Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231372e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3231372e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          q11w1lKSMITJEjnWusUFjPiKiW6+h2xO17c+6OQD6v8=
Subject key identifier:   10:55:CB:98:A0:BD:01:72:19:90:87:1F:DE:F0:12:97:A4:F6:BA:C9
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       4045F27AE54BC538145D33D05DD90FF2F405FCD4
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231372e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 05 Mar 2024 17:56:07 +0000
ROA not before:           Tue 05 Mar 2024 17:51:07 +0000
ROA not after:            Tue 04 Mar 2025 17:56:07 +0000
asID:                     262189
IP address blocks:        186.1.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:45:f2:7a:e5:4b:c5:38:14:5d:33:d0:5d:d9:0f:f2:f4:05:fc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Mar  5 17:51:07 2024 GMT
            Not After : Mar  4 17:56:07 2025 GMT
        Subject: CN=1055CB98A0BD01721990871FDEF01297A4F6BAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:00:42:95:b6:84:50:aa:ce:30:d9:ba:c5:
                    e4:ac:6f:31:4e:51:3c:9f:d0:a5:6b:cd:e4:c9:de:
                    6e:28:64:bb:15:c6:c1:a8:82:fe:0f:55:3b:34:07:
                    28:12:17:dd:c4:48:a7:98:16:a3:f9:41:f2:76:5d:
                    67:b0:54:3e:af:a0:d2:d7:c9:02:70:07:2a:b8:1b:
                    b8:e1:3e:80:17:23:1c:5e:bb:3e:a5:50:5e:4d:c6:
                    6b:e8:8b:05:2a:cd:31:43:9f:96:5f:80:81:71:24:
                    bf:d1:e1:b6:76:e9:d7:cc:dc:f6:0f:83:d1:a5:12:
                    e1:7a:5b:29:51:e5:fe:54:e7:3f:28:85:ee:b1:60:
                    67:08:74:cf:c1:23:d5:8e:e3:bb:e3:16:98:f3:60:
                    4d:e2:07:cf:b1:d1:b0:c6:14:64:75:17:b0:0d:b0:
                    bb:9d:a0:62:e0:5c:97:6e:8a:24:f7:3e:02:35:f9:
                    f9:b1:2d:a1:30:d6:43:40:c5:2a:0a:2d:d2:79:de:
                    36:5f:c8:3b:f9:8e:22:f4:ca:46:fa:9b:e2:d6:45:
                    0c:1b:43:06:63:b9:c8:56:9e:0e:d9:67:11:e7:08:
                    72:55:24:3c:1e:94:24:f7:e9:57:ad:81:cf:90:5b:
                    6b:3a:9e:9e:db:4e:8d:c2:9b:0e:90:80:96:b1:7b:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:55:CB:98:A0:BD:01:72:19:90:87:1F:DE:F0:12:97:A4:F6:BA:C9
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231372e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b4:09:3f:33:63:42:0a:8f:b8:5c:2b:dd:e0:f4:8b:42:1f:
         80:b1:5f:7f:30:04:84:12:26:d5:61:01:8b:a7:53:5e:a2:82:
