Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132342e302f32342d3234203d3e203532333731.roa
File:                     3138362e3135392e3132342e302f32342d3234203d3e203532333731.roa (raw, json)
Hash identifier:          5dsf4hX0TZDPvBoN40dwgZfcow7Us3qJgeuLLriY/0U=
Subject key identifier:   86:11:7F:B7:81:54:77:3A:36:F9:9D:EB:45:85:CC:8C:C5:57:7F:92
Certificate issuer:       /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Certificate serial:       5F49E756D5C65FFE3B9B87442B2A9B37A37D0DA0
Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132342e302f32342d3234203d3e203532333731.roa
Signing time:             Wed 17 Sep 2025 13:55:00 +0000
ROA not before:           Wed 17 Sep 2025 13:50:00 +0000
ROA not after:            Wed 16 Sep 2026 13:55:00 +0000
asID:                     52371
IP address blocks:        186.159.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:49:e7:56:d5:c6:5f:fe:3b:9b:87:44:2b:2a:9b:37:a3:7d:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
        Validity
            Not Before: Sep 17 13:50:00 2025 GMT
            Not After : Sep 16 13:55:00 2026 GMT
        Subject: CN=86117FB78154773A36F99DEB4585CC8CC5577F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:c5:4d:df:8f:52:24:8a:6b:b7:e6:14:8c:
                    7a:22:f1:76:60:87:18:64:47:55:82:db:e8:f3:43:
                    33:ad:88:24:63:5e:ce:61:38:23:9a:08:3d:c7:5e:
                    54:ef:89:e5:32:5a:7c:7f:f0:40:2c:e1:d9:81:06:
                    c1:0c:66:58:a5:82:10:3e:02:d4:86:e6:81:19:c4:
                    eb:f8:46:77:0e:11:29:21:f0:d9:68:5c:d0:82:09:
                    21:21:a9:4b:27:42:c0:3e:ec:7c:44:ab:95:01:f3:
                    12:ed:ee:f1:94:eb:fd:96:f6:0f:1e:bd:a0:48:27:
                    4a:e4:4b:2a:b6:08:69:9b:4f:79:d9:85:94:e4:91:
                    8f:74:10:71:cb:a0:1c:35:dd:5e:e9:b4:84:fa:9d:
                    17:dc:6c:29:40:9b:cf:ae:7d:0a:dc:f6:ab:8c:16:
                    c9:7d:82:81:ce:cd:fc:88:ae:1f:18:be:77:b6:dd:
                    e9:f9:89:2c:ab:3a:8a:c6:f4:2e:60:2b:ff:e6:74:
                    24:16:76:ea:02:d0:91:55:57:23:c7:0a:47:e9:a5:
                    c6:6e:2e:dc:8d:fa:12:22:b1:75:9c:fb:25:a0:5b:
                    76:72:10:37:f4:85:75:f4:0c:69:09:02:d2:29:89:
                    71:7f:79:a4:ba:b6:49:0b:43:9a:39:66:67:49:9e:
                    e3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:11:7F:B7:81:54:77:3A:36:F9:9D:EB:45:85:CC:8C:C5:57:7F:92
            X509v3 Authority Key Identifier:
                keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132342e302f32342d3234203d3e203532333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:9a:24:3e:c1:b7:6d:9f:fe:80:be:02:72:53:85:6e:17:f3:
