Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139342e302f32342d3234203d3e203532343930.roa
File:                     3138362e39362e3139342e302f32342d3234203d3e203532343930.roa (raw, json)
Hash identifier:          2gCQtqEZBXYgOUFJ2jQfL2I4kd8XNbUy8f09SetP84o=
Subject key identifier:   44:24:9E:B3:4B:93:22:BA:29:A1:5E:3D:86:06:57:29:FE:85:A9:0D
Certificate issuer:       /CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
Certificate serial:       7247736F600059BEFE720B7EBDD57474F2574D23
Authority key identifier: 61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139342e302f32342d3234203d3e203532343930.roa
Signing time:             Tue 04 Feb 2025 18:49:05 +0000
ROA not before:           Tue 04 Feb 2025 18:44:05 +0000
ROA not after:            Tue 03 Feb 2026 18:49:05 +0000
asID:                     52490
IP address blocks:        186.96.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 04:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:47:73:6f:60:00:59:be:fe:72:0b:7e:bd:d5:74:74:f2:57:4d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
        Validity
            Not Before: Feb  4 18:44:05 2025 GMT
            Not After : Feb  3 18:49:05 2026 GMT
        Subject: CN=44249EB34B9322BA29A15E3D86065729FE85A90D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:4c:f6:c8:58:bc:c4:57:1e:d0:8b:aa:43:
                    1b:53:d2:a2:86:13:2e:bc:22:0e:aa:c6:31:bd:2d:
                    7d:ab:0b:bb:7a:e2:00:b6:4a:15:fd:ee:dc:95:e9:
                    0f:5d:77:d3:1a:a4:c4:d0:6e:36:51:7c:18:79:5b:
                    b4:6b:38:fe:af:f0:f6:89:b7:3d:00:8c:b5:42:a1:
                    19:6f:fa:8f:0a:10:ec:d8:59:fc:3a:b3:2e:ba:64:
                    6b:5d:76:ac:66:1d:df:fc:83:1b:84:0a:c7:cd:95:
                    38:08:b7:90:ae:23:64:28:f1:40:bf:71:07:95:bb:
                    02:cf:4f:17:6e:9f:99:e3:3d:e6:b7:3c:ca:57:08:
                    b5:48:d0:25:a7:2e:a8:1c:af:67:88:40:05:2a:48:
                    d5:ac:22:2f:be:ca:16:e2:e8:65:5a:54:c8:a5:5c:
                    2e:d5:cc:b9:e3:41:89:0d:ad:74:4f:1b:e0:c4:12:
                    fc:5d:fa:da:25:e7:9b:bd:f1:e3:0b:2a:4b:f9:d6:
                    30:d1:a5:fd:0e:2f:cd:46:f2:0e:f4:0d:7d:6f:2f:
                    5c:0e:f7:3e:42:47:7b:36:db:ed:c4:03:7f:b7:52:
                    d2:f5:7c:14:43:3a:bd:10:7b:99:d6:af:2d:2e:41:
                    55:fc:49:0c:5b:a2:1a:bf:8d:d0:c9:57:bc:1b:31:
                    aa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:24:9E:B3:4B:93:22:BA:29:A1:5E:3D:86:06:57:29:FE:85:A9:0D
            X509v3 Authority Key Identifier:
                keyid:61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139342e302f32342d3234203d3e203532343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:e3:c7:1f:7a:0f:e8:00:c4:75:91:15:9f:6d:2a:9b:61:54:
         33:fd:74:45:71:69:e3:82:7f:73:44:c5:af:b6:e0:67:52:6d:
         3e:05:8f:c8:c8:e8:22:d1:7a:54:d3:57:e3:2c:03:d0:eb:99:
         3f:bf:d8:5a:e1:a2:38:18:25:25:eb:c6:09:f4:cc:6c:c6:71:
         38:9a:dc:54:bf:92:55:44:07:ee:a7:11:5b:82:70:04:14:a7:
         60:74:ab:72:2d:4a:4a:c1:1f:0f:ba:e5:bd:97:ff:84:d8:3a:
         4b:3d:9b:84:46:14:19:ff:5a:95:75:b2:3d:6d:fb:a9:0f:39:
         22:c3:5f:2c:36:e7:4f:3e:37:2b:6e:fc:28:1f:b1:c0:55:c9:
         90:ae:c7:43:86:4b:4d:20:ef:0c:66:76:c0:6c:3d:38:22:70:
         6c:fe:27:b4:48:94:5b:bd:99:37:53:9e:41:f5:94:1e:e1:8a:
         c8:59:b6:3d:5a:70:95:7d:df:19:28:73:ea:e6:9e:4f:bd:e6:
         7e:7f:97:d1:1f:91:21:46:dc:7c:ca:86:a3:46:6c:d3:98:1b:
         64:39:ed:72:e3:36:d0:e5:e5:8f:89:6c:4d:d5:ac:96:89:c9:
         d3:d9:27:cb:e9:7d:ec:7f:c0:68:ee:3f:3c:22:f0:a3:c9:99:
         c3:bb:e4:66
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUckdzb2AAWb7+cgt+vdV0dPJXTSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFCQzBERjlEQzBFQjMyOEQzQjVBQTUzMDI0MzA4RUY2
NzMxQkM4ODAeFw0yNTAyMDQxODQ0MDVaFw0yNjAyMDMxODQ5MDVaMDMxMTAvBgNV
BAMTKDQ0MjQ5RUIzNEI5MzIyQkEyOUExNUUzRDg2MDY1NzI5RkU4NUE5MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlEEz2yFi8xFce0IuqQxtT0qKG
Ey68Ig6qxjG9LX2rC7t64gC2ShX97tyV6Q9dd9MapMTQbjZRfBh5W7RrOP6v8PaJ
tz0AjLVCoRlv+o8KEOzYWfw6sy66ZGtddqxmHd/8gxuECsfNlTgIt5CuI2Qo8UC/
cQeVuwLPTxdun5njPea3PMpXCLVI0CWnLqgcr2eIQAUqSNWsIi++yhbi6GVaVMil
XC7VzLnjQYkNrXRPG+DEEvxd+tol55u98eMLKkv51jDRpf0OL81G8g70DX1vL1wO
9z5CR3s22+3EA3+3UtL1fBRDOr0Qe5nWry0uQVX8SQxbohq/jdDJV7wbMao9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQURCSes0uTIropoV49hgZXKf6FqQ0wHwYDVR0j
BBgwFoAUYbwN+dwOsyjTtapTAkMI72cxvIgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NjJCRjg3MkQyQjFEOTRBRUMxREY1QTJDQUU4QjAxMUIx
MTQyNjQ1NEMyNjIyRDQyQkQ0MjRFMjEzRjlDRjQ2LzAvNjFCQzBERjlEQzBFQjMy
OEQzQjVBQTUzMDI0MzA4RUY2NzMxQkM4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MUJDMERGOURDMEVCMzI4RDNC
NUFBNTMwMjQzMDhFRjY3MzFCQzg4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTYyQkY4NzJEMkIxRDk0QUVDMURGNUEyQ0FFOEIwMTFCMTE0MjY0NTRD
MjYyMkQ0MkJENDI0RTIxM0Y5Q0Y0Ni8wLzMxMzgzNjJlMzkzNjJlMzEzOTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzkzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALpgwjAN
BgkqhkiG9w0BAQsFAAOCAQEAmuPHH3oP6ADEdZEVn20qm2FUM/10RXFp44J/c0TF
r7bgZ1JtPgWPyMjoItF6VNNX4ywD0OuZP7/YWuGiOBglJevGCfTMbMZxOJrcVL+S
VUQH7qcRW4JwBBSnYHSrci1KSsEfD7rlvZf/hNg6Sz2bhEYUGf9alXWyPW37qQ85
IsNfLDbnTz43K278KB+xwFXJkK7HQ4ZLTSDvDGZ2wGw9OCJwbP4ntEiUW72ZN1Oe
QfWUHuGKyFm2PVpwlX3fGShz6uaeT73mfn+X0R+RIUbcfMqGo0Zs05gbZDntcuM2
0OXlj4lsTdWslonJ09kny+l97H/AaO4/PCLwo8mZw7vkZg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:51:43 2025 by rpki-client