Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/3132382e3230312e3133322e302f32322d3234203d3e20323635373434.roa
File:                     3132382e3230312e3133322e302f32322d3234203d3e20323635373434.roa (raw, json)
Hash identifier:          T1r9G2s8BNnS6ehUG5ERAXuyU/jJqsHViRdRHEVL2tY=
Subject key identifier:   FE:BF:A5:7B:24:CC:AE:AA:50:6C:05:4C:93:10:5F:AD:A5:98:01:82
Certificate issuer:       /CN=186ECF434EE1BA05093EED97A8E8949E0569092F
Certificate serial:       281C22E4A9D07EA8E21D65C7A363DBDD75ED5184
Authority key identifier: 18:6E:CF:43:4E:E1:BA:05:09:3E:ED:97:A8:E8:94:9E:05:69:09:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186ECF434EE1BA05093EED97A8E8949E0569092F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/3132382e3230312e3133322e302f32322d3234203d3e20323635373434.roa
Signing time:             Tue 04 Feb 2025 18:20:21 +0000
ROA not before:           Tue 04 Feb 2025 18:15:21 +0000
ROA not after:            Tue 03 Feb 2026 18:20:21 +0000
asID:                     265744
IP address blocks:        128.201.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/186ECF434EE1BA05093EED97A8E8949E0569092F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/186ECF434EE1BA05093EED97A8E8949E0569092F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186ECF434EE1BA05093EED97A8E8949E0569092F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1c:22:e4:a9:d0:7e:a8:e2:1d:65:c7:a3:63:db:dd:75:ed:51:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186ECF434EE1BA05093EED97A8E8949E0569092F
        Validity
            Not Before: Feb  4 18:15:21 2025 GMT
            Not After : Feb  3 18:20:21 2026 GMT
        Subject: CN=FEBFA57B24CCAEAA506C054C93105FADA5980182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:a6:1b:a8:90:07:37:c5:fb:da:3a:a0:d9:
                    ce:84:04:2f:27:d1:ed:1c:9a:95:81:94:25:ca:0a:
                    81:fb:4a:72:14:2f:9b:53:da:48:f0:26:0f:70:5a:
                    3d:4e:7e:43:38:8e:2e:ed:8b:8e:42:a6:0a:6f:53:
                    2a:47:42:c1:1d:11:5a:8d:66:eb:db:16:52:a4:d5:
                    44:43:56:37:52:8e:fb:fe:82:78:39:13:2c:5e:bd:
                    8e:23:01:05:62:fc:17:19:cb:15:93:2e:e4:e4:ef:
                    d0:76:7f:51:52:be:9c:62:e8:3e:d5:5f:f5:45:67:
                    07:26:4e:a9:d4:20:b3:4b:d8:55:db:cf:b5:89:1a:
                    7f:e8:c9:c2:0e:d2:73:dd:de:34:7b:ee:eb:89:a8:
                    5f:06:14:49:dc:f4:f4:ca:23:7d:b3:3d:5b:4e:70:
                    71:5a:68:1e:82:03:0e:5f:be:75:dc:92:6d:70:31:
                    90:49:57:72:50:23:15:ac:7b:a8:13:b1:fc:57:88:
                    f9:3d:01:f2:c5:88:93:b3:ea:8f:e5:03:af:1f:f4:
                    8c:b8:bf:27:33:c6:91:33:8b:57:f4:53:d2:73:b3:
                    4b:00:62:0a:cc:88:70:f5:fe:9d:39:49:58:cc:1c:
                    28:06:77:8d:56:ae:38:99:d3:b1:2c:db:b5:7a:bd:
                    81:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BF:A5:7B:24:CC:AE:AA:50:6C:05:4C:93:10:5F:AD:A5:98:01:82
            X509v3 Authority Key Identifier:
                keyid:18:6E:CF:43:4E:E1:BA:05:09:3E:ED:97:A8:E8:94:9E:05:69:09:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/186ECF434EE1BA05093EED97A8E8949E0569092F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186ECF434EE1BA05093EED97A8E8949E0569092F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/3132382e3230312e3133322e302f32322d3234203d3e20323635373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:ab:97:c5:40:0a:e5:65:4d:c8:df:f6:02:4f:13:29:cb:25:
         24:56:02:72:58:3f:12:48:84:c8:20:d9:59:23:01:cd:08:d4:
         d5:3d:60:18:85:9d:e5:9d:a7:44:c2:ae:2f:36:7c:e3:2b:06:
         06:00:11:5e:b3:56:b8:2b:91:fb:bd:71:e7:97:37:ad:42:b6:
         ba:18:66:38:73:76:0b:5e:51:c3:ef:dd:52:e3:16:0d:d6:d5:
         8f:a2:c1:42:86:f9:94:31:d1:24:38:6b:e5:de:56:da:a9:18:
         62:e2:70:5d:a4:b1:bb:6c:22:47:78:91:6b:31:e4:7d:1a:48:
         a4:19:57:5f:47:47:c5:f5:a1:eb:3a:5d:4c:4c:db:d4:ac:61:
         62:86:97:aa:43:90:23:36:ed:5f:22:ac:d6:41:e0:ec:a1:57:
         cf:c2:5f:07:be:58:98:7e:da:0f:2b:a1:10:52:df:53:53:64:
         51:e4:91:bc:41:88:da:1e:b2:38:ff:03:33:94:10:82:a0:af:
         c7:3b:4c:01:fe:26:3c:e6:7f:a1:a3:43:f4:1c:59:de:58:27:
         63:69:d7:bf:37:2b:08:e9:66:a2:9b:47:8e:3d:e8:78:bc:e9:
         bb:ae:7b:97:02:5e:55:a0:93:ae:cb:3a:98:80:62:33:6f:57:
         95:3f:3c:ab
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUKBwi5KnQfqjiHWXHo2Pb3XXtUYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg2RUNGNDM0RUUxQkEwNTA5M0VFRDk3QThFODk0OUUw
NTY5MDkyRjAeFw0yNTAyMDQxODE1MjFaFw0yNjAyMDMxODIwMjFaMDMxMTAvBgNV
BAMTKEZFQkZBNTdCMjRDQ0FFQUE1MDZDMDU0QzkzMTA1RkFEQTU5ODAxODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbe6YbqJAHN8X72jqg2c6EBC8n
0e0cmpWBlCXKCoH7SnIUL5tT2kjwJg9wWj1OfkM4ji7ti45CpgpvUypHQsEdEVqN
ZuvbFlKk1URDVjdSjvv+gng5EyxevY4jAQVi/BcZyxWTLuTk79B2f1FSvpxi6D7V
X/VFZwcmTqnUILNL2FXbz7WJGn/oycIO0nPd3jR77uuJqF8GFEnc9PTKI32zPVtO
cHFaaB6CAw5fvnXckm1wMZBJV3JQIxWse6gTsfxXiPk9AfLFiJOz6o/lA68f9Iy4
vyczxpEzi1f0U9Jzs0sAYgrMiHD1/p05SVjMHCgGd41WrjiZ07Es27V6vYEbAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU/r+leyTMrqpQbAVMkxBfraWYAYIwHwYDVR0j
BBgwFoAUGG7PQ07hugUJPu2XqOiUngVpCS8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RUMwNzEyNDA5RkYzOTg1RDhEQTY0MkMwM0ZBMzVENjRE
NjIyQjRDMkRBNkI1OUQ3QjE4Q0MwOEI1QUNFNjAxLzAvMTg2RUNGNDM0RUUxQkEw
NTA5M0VFRDk3QThFODk0OUUwNTY5MDkyRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xODZFQ0Y0MzRFRTFCQTA1MDkz
RUVEOTdBOEU4OTQ5RTA1NjkwOTJGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkVDMDcxMjQwOUZGMzk4NUQ4REE2NDJDMDNGQTM1RDY0RDYyMkI0QzJE
QTZCNTlEN0IxOENDMDhCNUFDRTYwMS8wLzMxMzIzODJlMzIzMDMxMmUzMTMzMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNzM0MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKA
yYQwDQYJKoZIhvcNAQELBQADggEBABKrl8VACuVlTcjf9gJPEynLJSRWAnJYPxJI
hMgg2VkjAc0I1NU9YBiFneWdp0TCri82fOMrBgYAEV6zVrgrkfu9ceeXN61CtroY
ZjhzdgteUcPv3VLjFg3W1Y+iwUKG+ZQx0SQ4a+XeVtqpGGLicF2ksbtsIkd4kWsx
5H0aSKQZV19HR8X1oes6XUxM29SsYWKGl6pDkCM27V8irNZB4OyhV8/CXwe+WJh+
2g8roRBS31NTZFHkkbxBiNoesjj/AzOUEIKgr8c7TAH+Jjzmf6GjQ/QcWd5YJ2Np
1783KwjpZqKbR4496Hi86buue5cCXlWgk67LOpiAYjNvV5U/PKs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:16 2025 by rpki-client