Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3139322e302f31382d3234203d3e203532333631.roa
File:                     3138362e33332e3139322e302f31382d3234203d3e203532333631.roa (raw, json)
Hash identifier:          PpinNz/g72ND29PLPMQAOlxAJL0kGIU+YFmXiJm+8eg=
Subject key identifier:   51:03:F3:83:7E:10:F7:81:F9:F9:DC:AC:D3:2D:07:F5:04:7F:93:BA
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       129B57F7AE495ED013E85D80F22D64853EB48FDE
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3139322e302f31382d3234203d3e203532333631.roa
Signing time:             Tue 04 Feb 2025 20:01:35 +0000
ROA not before:           Tue 04 Feb 2025 19:56:35 +0000
ROA not after:            Tue 03 Feb 2026 20:01:35 +0000
asID:                     52361
IP address blocks:        186.33.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9b:57:f7:ae:49:5e:d0:13:e8:5d:80:f2:2d:64:85:3e:b4:8f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Feb  4 19:56:35 2025 GMT
            Not After : Feb  3 20:01:35 2026 GMT
        Subject: CN=5103F3837E10F781F9F9DCACD32D07F5047F93BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:d4:54:4c:48:79:ac:88:58:c1:95:99:4c:
                    41:ca:ed:7a:73:bc:72:55:27:a2:07:36:17:24:42:
                    40:5b:1b:d9:42:b7:c9:f1:6e:9b:90:73:36:db:8f:
                    f6:19:d8:9b:e0:4d:36:db:81:3e:ca:9e:c1:d4:a3:
                    3f:1c:51:1f:73:7d:e5:3c:51:97:c1:bd:0c:5f:dd:
                    eb:2f:44:24:f2:95:06:c2:ac:2b:aa:ff:44:ae:e3:
                    f1:29:ca:72:13:35:b9:ed:bb:aa:f3:06:29:4b:de:
                    cd:13:50:a8:79:4a:55:bb:fa:6f:1b:c5:1c:d9:f1:
                    a2:5d:3a:13:7c:44:6d:e2:96:d3:b3:2a:1a:86:1f:
                    79:ec:68:44:fa:64:55:08:21:93:df:dc:94:a9:12:
                    5a:ab:d4:ea:d4:50:87:61:ae:4d:a6:ce:82:b8:66:
                    37:6a:ae:e8:d7:2b:03:2d:06:e2:52:55:8b:d2:44:
                    0f:04:22:dc:ed:9a:33:9e:b3:ee:df:b7:49:49:11:
                    bc:76:a6:e3:7d:8e:7e:5c:b3:d8:74:b9:4d:8a:c0:
                    17:ba:b6:c5:d4:2b:e3:70:ac:3c:da:f1:37:56:2d:
                    b5:5a:c3:41:cf:0e:fb:f2:ed:b6:a9:19:0b:c9:77:
                    72:f9:67:12:bf:68:39:c7:ad:5e:c5:d8:49:5f:ed:
                    48:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:03:F3:83:7E:10:F7:81:F9:F9:DC:AC:D3:2D:07:F5:04:7F:93:BA
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3139322e302f31382d3234203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:5e:8e:a3:ae:71:45:61:ac:e4:c5:8c:1c:bc:08:8c:df:
         60:c8:96:b2:f1:83:8f:9b:a7:5d:5a:6e:64:36:9f:a4:2d:91:
         38:f4:0e:4a:18:9d:81:14:04:5e:b5:13:0d:b1:48:61:78:40:
         dc:b1:4f:0e:1f:c3:ca:9d:bc:c8:ef:b4:8c:8b:70:93:dd:bd:
         b4:66:38:8f:30:e8:b8:88:58:03:29:0b:60:81:fe:b1:d8:5a:
         27:5a:78:ae:07:35:63:e8:64:02:56:76:45:02:66:8c:53:57:
         04:a1:90:c4:5e:70:63:71:d9:96:ba:ba:79:50:f9:19:d5:65:
         41:bc:c5:7d:14:c6:82:3f:fd:32:de:5c:db:c7:30:b2:41:55:
         e6:d6:8e:fd:93:0a:76:16:0e:10:49:cb:82:d8:8f:c7:b5:4d:
         ee:38:ad:eb:47:ba:42:87:c8:71:11:0e:54:ce:49:cb:6e:53:
         f0:1f:a0:e0:6f:4e:6b:a5:be:00:f6:18:01:76:8f:2d:2f:2e:
         ec:4d:f1:93:2d:b8:44:a9:e5:d7:9c:9a:b2:d0:b1:47:e8:0e:
         63:be:00:cd:b7:96:0d:86:10:ea:5d:95:28:78:3d:1b:17:6f:
         69:df:c8:38:09:68:2e:e9:af:7f:95:5c:87:25:63:02:85:85:
         9f:a1:a8:51
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEptX965JXtAT6F2A8i1khT60j94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVDOTYzMkMyQkFGNENENDc1NERBNkI0NDYxMTZDNzBG
RUY0RDI2NzAeFw0yNTAyMDQxOTU2MzVaFw0yNjAyMDMyMDAxMzVaMDMxMTAvBgNV
BAMTKDUxMDNGMzgzN0UxMEY3ODFGOUY5RENBQ0QzMkQwN0Y1MDQ3RjkzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6dRUTEh5rIhYwZWZTEHK7Xpz
vHJVJ6IHNhckQkBbG9lCt8nxbpuQczbbj/YZ2JvgTTbbgT7KnsHUoz8cUR9zfeU8
UZfBvQxf3esvRCTylQbCrCuq/0Su4/EpynITNbntu6rzBilL3s0TUKh5SlW7+m8b
xRzZ8aJdOhN8RG3iltOzKhqGH3nsaET6ZFUIIZPf3JSpElqr1OrUUIdhrk2mzoK4
ZjdqrujXKwMtBuJSVYvSRA8EItztmjOes+7ft0lJEbx2puN9jn5cs9h0uU2KwBe6
tsXUK+NwrDza8TdWLbVaw0HPDvvy7bapGQvJd3L5ZxK/aDnHrV7F2Elf7UjxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUUQPzg34Q94H5+dys0y0H9QR/k7owHwYDVR0j
BBgwFoAUBcljLCuvTNR1Taa0RhFscP700mcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQTAwNTNEQTYwMzg1MkFGNjFDODQ0MjRGQkZGOUFDOEE2
MzI4ODcxODk5NkM2MzNCNjMyOUE4QzkzQzA2NzFFLzAvMDVDOTYzMkMyQkFGNENE
NDc1NERBNkI0NDYxMTZDNzBGRUY0RDI2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNUM5NjMyQzJCQUY0Q0Q0NzU0
REE2QjQ0NjExNkM3MEZFRjREMjY3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkEwMDUzREE2MDM4NTJBRjYxQzg0NDI0RkJGRjlBQzhBNjMyODg3MTg5
OTZDNjMzQjYzMjlBOEM5M0MwNjcxRS8wLzMxMzgzNjJlMzMzMzJlMzEzOTMyMmUz
MDJmMzEzODJkMzIzNDIwM2QzZTIwMzUzMjMzMzYzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBrohwDAN
BgkqhkiG9w0BAQsFAAOCAQEAbFVejqOucUVhrOTFjBy8CIzfYMiWsvGDj5unXVpu
ZDafpC2ROPQOShidgRQEXrUTDbFIYXhA3LFPDh/Dyp28yO+0jItwk929tGY4jzDo
uIhYAykLYIH+sdhaJ1p4rgc1Y+hkAlZ2RQJmjFNXBKGQxF5wY3HZlrq6eVD5GdVl
QbzFfRTGgj/9Mt5c28cwskFV5taO/ZMKdhYOEEnLgtiPx7VN7jit60e6QofIcREO
VM5Jy25T8B+g4G9Oa6W+APYYAXaPLS8u7E3xky24RKnl15yastCxR+gOY74AzbeW
DYYQ6l2VKHg9Gxdvad/IOAloLumvf5VchyVjAoWFn6GoUQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:18:54 2025 by rpki-client