620291BCAB5068D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/3138362e3134382e3139332e302f32342d3234203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:30:1b:53:f7:67:99:64:49:30:f6:d0:07:98:81:d2:91:47:
         e6:41:95:4d:6d:e5:73:80:11:00:0e:a2:e3:b0:1b:a9:fb:4b:
         f5:40:31:5a:81:7e:a8:ce:74:16:9e:a0:bc:0d:53:83:74:1f:
         57:10:e8:4a:3f:da:d0:c8:d3:17:f6:81:3c:0b:b2:5c:1b:d6:
         b6:58:5a:6f:c5:ae:54:b8:7a:e5:e6:e1:73:bc:ba:40:34:4f:
         f5:aa:bf:ff:9c:13:03:36:8c:63:ef:98:db:56:c4:30:0e:82:
         82:5a:c9:43:6b:ca:f3:84:23:22:61:fd:ff:be:95:6a:69:f3:
         fe:12:8f:3b:f0:93:90:78:ac:49:57:1e:11:f2:45:34:37:ba:
         ec:03:9e:be:0c:52:47:b8:96:75:f7:31:69:47:c5:de:06:9e:
         37:94:5d:b1:31:43:a2:89:d8:55:72:a6:20:79:38:c2:d6:88:
         48:1a:bd:87:a0:96:f1:29:a3:80:23:22:7a:8e:44:c8:8b:42:
         69:7d:ca:27:11:b9:27:f7:9a:e0:02:b8:a9:68:47:e9:ef:56:
         a8:eb:8e:06:04:26:2b:38:58:34:3b:fc:e5:a2:77:54:d3:34:
         25:e3:b9:d0:f0:05:32:94:7d:0a:ff:fe:a9:9e:b2:8b:ae:78:
         a8:ea:6e:de
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEMeUeGyNbqG3w9nf6TcwFDGEap0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwOUZEMTcwRjA2NjE1MTJDQ0QwM0E2MjAyOTFCQ0FC
NTA2OEQwNTAeFw0yNTAyMDQxODMyNTlaFw0yNjAyMDMxODM3NTlaMDMxMTAvBgNV
BAMTKEYzMTU5M0NBMzA0MjNCMjRCQTJDNjJCNTU5MkQzMTRFOEJDRjVEMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsql9nsqgusRCTArmJuK1LmtT
JbisNfyVwGRJ8wcY/cmcu11xiuuVTOYJKAVu9G3efyHuq4jCck3kDMAzMB1wC/Ud
asSL5jwwpcZnk8AJICnCFbnPCtolEFVxB2btkNJf9eEHb41e5BbQRNTTu5+/4aks
b1Hed9iwJIg8VqoNO0Y9c4Pq+JwdkjCpteMQ9Kky5RcI+dwOjwJ5Nek7KUYkn4AI
I0P4FeFSlddxOOy3y+tYm0wtECrifikYz6iAwktzxJ1VIh/vgFdBCnnHGz9MKN8+
i4tYs6hWM7k7U3Ik460yJFlHlUONzoISe7ofcBnuZPWI3mC+IV8ZOSMWcsGvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU8xWTyjBCOyS6LGK1WS0xTovPXQIwHwYDVR0j
BBgwFoAUagn9Fw8GYVEszQOmICkbyrUGjQUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Q0M0MzY4QTU4MzZCMDExMzUyMEUwNzlGNDc2RDU0ODc1
RUE4QzNEOTc0REI2RjJCMzNDOTNFMzg0MUQ0RTA2LzAvNkEwOUZEMTcwRjA2NjE1
MTJDQ0QwM0E2MjAyOTFCQ0FCNTA2OEQwNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTA5RkQxNzBGMDY2MTUxMkND
RDAzQTYyMDI5MUJDQUI1MDY4RDA1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUNDNDM2OEE1ODM2QjAxMTM1MjBFMDc5RjQ3NkQ1NDg3NUVBOEMzRDk3
NERCNkYyQjMzQzkzRTM4NDFENEUwNi8wLzMxMzgzNjJlMzEzNDM4MmUzMTM5MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzQzNjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAupTB
MA0GCSqGSIb3DQEBCwUAA4IBAQAjMBtT92eZZEkw9tAHmIHSkUfmQZVNbeVzgBEA
DqLjsBup+0v1QDFagX6oznQWnqC8DVODdB9XEOhKP9rQyNMX9oE8C7JcG9a2WFpv
xa5UuHrl5uFzvLpANE/1qr//nBMDNoxj75jbVsQwDoKCWslDa8rzhCMiYf3/vpVq
afP+Eo878JOQeKxJVx4R8kU0N7rsA56+DFJHuJZ19zFpR8XeBp43lF2xMUOiidhV
cqYgeTjC1ohIGr2HoJbxKaOAIyJ6jkTIi0JpfconEbkn95rgAripaEfp71ao644G
BCYrOFg0O/zlondU0zQl47nQ8AUylH0K//6pnrKLrnio6m7e
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:56 2025 by rpki-client