         d2:a9:04:f5:0f:c9:cf:eb:3f:e7:bb:6d:62:49:11:49:41:62:
         35:03:16:b7:03:1e:ae:34:c0:f7:49:3c:30:69:9d:9b:90:24:
         75:10:ef:bd:20:a0:9a:a0:ef:d5:56:3a:82:7f:a5:c5:d5:98:
         71:34:9a:16:ac:9d:7b:da:2d:7f:15:3a:02:6c:55:87:64:f5:
         4e:20:cf:61:11:20:42:e0:a7:c6:35:1e:79:28:4b:53:42:0a:
         1a:4a:00:d4:00:ee:af:1b:fd:f0:5e:f9:94:47:71:d8:39:21:
         b8:2b:a9:7a:29:5d:b5:d4:ee:b9:f2:d4:cf:ea:70:d5:d0:81:
         08:3f:7c:11:da:32:65:b1:0c:97:4a:b6:d2:cc:c2:89:05:33:
         06:73:6a:37:4f:57:e0:66:ce:71:20:a7:e5:63:a9:98:9d:de:
         81:c1:6b:ba:68:4a:76:28:f5:d5:69:91:ec:ab:8e:72:7e:f0:
         23:1d:a3:b0:94:d2:d3:6e:39:34:ce:24:8c:69:e3:80:b1:32:
         e8:5f:c6:40:88:77:ec:2e:4b:ad:1d:e9:90:2d:ea:a0:ba:38:
         a1:ef:b9:39
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQEXyeuVLxTgUXTPQXdkP8vQF/NQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk4NTRFNzI1RDg3QkM3MkRBNUU2MkJDMTI2NzA4N0Yz
REU3QUMyQzAeFw0yNDAzMDUxNzUxMDdaFw0yNTAzMDQxNzU2MDdaMDMxMTAvBgNV
BAMTKDEwNTVDQjk4QTBCRDAxNzIxOTkwODcxRkRFRjAxMjk3QTRGNkJBQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaNABClbaEUKrOMNm6xeSsbzFO
UTyf0KVrzeTJ3m4oZLsVxsGogv4PVTs0BygSF93ESKeYFqP5QfJ2XWewVD6voNLX
yQJwByq4G7jhPoAXIxxeuz6lUF5NxmvoiwUqzTFDn5ZfgIFxJL/R4bZ26dfM3PYP
g9GlEuF6WylR5f5U5z8ohe6xYGcIdM/BI9WO47vjFpjzYE3iB8+x0bDGFGR1F7AN
sLudoGLgXJduiiT3PgI1+fmxLaEw1kNAxSoKLdJ53jZfyDv5jiL0ykb6m+LWRQwb
QwZjuchWng7ZZxHnCHJVJDwelCT36Vetgc+QW2s6np7bTo3Cmw6QgJaxew49AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUEFXLmKC9AXIZkIcf3vASl6T2uskwHwYDVR0j
BBgwFoAUKYVOcl2HvHLaXmK8EmcIfz3nrCwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Mjg3REIwNkYxOEQ1QTc5Q0EwRkNBNzhEQUE2MjBCQzQz
QzE0OTA3RjdDMURDNEYxRUMzNzlCOTc3QUNCRjMwLzAvMjk4NTRFNzI1RDg3QkM3
MkRBNUU2MkJDMTI2NzA4N0YzREU3QUMyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTg1NEU3MjVEODdCQzcyREE1
RTYyQkMxMjY3MDg3RjNERTdBQzJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTI4N0RCMDZGMThENUE3OUNBMEZDQTc4REFBNjIwQkM0M0MxNDkwN0Y3
QzFEQzRGMUVDMzc5Qjk3N0FDQkYzMC8wLzMxMzgzNjJlMzEyZTMyMzEzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALoB2TAN
BgkqhkiG9w0BAQsFAAOCAQEASbQJPzNjQgqPuFwr3eD0i0IfgLFffzAEhBIm1WEB
i6dTXqKC0qkE9Q/Jz+s/57ttYkkRSUFiNQMWtwMerjTA90k8MGmdm5AkdRDvvSCg
mqDv1VY6gn+lxdWYcTSaFqyde9otfxU6AmxVh2T1TiDPYREgQuCnxjUeeShLU0IK
GkoA1ADurxv98F75lEdx2DkhuCupeildtdTuufLUz+pw1dCBCD98EdoyZbEMl0q2
0szCiQUzBnNqN09X4GbOcSCn5WOpmJ3egcFrumhKdij11WmR7KuOcn7wIx2jsJTS
0245NM4kjGnjgLEy6F/GQIh37C5LrR3pkC3qoLo4oe+5OQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org