Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3230382e302f32322d3234203d3e203233323433.roa
File:                     3138362e3138392e3230382e302f32322d3234203d3e203233323433.roa (raw, json)
Hash identifier:          yRXGISHxu5z+L+TuWHhk4jtKXgNOyO1I8hDnAbkCMUw=
Subject key identifier:   7A:34:81:4C:C1:9B:0E:74:D6:88:28:1C:68:CC:3D:59:21:3C:F4:1C
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       04F0DF1B42B689F012C4865086F5B9092E761839
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3230382e302f32322d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:25:40 +0000
ROA not before:           Tue 04 Feb 2025 18:20:40 +0000
ROA not after:            Tue 03 Feb 2026 18:25:40 +0000
asID:                     23243
IP address blocks:        186.189.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f0:df:1b:42:b6:89:f0:12:c4:86:50:86:f5:b9:09:2e:76:18:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:40 2025 GMT
            Not After : Feb  3 18:25:40 2026 GMT
        Subject: CN=7A34814CC19B0E74D688281C68CC3D59213CF41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:77:c9:31:ba:3c:f9:fa:5a:e5:7a:62:bb:6b:
                    49:9d:c6:44:57:c5:14:15:09:ef:b5:2d:f5:10:6a:
                    d6:47:4f:af:b6:b9:8f:71:3c:c8:38:b5:49:32:d2:
                    e5:51:fb:ca:15:e2:04:e4:4e:ea:e7:2a:c9:02:ff:
                    fd:35:03:29:9e:89:a3:a3:9c:4b:f1:96:43:8b:4a:
                    05:8a:12:0a:e7:ea:19:d0:76:82:63:e3:2c:31:57:
                    22:85:cb:19:a8:54:3b:40:10:d8:d0:5e:c7:de:ee:
                    ca:b6:b6:8e:8a:ed:fc:53:33:eb:ed:d5:2c:33:62:
                    c1:69:e1:05:5f:d9:45:36:c1:72:af:47:63:c4:47:
                    f8:25:9e:7f:0d:43:45:e6:e4:c5:75:39:62:2c:ae:
                    46:89:92:b5:10:bf:8d:df:f2:06:40:35:7d:ee:c7:
                    19:2a:57:19:f9:ea:8f:d8:3e:a6:f7:af:d3:44:28:
                    bd:2e:cb:1f:0e:cd:ba:2f:5a:a6:4c:d8:90:54:07:
                    44:44:cb:10:93:13:a3:0f:77:eb:1b:c6:5a:fd:5a:
                    9b:ff:75:6d:cf:db:bb:8d:04:00:a9:1b:1f:94:53:
                    8f:15:bf:8e:67:18:b7:e2:53:2f:ac:82:65:c5:2f:
                    79:a9:40:48:ce:61:49:2d:f6:6d:1d:0f:f6:c5:28:
                    70:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:34:81:4C:C1:9B:0E:74:D6:88:28:1C:68:CC:3D:59:21:3C:F4:1C
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3230382e302f32322d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:48:1d:06:1c:3d:4a:5d:a9:4e:ff:ba:fb:10:12:3e:dd:95:
         bf:1f:36:87:17:c5:e9:8e:f2:58:13:e8:fa:72:75:69:fc:73:
         7c:b3:6a:99:b2:8a:f1:8c:cd:a6:96:29:8d:de:70:6d:e8:60:
