Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232332e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3232332e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          4NQ5MICsAmrhDOTwFCoEZ0fsFzPrP+JpEIvo/qExHTE=
Subject key identifier:   B1:56:B7:46:25:2A:B2:19:37:3E:E4:2B:A3:2E:63:85:76:80:3C:21
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       5933FA560E77D989A5B2696CC0D714663444C31D
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232332e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 04 Feb 2025 18:34:14 +0000
ROA not before:           Tue 04 Feb 2025 18:29:14 +0000
ROA not after:            Tue 03 Feb 2026 18:34:14 +0000
asID:                     262189
IP address blocks:        186.1.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:33:fa:56:0e:77:d9:89:a5:b2:69:6c:c0:d7:14:66:34:44:c3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Feb  4 18:29:14 2025 GMT
            Not After : Feb  3 18:34:14 2026 GMT
        Subject: CN=B156B746252AB219373EE42BA32E638576803C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:31:19:e5:62:80:e5:ea:9f:fa:61:a8:9f:b2:
                    6f:8b:d0:39:e9:91:73:39:e4:f3:e7:a5:97:b7:64:
                    c0:c9:5f:e5:2f:a1:65:cd:11:86:12:cd:c1:12:29:
                    0b:39:06:c7:5c:c7:d8:fb:fd:1a:74:e4:79:91:98:
                    5d:6c:33:8f:64:70:a8:36:7a:73:40:3d:fb:ce:2c:
                    97:2e:21:79:14:0c:dc:d8:51:26:6b:31:b6:6f:9f:
                    21:58:53:d7:90:6b:d2:e3:f7:03:e3:02:bc:8c:55:
                    89:20:01:40:34:7e:fa:f0:01:aa:9c:44:7f:25:67:
                    ea:1d:d2:37:b6:b1:65:e2:6e:6b:90:b0:bd:a5:11:
                    64:b9:5c:14:9f:56:d2:8a:3c:77:67:c5:0c:b5:a1:
                    d7:94:7a:2b:84:76:7b:27:e0:53:ac:c8:e3:77:b3:
                    11:93:50:3f:05:2b:e9:9b:52:e8:23:5e:01:46:00:
                    84:37:a8:53:92:72:f8:d9:e0:ee:58:74:10:95:fd:
                    98:21:a9:b3:fa:51:71:dc:56:2b:27:4a:f9:f8:53:
                    13:7e:e6:8b:ca:d5:f8:ed:ca:d3:fc:1f:02:e4:e9:
                    38:21:dd:9d:21:74:61:3d:40:e6:4b:f1:50:80:41:
                    36:55:25:76:a1:2f:06:e4:25:9b:53:a8:d7:2d:6d:
                    5e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:56:B7:46:25:2A:B2:19:37:3E:E4:2B:A3:2E:63:85:76:80:3C:21
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232332e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e5:59:bc:b8:d2:96:21:92:50:50:19:cd:5c:82:99:48:d6:
         a1:83:cf:61:68:61:f4:8d:9d:3f:4e:7c:2e:47:54:75:c6:40:
         74:22:7d:cf:61:35:f2:c4:c1:db:c1:d2:71:ba:16:1b:5b:33:
         68:56:fe:7d:67:c3:2e:cc:4a:b6:31:30:4c:be:db:09:fa:dc:
         46:49:aa:a2:e9:77:dc:89:50:07:e0:a9:6f:22:f1:d8:40:62:
         38:fc:54:8f:5d:f6:ce:d8:59:2d:1a:6c:c1:0d:c6:48:fa:86:
         e0:41:67:8a:eb:b4:02:4e:93:8d:5c:41:ba:a3:9f:64:fb:cc:
         85:e6:f3:97:f0:5d:a7:d2:a5:ce:79:95:c5:7a:dc:13:5d:b2:
         21:85:e9:c7:36:1a:a4:39:0c:a7:0e:da:bf:35:75:3c:04:c9:
         f5:95:35:9c:11:23:45:51:8f:33:28:b4:88:c6:6f:0a:f9:bb:
         10:65:6c:d9:e5:6f:9e:e3:15:c5:90:71:37:9d:ea:8f:5a:54:
         18:f9:32:e3:a1:60:50:4f:0b:49:b0:1b:8f:7d:3b:88:db:75:
         85:fd:e1:83:a6:a3:24:c1:8c:17:60:47:42:54:7b:f1:32:95:
         39:25:0c:6e:56:5a:36:f6:e2:64:34:81:3a:33:7e:7c:ff:d4:
         e4:c1:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:22 2025 by rpki-client