         de:f8:de:6e:57:71:e6:53:c4:bc:6b:6b:55:a3:9a:4d:c3:d7:
         67:91:2d:82:cc:a7:f5:d0:e1:2b:8f:af:95:8e:bc:16:5a:dc:
         81:59:8b:a7:2f:55:c0:98:51:d8:8a:24:a4:37:d2:b6:93:39:
         82:e6:7a:9d:da:b9:16:9f:17:f7:87:45:51:9c:40:4a:d7:f8:
         56:82:41:c5:d4:d3:a6:61:88:9c:99:42:56:bd:91:97:7c:6b:
         79:74:f6:17:c4:18:04:04:41:c4:5b:03:87:86:77:4b:ef:47:
         3c:29:70:6e:04:38:4b:45:c2:ec:7f:3d:5b:84:e8:09:be:24:
         99:f0:22:4b:42:4d:eb:7a:ca:d1:9b:7a:99:54:f1:8b:3e:6c:
         96:e2:ee:90:31:83:8e:fc:c7:06:ea:80:bb:58:9b:bb:70:eb:
         0d:33:57:bb:7e:1b:fb:57:c3:0d:d5:58:44:49:7b:68:d0:94:
         17:34:36:d1:f2:94:69:dc:b0:50:da:de:4e:25:9f:35:28:fe:
         75:d9:d3:70:e6:4a:c4:27:ca:94:fc:8b:04:b3:55:f8:5c:da:
         f7:1c:a7:c1:55:52:96:73:6c:d2:6f:af:92:82:0b:27:b5:50:
         b6:86:70:c6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUX0nnVtXGX/47m4dEKyqbN6N9DaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA5QTRCNjZEOTIwNTJEQUE4QTUzNThEQjQ2NTQ0OUYw
MkQ1MkJBQjAeFw0yNTA5MTcxMzUwMDBaFw0yNjA5MTYxMzU1MDBaMDMxMTAvBgNV
BAMTKDg2MTE3RkI3ODE1NDc3M0EzNkY5OURFQjQ1ODVDQzhDQzU1NzdGOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjsVN349SJIprt+YUjHoi8XZg
hxhkR1WC2+jzQzOtiCRjXs5hOCOaCD3HXlTvieUyWnx/8EAs4dmBBsEMZlilghA+
AtSG5oEZxOv4RncOESkh8NloXNCCCSEhqUsnQsA+7HxEq5UB8xLt7vGU6/2W9g8e
vaBIJ0rkSyq2CGmbT3nZhZTkkY90EHHLoBw13V7ptIT6nRfcbClAm8+ufQrc9quM
Fsl9goHOzfyIrh8Yvne23en5iSyrOorG9C5gK//mdCQWduoC0JFVVyPHCkfppcZu
LtyN+hIisXWc+yWgW3ZyEDf0hXX0DGkJAtIpiXF/eaS6tkkLQ5o5ZmdJnuN5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhhF/t4FUdzo2+Z3rRYXMjMVXf5IwHwYDVR0j
BBgwFoAUIJpLZtkgUtqopTWNtGVEnwLVK6swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RjZCMzA4QzM2NjQ3RUJFOUU5NkQxRjRBNDEwMEJDODcy
RDM3ODc3QjlGQzU1M0E3RjU5M0ZDNEY5QzJCRDY3LzAvMjA5QTRCNjZEOTIwNTJE
QUE4QTUzNThEQjQ2NTQ0OUYwMkQ1MkJBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMDlBNEI2NkQ5MjA1MkRBQThB
NTM1OERCNDY1NDQ5RjAyRDUyQkFCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUY2QjMwOEMzNjY0N0VCRTlFOTZEMUY0QTQxMDBCQzg3MkQzNzg3N0I5
RkM1NTNBN0Y1OTNGQzRGOUMyQkQ2Ny8wLzMxMzgzNjJlMzEzNTM5MmUzMTMyMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAup98
MA0GCSqGSIb3DQEBCwUAA4IBAQBDmiQ+wbdtn/6AvgJyU4VuF/Pe+N5uV3HmU8S8
a2tVo5pNw9dnkS2CzKf10OErj6+VjrwWWtyBWYunL1XAmFHYiiSkN9K2kzmC5nqd
2rkWnxf3h0VRnEBK1/hWgkHF1NOmYYicmUJWvZGXfGt5dPYXxBgEBEHEWwOHhndL
70c8KXBuBDhLRcLsfz1bhOgJviSZ8CJLQk3resrRm3qZVPGLPmyW4u6QMYOO/McG
6oC7WJu7cOsNM1e7fhv7V8MN1VhESXto0JQXNDbR8pRp3LBQ2t5OJZ81KP512dNw
5krEJ8qU/IsEs1X4XNr3HKfBVVKWc2zSb6+SggsntVC2hnDG
-----END CERTIFICATE-----
Generated at Thu Sep 18 01:53:14 2025 by rpki-client