Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232322e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3232322e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          8P6uoaAyaJNUXeduBLD9ewwCtJQRaxMc8qRil4bdniw=
Subject key identifier:   30:DF:31:10:CC:E7:CF:DE:92:BE:4F:8D:81:BE:5E:A9:17:4C:4E:63
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       5D9CB5E0A81DA7E68C21F3DADDC2D91E57C17537
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232322e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 04 Feb 2025 18:34:10 +0000
ROA not before:           Tue 04 Feb 2025 18:29:10 +0000
ROA not after:            Tue 03 Feb 2026 18:34:10 +0000
asID:                     262189
IP address blocks:        186.1.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9c:b5:e0:a8:1d:a7:e6:8c:21:f3:da:dd:c2:d9:1e:57:c1:75:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Feb  4 18:29:10 2025 GMT
            Not After : Feb  3 18:34:10 2026 GMT
        Subject: CN=30DF3110CCE7CFDE92BE4F8D81BE5EA9174C4E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:01:97:f8:99:8a:0e:5b:48:79:f6:45:8a:
                    56:d0:55:b3:a3:88:06:dc:33:c1:07:7f:1b:ec:1b:
                    be:5a:10:01:cd:9f:df:b3:8e:e2:39:f0:39:a1:52:
                    90:f4:ca:a8:37:56:f1:cb:5a:d5:26:ab:6f:e2:70:
                    30:cc:fc:9b:5d:7d:ee:7f:b7:12:91:06:ce:0b:d9:
                    4b:a6:9f:66:17:ae:54:f8:03:ca:e7:9e:aa:59:10:
                    d0:6d:e7:9c:6d:09:7f:9b:90:99:4d:da:78:c8:d7:
                    e9:3f:80:3e:c4:a6:ed:61:35:d2:bf:da:76:df:aa:
                    e9:73:72:4b:cd:57:e0:91:0a:90:f0:9e:77:4b:04:
                    9d:78:98:d7:98:53:a3:13:82:f2:9e:5b:98:5d:bd:
                    5c:47:f9:c0:3e:17:84:9d:8b:bd:d4:55:ca:35:b6:
                    04:52:de:99:c3:d6:63:d1:c8:d3:bb:30:af:41:7b:
                    d9:fd:b8:6f:8b:3a:7b:c1:88:ed:b6:e4:fd:e8:b4:
                    18:4c:73:68:30:cb:23:69:d8:7f:92:f4:e5:2d:9a:
                    cc:07:b6:45:98:89:29:9b:7d:53:f5:98:bb:0b:b0:
                    92:26:0d:d6:11:84:9b:37:7c:92:bd:79:1f:f8:82:
                    41:15:54:b1:37:06:2d:fb:20:7e:6f:5f:25:0c:0b:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DF:31:10:CC:E7:CF:DE:92:BE:4F:8D:81:BE:5E:A9:17:4C:4E:63
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232322e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:3a:2a:38:2b:63:b2:e0:b1:6b:ed:1d:c0:98:ac:ac:7c:d1:
         6b:15:67:e9:03:53:bf:8d:25:ad:ef:91:ff:a3:b0:2d:73:cd:
         24:3d:01:de:fe:98:41:1d:42:53:ce:56:3f:b2:7c:bf:82:3f:
         d7:6c:b5:1e:e5:7f:bf:d8:af:be:03:28:c4:60:e9:b8:5a:0a:
         50:db:04:cd:06:2e:b3:e7:09:e1:d9:23:de:96:3d:4d:e3:a4:
         fd:11:69:d5:64:4f:99:32:2a:d3:17:53:83:65:f1:92:cc:cf:
         26:aa:14:19:1d:1f:8b:5f:e3:68:5f:e6:74:68:40:d7:29:5c:
         ed:46:67:f3:0e:c8:3f:c0:13:ed:7a:20:44:3d:e8:a6:60:af:
         76:aa:20:a3:40:48:af:83:81:ca:45:6f:de:7e:60:27:be:3b:
         e3:51:b2:d6:b6:94:a8:bd:73:8f:27:8b:f1:68:1d:dc:0a:67:
         eb:2b:dd:18:eb:14:40:98:c0:9b:f2:47:e6:b1:78:fa:31:04:
         a4:e7:c8:ec:a3:fc:9c:9b:7b:5d:e1:bb:2e:9b:16:1c:68:fa:
         f8:61:02:89:85:9b:f5:df:fe:a8:ec:8d:d8:a9:b6:54:ea:67:
         c2:1f:9c:0b:bb:15:42:85:3b:42:24:ab:ff:e5:00:39:cc:4c:
         6a:14:a5:c8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXZy14Kgdp+aMIfPa3cLZHlfBdTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk4NTRFNzI1RDg3QkM3MkRBNUU2MkJDMTI2NzA4N0Yz
REU3QUMyQzAeFw0yNTAyMDQxODI5MTBaFw0yNjAyMDMxODM0MTBaMDMxMTAvBgNV
BAMTKDMwREYzMTEwQ0NFN0NGREU5MkJFNEY4RDgxQkU1RUE5MTc0QzRFNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GAGX+JmKDltIefZFilbQVbOj
iAbcM8EHfxvsG75aEAHNn9+zjuI58DmhUpD0yqg3VvHLWtUmq2/icDDM/Jtdfe5/
txKRBs4L2Uumn2YXrlT4A8rnnqpZENBt55xtCX+bkJlN2njI1+k/gD7Epu1hNdK/
2nbfqulzckvNV+CRCpDwnndLBJ14mNeYU6MTgvKeW5hdvVxH+cA+F4Sdi73UVco1
tgRS3pnD1mPRyNO7MK9Be9n9uG+LOnvBiO225P3otBhMc2gwyyNp2H+S9OUtmswH
tkWYiSmbfVP1mLsLsJImDdYRhJs3fJK9eR/4gkEVVLE3Bi37IH5vXyUMC2UxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUMN8xEMznz96Svk+Ngb5eqRdMTmMwHwYDVR0j
BBgwFoAUKYVOcl2HvHLaXmK8EmcIfz3nrCwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Mjg3REIwNkYxOEQ1QTc5Q0EwRkNBNzhEQUE2MjBCQzQz
QzE0OTA3RjdDMURDNEYxRUMzNzlCOTc3QUNCRjMwLzAvMjk4NTRFNzI1RDg3QkM3
MkRBNUU2MkJDMTI2NzA4N0YzREU3QUMyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTg1NEU3MjVEODdCQzcyREE1
RTYyQkMxMjY3MDg3RjNERTdBQzJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTI4N0RCMDZGMThENUE3OUNBMEZDQTc4REFBNjIwQkM0M0MxNDkwN0Y3
QzFEQzRGMUVDMzc5Qjk3N0FDQkYzMC8wLzMxMzgzNjJlMzEyZTMyMzIzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALoB3jAN
BgkqhkiG9w0BAQsFAAOCAQEARToqOCtjsuCxa+0dwJisrHzRaxVn6QNTv40lre+R
/6OwLXPNJD0B3v6YQR1CU85WP7J8v4I/12y1HuV/v9ivvgMoxGDpuFoKUNsEzQYu
s+cJ4dkj3pY9TeOk/RFp1WRPmTIq0xdTg2XxkszPJqoUGR0fi1/jaF/mdGhA1ylc
7UZn8w7IP8AT7XogRD3opmCvdqogo0BIr4OBykVv3n5gJ74741Gy1raUqL1zjyeL
8Wgd3Apn6yvdGOsUQJjAm/JH5rF4+jEEpOfI7KP8nJt7XeG7LpsWHGj6+GECiYWb
9d/+qOyN2Km2VOpnwh+cC7sVQoU7QiSr/+UAOcxMahSlyA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:24 2025 by rpki-client