Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231372e302f32342d3234203d3e20323632323036.roa
File:                     3138362e3138392e3231372e302f32342d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          TxQv3kPny7Y9SyGW0s3u932xRsiA7wk9OQ85vIohL5M=
Subject key identifier:   FD:2A:92:B9:CF:9E:99:ED:61:1D:E0:66:B6:7B:79:DF:7F:6C:43:53
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       394C2ED8F65C11B39B83B30B9A459409EB1EE241
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231372e302f32342d3234203d3e20323632323036.roa
Signing time:             Tue 04 Feb 2025 18:25:40 +0000
ROA not before:           Tue 04 Feb 2025 18:20:40 +0000
ROA not after:            Tue 03 Feb 2026 18:25:40 +0000
asID:                     262206
IP address blocks:        186.189.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4c:2e:d8:f6:5c:11:b3:9b:83:b3:0b:9a:45:94:09:eb:1e:e2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:40 2025 GMT
            Not After : Feb  3 18:25:40 2026 GMT
        Subject: CN=FD2A92B9CF9E99ED611DE066B67B79DF7F6C4353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:3d:dc:ab:82:47:80:b1:87:01:32:ae:af:
                    6d:20:e1:37:cb:70:dd:71:e9:49:19:c0:c3:88:18:
                    c3:2c:3e:6a:6b:a9:51:05:9d:66:ec:94:5e:85:47:
                    ff:11:40:1e:e8:d5:ac:3f:55:e4:87:cf:de:1c:47:
                    aa:4a:fc:76:af:ed:30:e7:54:fd:9b:8c:a6:6d:03:
                    8e:42:44:eb:e4:8c:d0:e3:af:fe:d5:c5:8d:5d:5d:
                    e8:a7:39:9f:43:1b:ad:e0:ed:e3:73:7a:90:ed:33:
                    56:8e:3a:d1:f7:9e:e6:32:15:76:84:f6:fb:43:54:
                    5c:be:5c:a1:32:d4:37:0f:8e:33:d2:3e:c2:b4:70:
                    35:c6:88:04:7c:4d:13:a7:e1:14:6c:73:f1:b4:e8:
                    1c:04:84:0f:28:22:5a:a4:11:b1:eb:75:b6:0b:75:
                    76:ca:da:db:05:67:e0:60:02:89:7d:e0:69:6d:ee:
                    a8:7e:45:d6:c0:2a:23:7f:8c:c3:bf:85:d3:bf:f8:
                    cb:02:32:b4:13:66:9c:bb:b7:a1:34:62:17:da:5a:
                    48:3b:9e:cd:46:0b:b2:1d:8b:07:d9:07:94:8f:3e:
                    5d:b4:f1:51:1c:bd:52:48:24:eb:1b:c3:e7:23:c9:
                    a6:fa:db:be:e7:6d:63:f5:8f:0a:59:f3:52:26:25:
                    8e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2A:92:B9:CF:9E:99:ED:61:1D:E0:66:B6:7B:79:DF:7F:6C:43:53
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231372e302f32342d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:2b:23:9c:37:0c:00:71:e9:83:ac:fb:57:57:5f:4c:fd:3d:
         6a:eb:f6:6e:11:f7:28:15:f6:4c:ca:87:7b:2a:3f:19:4a:a6:
         21:78:b4:df:ec:4e:eb:c1:72:74:19:57:ae:28:7d:7d:ef:39:
         1d:c6:d4:77:a1:e7:ee:e6:80:65:b1:63:3b:18:f2:fb:9c:32:
         27:0e:60:68:54:b1:92:cb:55:a0:ab:3c:12:7f:1c:01:68:c4:
         29:08:a1:71:bc:88:75:df:32:ff:42:6b:02:b5:8c:63:04:ec:
         10:84:53:b8:be:3b:44:1a:bc:ae:7e:5a:f3:50:50:28:a3:55:
         78:d2:4a:12:45:a4:78:77:f0:2d:50:ba:c1:fe:46:b3:65:99:
         a7:11:c0:86:c7:c1:d4:0f:3a:36:9d:b0:2f:fc:31:58:08:99:
         34:b9:d0:82:92:c9:45:99:43:9e:b2:51:0b:9b:15:3e:5a:ba:
         7f:2a:1d:0c:c8:2d:e2:9e:96:ea:eb:c2:92:17:38:45:f2:6d:
         0f:a2:fa:7e:55:6b:c5:e3:eb:5a:53:6f:4d:25:50:ed:da:a3:
         83:a8:7a:ab:9b:ca:6e:fc:90:b0:19:8d:92:b1:b7:eb:b9:d6:
         56:73:31:f8:d5:23:38:79:be:39:3c:d2:3b:34:c0:21:73:30:
         cd:2e:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:50 2025 by rpki-client