Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232302e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3232302e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          6Yf8S1Pg6ZhtB0A+D3jgxjG/xmd1XkHT9C2KODQW6UM=
Subject key identifier:   B6:B2:6A:51:06:CA:99:F6:F2:D9:CA:91:CB:F0:E9:4B:D8:1A:84:FD
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       3EBE6C09F5D025BE2C2E998A963A20A8F62AC596
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232302e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 04 Feb 2025 18:34:13 +0000
ROA not before:           Tue 04 Feb 2025 18:29:13 +0000
ROA not after:            Tue 03 Feb 2026 18:34:13 +0000
asID:                     262189
IP address blocks:        186.1.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:be:6c:09:f5:d0:25:be:2c:2e:99:8a:96:3a:20:a8:f6:2a:c5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Feb  4 18:29:13 2025 GMT
            Not After : Feb  3 18:34:13 2026 GMT
        Subject: CN=B6B26A5106CA99F6F2D9CA91CBF0E94BD81A84FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:2e:1d:0a:ff:b4:0a:0f:6e:f5:84:dc:41:
                    f6:75:f1:1a:06:79:87:ca:a7:0d:f9:20:5f:20:26:
                    2d:9f:d9:8c:11:b9:64:7e:02:d6:8d:a2:6d:84:10:
                    9f:73:eb:38:ff:80:17:b4:16:d0:27:ea:1c:43:b1:
                    34:93:b7:6b:80:97:a8:44:f1:e5:37:97:9f:d3:c7:
                    ff:17:8c:db:29:a9:ad:24:81:e4:c4:05:2e:38:23:
                    40:e6:c5:1c:de:9e:ed:ab:25:18:52:5a:5c:2e:e2:
                    69:b9:64:91:6c:42:2a:b8:78:46:a5:d9:07:b5:13:
                    d8:34:01:37:25:47:c4:0b:cd:b1:87:94:4a:ae:32:
                    71:7b:2a:4c:e9:d7:df:57:47:e5:c6:e7:4d:36:a1:
                    06:1f:d8:07:d2:81:64:84:21:ba:44:4c:19:fa:ed:
                    3f:3c:dc:c0:e4:30:c0:cf:06:0d:7c:93:a7:81:ee:
                    4e:06:ef:32:64:c7:6a:23:72:99:0d:4d:8a:31:4b:
                    98:a2:26:ea:b2:b3:91:9a:97:70:45:40:aa:34:a0:
                    ad:4f:cc:43:1c:29:a2:a3:01:46:73:4d:80:25:5f:
                    43:ae:3a:63:97:7d:9b:21:ef:a3:fe:06:0f:fe:44:
                    2d:59:39:38:b3:88:6e:12:31:3a:0e:a5:8d:fa:43:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B2:6A:51:06:CA:99:F6:F2:D9:CA:91:CB:F0:E9:4B:D8:1A:84:FD
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232302e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a3:f3:fb:98:5d:f9:35:12:6a:a2:b0:28:c5:70:1d:12:ae:
         4d:2f:3b:4a:ec:ba:e7:33:27:c7:d2:42:64:e5:8b:05:45:0a:
         13:2c:fe:95:85:22:cb:3d:71:5f:9b:7e:d8:3f:bd:ce:43:7b:
         6f:2d:9f:7c:69:2e:99:fb:3e:ac:46:8d:e6:7f:3e:cc:f0:69:
         18:d5:6a:bc:4e:1d:24:19:fb:17:e4:98:87:8b:66:1d:a7:fc:
         39:17:e2:88:eb:28:b3:9e:19:25:a3:f6:ab:3e:2c:a2:2a:1a:
         fe:ce:4e:ed:59:5e:d6:c5:f6:c5:7e:39:0a:86:b0:08:42:55:
         41:4b:b7:2c:d2:65:b2:df:88:13:b8:ba:9e:4c:4e:5e:bd:1e:
         96:ca:6d:22:18:51:21:54:f9:62:19:6d:b6:f2:3f:cc:87:34:
         f5:8f:86:96:56:3b:ee:6c:f3:23:11:3a:d7:c2:20:fd:11:87:
         d8:d3:b3:25:47:33:ec:e9:6a:ff:3a:b8:59:3d:f7:04:25:39:
         9d:36:c7:81:45:e5:df:45:af:2b:ce:29:6f:d0:44:30:98:21:
         8a:8c:91:b2:7f:67:47:5d:23:ef:a6:17:10:04:54:b9:2c:cb:
         c0:43:1a:5b:6d:86:af:bc:b7:e3:21:ec:33:f0:00:3c:06:bf:
         ce:56:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:09 2025 by rpki-client