Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232312e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3232312e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          qE7Nc9LYoMVYgQsSJtbjpG3Pj9AT1hmMz85JKPpayDM=
Subject key identifier:   A0:4B:3D:A9:CA:18:08:83:9E:BF:DD:73:F6:24:52:50:C1:7E:B7:28
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       290B5ABC70B0CFF7E2C5F3877D8458C1D2A9F2B4
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232312e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 04 Feb 2025 18:34:10 +0000
ROA not before:           Tue 04 Feb 2025 18:29:10 +0000
ROA not after:            Tue 03 Feb 2026 18:34:10 +0000
asID:                     262189
IP address blocks:        186.1.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0b:5a:bc:70:b0:cf:f7:e2:c5:f3:87:7d:84:58:c1:d2:a9:f2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Feb  4 18:29:10 2025 GMT
            Not After : Feb  3 18:34:10 2026 GMT
        Subject: CN=A04B3DA9CA1808839EBFDD73F6245250C17EB728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bf:92:26:0e:37:b6:1d:7b:b2:da:1a:5b:2e:
                    26:f4:03:6d:ae:9c:0c:01:aa:e5:3f:1c:33:c0:30:
                    c4:6c:e7:25:8d:6d:23:23:4d:80:4e:c7:39:27:31:
                    1d:ee:96:9b:7d:34:4d:27:b5:80:b6:d3:9f:b0:7c:
                    92:86:e6:2c:8c:08:31:52:02:81:a6:97:90:65:d2:
                    34:56:97:ed:1d:e9:4c:79:32:aa:f3:4e:99:08:6f:
                    20:3d:f2:a5:0e:7e:13:58:08:8c:49:f5:a2:ef:22:
                    84:a9:f9:98:11:43:85:bf:37:92:73:5b:34:d3:9e:
                    40:ab:cf:cf:83:74:ed:85:53:4c:7a:57:13:1d:3d:
                    36:8e:da:af:2b:78:c8:b3:6c:0b:9b:f4:8e:4c:b0:
                    1e:91:3b:04:a6:d7:31:a5:25:44:e5:f6:a0:32:e8:
                    ca:99:7a:11:4d:15:f7:25:6e:9f:b6:67:d7:9a:65:
                    76:af:a0:09:69:6d:34:8a:19:3d:00:cb:96:66:41:
                    2d:91:2f:48:7b:82:fe:9f:dc:98:76:25:20:7e:40:
                    88:43:51:5f:7e:04:75:59:66:56:65:51:4b:42:e1:
                    be:d0:e7:35:94:97:2e:ac:ba:8e:05:ea:43:bc:1c:
                    74:c6:c3:63:90:1e:5c:f6:ea:98:ef:05:ec:c8:a2:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4B:3D:A9:CA:18:08:83:9E:BF:DD:73:F6:24:52:50:C1:7E:B7:28
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232312e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c5:5d:e2:12:ab:20:05:d4:65:d3:c4:8e:dc:4d:64:a0:f0:
         67:6e:87:62:76:a2:15:f8:2c:ab:07:6a:84:dc:1c:6e:2c:2e:
         70:b7:c7:d6:ba:b8:95:3a:44:d6:20:52:36:c3:76:43:1c:54:
         e3:96:01:e0:91:98:0e:35:c4:4b:66:f8:0d:16:bb:02:c8:95:
         80:12:b6:9f:b6:11:01:4c:4b:38:d3:2f:05:58:5b:91:21:21:
         8b:b1:6d:a3:a0:00:3d:53:36:72:d0:d7:f8:91:53:75:ec:58:
         44:1f:1b:b0:48:1f:bd:36:93:5b:8a:8b:1c:4c:3d:b3:76:0c:
         15:14:ef:09:e2:9c:67:b8:9b:4d:ea:27:d3:b4:a7:7d:85:45:
         dc:06:f5:9d:3f:cc:0d:f2:35:d3:53:c5:b8:03:14:11:8b:48:
         8e:6c:81:46:0b:f1:9b:c2:5d:3a:87:15:9c:cb:2d:db:4c:7a:
         e9:fb:76:71:0a:25:df:62:16:e3:15:90:f6:9c:2c:26:8f:da:
         62:c1:36:3f:8a:70:7d:2e:fa:92:d4:21:20:17:23:56:bf:3e:
         38:93:06:db:ab:b6:da:e6:64:f9:c4:d6:7d:f5:09:f3:c1:56:
         47:b5:4a:f7:eb:47:08:9b:6b:36:19:37:c7:18:74:aa:f0:a3:
         ed:9a:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:43 2025 by rpki-client