         e4:b5:e6:fe:3a:f1:33:6c:d1:4a:2c:ac:97:12:e1:3b:83:41:
         96:fe:37:f3:02:ab:a3:a4:ec:04:3b:bd:43:6a:ec:12:4b:09:
         03:b3:a8:05:19:67:ca:09:ba:30:c0:ac:b8:c9:a1:6f:aa:c2:
         18:7f:6b:45:c2:e5:8f:e9:95:c4:5f:d7:54:87:56:ad:26:84:
         ba:61:8c:f7:94:54:a3:51:d8:d3:6a:bb:e9:4a:b8:6f:71:d1:
         3a:d3:c2:3c:11:ae:33:b0:2b:91:46:34:e4:69:2f:4b:b3:83:
         43:ad:3b:c5:9b:d0:0d:b7:53:4d:20:0b:12:14:d6:45:bf:2d:
         cc:be:98:09:0b:23:68:a1:c7:e8:0f:43:72:1b:c6:c7:18:95:
         66:64:91:92:0a:db:e8:a8:ab:ca:03:e3:a2:24:47:6d:1a:b4:
         f4:7c:9c:b8:75:ff:80:5c:f6:69:f2:80:b2:64:a1:69:a6:17:
         ab:52:74:15:6f:e2:89:78:4c:ce:ef:f5:27:c2:9c:f3:3b:6b:
         f6:6f:0c:5a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBPDfG0K2ifASxIZQhvW5CS52GDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxNDk5RDEyMDY3RjJCRUExMjg3QjYzNDI1RUEzQjcw
RkNBRkZDMTAeFw0yNTAyMDQxODIwNDBaFw0yNjAyMDMxODI1NDBaMDMxMTAvBgNV
BAMTKDdBMzQ4MTRDQzE5QjBFNzRENjg4MjgxQzY4Q0MzRDU5MjEzQ0Y0MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDd8kxujz5+lrlemK7a0mdxkRX
xRQVCe+1LfUQatZHT6+2uY9xPMg4tUky0uVR+8oV4gTkTurnKskC//01AymeiaOj
nEvxlkOLSgWKEgrn6hnQdoJj4ywxVyKFyxmoVDtAENjQXsfe7sq2to6K7fxTM+vt
1SwzYsFp4QVf2UU2wXKvR2PER/glnn8NQ0Xm5MV1OWIsrkaJkrUQv43f8gZANX3u
xxkqVxn56o/YPqb3r9NEKL0uyx8OzbovWqZM2JBUB0REyxCTE6MPd+sbxlr9Wpv/
dW3P27uNBACpGx+UU48Vv45nGLfiUy+sgmXFL3mpQEjOYUkt9m0dD/bFKHDvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUejSBTMGbDnTWiCgcaMw9WSE89BwwHwYDVR0j
BBgwFoAUjhSZ0SBn8r6hKHtjQl6jtw/K/8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTdENjU5ODQ4M0IwRDFFNTJFMjJERkU2N0IzN0YwM0VB
RTE4QTMzQUVDQzZFQzFCQzM2NDg2MUIxQjIxNENCLzAvOEUxNDk5RDEyMDY3RjJC
RUExMjg3QjYzNDI1RUEzQjcwRkNBRkZDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTE0OTlEMTIwNjdGMkJFQTEy
ODdCNjM0MjVFQTNCNzBGQ0FGRkMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzU3RDY1OTg0ODNCMEQxRTUyRTIyREZFNjdCMzdGMDNFQUUxOEEzM0FF
Q0M2RUMxQkMzNjQ4NjFCMUIyMTRDQi8wLzMxMzgzNjJlMzEzODM5MmUzMjMwMzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMzMzIzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCur3Q
MA0GCSqGSIb3DQEBCwUAA4IBAQCDSB0GHD1KXalO/7r7EBI+3ZW/HzaHF8XpjvJY
E+j6cnVp/HN8s2qZsorxjM2mlimN3nBt6GDkteb+OvEzbNFKLKyXEuE7g0GW/jfz
AqujpOwEO71DauwSSwkDs6gFGWfKCbowwKy4yaFvqsIYf2tFwuWP6ZXEX9dUh1at
JoS6YYz3lFSjUdjTarvpSrhvcdE608I8Ea4zsCuRRjTkaS9Ls4NDrTvFm9ANt1NN
IAsSFNZFvy3MvpgJCyNoocfoD0NyG8bHGJVmZJGSCtvoqKvKA+OiJEdtGrT0fJy4
df+AXPZp8oCyZKFppherUnQVb+KJeEzO7/UnwpzzO2v2bwxa
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:40 2025 by rpki-client