Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3138362e36352e3131322e302f32302d3230203d3e20323633373430.roa
File:                     3138362e36352e3131322e302f32302d3230203d3e20323633373430.roa (raw, json)
Hash identifier:          pJVNna9jwR2qrZOAEN19w/vieVZjausVYpNaMddq0ng=
Subject key identifier:   0A:BA:E8:5A:00:FE:FD:A3:39:3D:6F:F3:F2:7C:CD:BE:C2:D3:7E:C1
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       0D102CD20031C6A4D998F0424DF23B9E81AE7D6C
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3138362e36352e3131322e302f32302d3230203d3e20323633373430.roa
Signing time:             Tue 04 Feb 2025 18:49:26 +0000
ROA not before:           Tue 04 Feb 2025 18:44:26 +0000
ROA not after:            Tue 03 Feb 2026 18:49:26 +0000
asID:                     263740
IP address blocks:        186.65.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:10:2c:d2:00:31:c6:a4:d9:98:f0:42:4d:f2:3b:9e:81:ae:7d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Feb  4 18:44:26 2025 GMT
            Not After : Feb  3 18:49:26 2026 GMT
        Subject: CN=0ABAE85A00FEFDA3393D6FF3F27CCDBEC2D37EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:37:f7:67:3f:da:dd:3b:77:77:67:3a:cf:
                    de:f7:25:a8:3c:0b:2e:fa:65:45:6c:79:0e:fe:e0:
                    7e:d5:9a:65:58:35:d0:1f:15:85:47:32:d6:6a:c3:
                    41:13:77:f2:fe:22:bb:66:2d:cc:c4:17:c3:33:a7:
                    36:36:08:8d:37:b9:d0:3b:b5:ca:ce:a4:6f:fa:5c:
                    d7:0a:db:80:13:f3:3b:12:ab:71:3c:57:8e:cf:5a:
                    36:18:62:75:9c:2d:34:57:bc:9f:77:1d:2d:e1:19:
                    55:e3:00:00:64:0e:25:1e:57:99:f4:09:ff:4b:a1:
                    b9:a1:ae:01:da:72:56:a3:9a:87:52:5f:42:d3:aa:
                    d4:2a:91:d5:88:ab:79:81:06:c3:33:62:53:a2:05:
                    68:42:a9:d7:14:1d:99:3b:6d:ec:c8:99:aa:5c:09:
                    1c:2a:bd:a8:e7:0f:93:47:f3:5e:a8:40:4c:95:ae:
                    5b:b3:77:f1:e7:3a:41:2f:5b:c9:ba:e8:7a:57:81:
                    1c:ee:72:00:36:41:45:ee:a2:98:ef:15:81:33:3f:
                    e7:78:c8:5a:7d:7a:53:37:f5:34:fe:53:52:9d:70:
                    07:98:12:50:d2:fa:97:fe:82:75:ff:2f:9e:47:e2:
                    09:81:79:47:ab:80:d5:48:82:f3:20:53:cd:c7:06:
                    11:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BA:E8:5A:00:FE:FD:A3:39:3D:6F:F3:F2:7C:CD:BE:C2:D3:7E:C1
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3138362e36352e3131322e302f32302d3230203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:5e:b4:b9:a4:9d:8c:f3:b2:00:e5:3e:11:21:93:85:4e:0a:
         89:f3:5c:1b:1e:e7:36:ef:22:0e:95:0c:09:65:03:b8:90:b8:
         a2:f1:1e:fb:69:e1:75:f2:ec:c4:cf:d2:61:9e:d9:c9:9e:c1:
         f7:71:31:27:f6:23:30:75:04:de:96:59:a9:69:3f:86:02:83:
         72:c3:15:15:12:e9:1a:13:7f:fa:b7:a0:5e:1b:de:a5:9a:41:
         b2:b6:c7:19:32:99:08:80:b6:04:36:8b:22:c1:32:35:d7:c2:
         1f:36:d0:6b:05:61:9f:90:e0:12:b3:3a:e5:80:62:08:fa:4a:
         70:27:55:fd:71:d1:06:27:55:5e:2e:96:6e:6a:02:67:84:6e:
         73:da:39:86:f1:3f:5a:bf:d7:21:d5:e6:6b:eb:cf:bd:5f:9d:
         e4:ea:cb:9e:c4:51:f0:7d:6f:75:79:7a:0c:2f:71:c2:a1:95:
         9b:4c:72:3c:27:94:48:69:0e:63:c3:91:75:22:73:06:f1:69:
         a5:93:b3:0e:8d:3b:03:5c:25:62:e4:54:65:11:17:2d:10:84:
         7e:0c:4f:e7:66:a1:00:93:36:4c:7d:95:eb:4a:ff:b0:4a:d1:
         fd:56:8a:bf:11:67:5f:31:a5:34:12:a6:ea:20:46:69:b1:fb:
         dd:36:e9:3d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDRAs0gAxxqTZmPBCTfI7noGufWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1MzcwQTE5OThDNkFFRjlCOTQyODM1MTdGNEIxRTZC
QjVBRDBCQzAeFw0yNTAyMDQxODQ0MjZaFw0yNjAyMDMxODQ5MjZaMDMxMTAvBgNV
BAMTKDBBQkFFODVBMDBGRUZEQTMzOTNENkZGM0YyN0NDREJFQzJEMzdFQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdyDf3Zz/a3Tt3d2c6z973Jag8
Cy76ZUVseQ7+4H7VmmVYNdAfFYVHMtZqw0ETd/L+IrtmLczEF8MzpzY2CI03udA7
tcrOpG/6XNcK24AT8zsSq3E8V47PWjYYYnWcLTRXvJ93HS3hGVXjAABkDiUeV5n0
Cf9LobmhrgHaclajmodSX0LTqtQqkdWIq3mBBsMzYlOiBWhCqdcUHZk7bezImapc
CRwqvajnD5NH816oQEyVrluzd/HnOkEvW8m66HpXgRzucgA2QUXuopjvFYEzP+d4
yFp9elM39TT+U1KdcAeYElDS+pf+gnX/L55H4gmBeUergNVIgvMgU83HBhG9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCrroWgD+/aM5PW/z8nzNvsLTfsEwHwYDVR0j
BBgwFoAUMFNwoZmMau+blCg1F/Sx5rta0LwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzAxQzQzMUE1MjlFQTIwRTk1MUNDRjA5ODcyNUJFQzdG
MDVEODE3M0E0MDVDMUE5REVCNjQwQkE5N0JFRTVBLzAvMzA1MzcwQTE5OThDNkFF
RjlCOTQyODM1MTdGNEIxRTZCQjVBRDBCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDUzNzBBMTk5OEM2QUVGOUI5
NDI4MzUxN0Y0QjFFNkJCNUFEMEJDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcwMUM0MzFBNTI5RUEyMEU5NTFDQ0YwOTg3MjVCRUM3RjA1RDgxNzNB
NDA1QzFBOURFQjY0MEJBOTdCRUU1QS8wLzMxMzgzNjJlMzYzNTJlMzEzMTMyMmUz
MDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzNjMzMzczNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEukFw
MA0GCSqGSIb3DQEBCwUAA4IBAQBrXrS5pJ2M87IA5T4RIZOFTgqJ81wbHuc27yIO
lQwJZQO4kLii8R77aeF18uzEz9JhntnJnsH3cTEn9iMwdQTellmpaT+GAoNywxUV
EukaE3/6t6BeG96lmkGytscZMpkIgLYENosiwTI118IfNtBrBWGfkOASszrlgGII
+kpwJ1X9cdEGJ1VeLpZuagJnhG5z2jmG8T9av9ch1eZr68+9X53k6suexFHwfW91
eXoML3HCoZWbTHI8J5RIaQ5jw5F1InMG8Wmlk7MOjTsDXCVi5FRlERctEIR+DE/n
ZqEAkzZMfZXrSv+wStH9Voq/EWdfMaU0EqbqIEZpsfvdNuk9
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:16 2025 by rpki-client