Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3133382e3138362e3230302e302f32322d3234203d3e203238353339.roa
File:                     3133382e3138362e3230302e302f32322d3234203d3e203238353339.roa (raw, json)
Hash identifier:          kuPNEjvgTy8ZR1deEkRuqNchmpEi1DCbfCYxTVjJG4M=
Subject key identifier:   B0:82:26:17:B8:F8:1A:9C:A3:8F:21:69:0A:1B:2A:55:5A:E2:C2:4D
Certificate issuer:       /CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
Certificate serial:       52C664D5288779B68558702DB466D45F1105D776
Authority key identifier: 51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3133382e3138362e3230302e302f32322d3234203d3e203238353339.roa
Signing time:             Mon 19 May 2025 20:19:40 +0000
ROA not before:           Mon 19 May 2025 20:14:40 +0000
ROA not after:            Mon 18 May 2026 20:19:40 +0000
asID:                     28539
IP address blocks:        138.186.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c6:64:d5:28:87:79:b6:85:58:70:2d:b4:66:d4:5f:11:05:d7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
        Validity
            Not Before: May 19 20:14:40 2025 GMT
            Not After : May 18 20:19:40 2026 GMT
        Subject: CN=B0822617B8F81A9CA38F21690A1B2A555AE2C24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:d8:9c:2e:7c:b4:15:4e:93:b8:73:27:cc:
                    64:ef:35:c7:65:f8:43:c2:81:95:4e:45:c4:6b:32:
                    d6:d0:f5:98:62:d0:8d:b3:4e:2a:c6:77:3a:fa:b9:
                    1e:26:3a:07:41:a4:62:8a:47:28:62:7e:8d:b4:dc:
                    1a:fc:a9:6b:d2:c4:93:f5:94:1d:35:f7:44:7a:e1:
                    f7:79:4f:56:49:d8:0a:2e:a4:1c:1b:e5:8b:f3:6a:
                    20:1e:84:f3:76:68:51:9e:b8:b7:ad:00:6b:f2:14:
                    02:e7:41:e6:b4:a9:02:4a:77:53:ca:18:2a:b0:ff:
                    e3:40:ae:26:86:01:8f:1b:55:7b:33:2f:43:44:4c:
                    b1:9f:73:60:e1:b4:21:14:59:f3:37:d1:c2:5d:60:
                    1e:bd:0b:52:79:d0:62:f9:87:c8:11:64:54:e3:ec:
                    30:b3:27:39:e5:7e:47:b5:15:b2:50:98:5e:20:96:
                    2b:17:54:e3:af:36:78:cd:44:87:b1:5f:1d:63:a7:
                    b5:89:6c:62:45:a5:4e:59:b9:26:76:6a:cd:19:04:
                    8a:07:34:90:75:90:61:dd:f8:8c:d7:0f:b6:d4:4a:
                    51:58:36:dc:71:ca:41:5f:29:78:e2:da:99:6e:35:
                    35:f5:e6:fd:e9:dc:07:f8:ad:37:0e:d3:66:4b:57:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:82:26:17:B8:F8:1A:9C:A3:8F:21:69:0A:1B:2A:55:5A:E2:C2:4D
            X509v3 Authority Key Identifier:
                keyid:51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3133382e3138362e3230302e302f32322d3234203d3e203238353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:8d:91:dc:11:90:b7:94:bd:fe:6a:8f:33:6f:81:c0:5a:83:
         d6:fc:06:a8:8f:4c:c7:36:3a:27:cd:4d:86:f3:dc:37:44:d1:
         73:8e:39:39:59:4b:ee:7f:25:72:1d:ed:3d:5b:a5:bf:a7:2b:
         c7:86:51:3b:dc:b0:83:18:9c:6b:04:dd:e0:b0:75:e5:41:52:
         61:9b:a9:b9:5d:26:bf:36:4e:c7:a0:4a:2c:b5:7f:9e:64:7c:
         2b:ce:37:f9:51:80:37:9f:82:01:7f:e1:49:ca:d5:5a:05:8c:
         3d:e7:27:ce:74:9f:70:0f:4d:3b:0e:9f:b5:6f:a5:e9:d4:e2:
         02:46:c0:65:87:b4:4a:bb:21:59:32:27:58:a8:0d:ea:29:18:
         31:92:2c:ca:71:0a:27:31:d4:e1:38:46:26:a5:41:8c:ca:bc:
         65:bb:eb:2b:48:eb:5d:d9:b2:24:4d:4a:68:90:de:6a:f8:5e:
         dc:c6:32:55:6b:c9:d7:63:0f:42:ee:49:e0:64:dc:eb:28:46:
         40:07:c0:6c:fc:ab:2d:3f:e8:e7:80:41:1f:90:ba:19:71:df:
         db:c5:73:ee:be:77:e4:d9:9e:ce:28:d4:14:df:59:51:26:42:
         da:2d:a1:17:e8:77:48:ac:4a:a2:f2:05:17:71:5d:5b:15:4d:
         d1:4f:5b:c1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUsZk1SiHebaFWHAttGbUXxEF13YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEzMENDQ0FCNUMxODFDQzkzNTVEODkzODE4ODQ1MTVC
ODVGNEJBNjAeFw0yNTA1MTkyMDE0NDBaFw0yNjA1MTgyMDE5NDBaMDMxMTAvBgNV
BAMTKEIwODIyNjE3QjhGODFBOUNBMzhGMjE2OTBBMUIyQTU1NUFFMkMyNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRI9icLny0FU6TuHMnzGTvNcdl
+EPCgZVORcRrMtbQ9Zhi0I2zTirGdzr6uR4mOgdBpGKKRyhifo203Br8qWvSxJP1
lB0190R64fd5T1ZJ2AoupBwb5YvzaiAehPN2aFGeuLetAGvyFALnQea0qQJKd1PK
GCqw/+NAriaGAY8bVXszL0NETLGfc2DhtCEUWfM30cJdYB69C1J50GL5h8gRZFTj
7DCzJznlfke1FbJQmF4glisXVOOvNnjNRIexXx1jp7WJbGJFpU5ZuSZ2as0ZBIoH
NJB1kGHd+IzXD7bUSlFYNtxxykFfKXji2pluNTX15v3p3Af4rTcO02ZLV8INAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUsIImF7j4GpyjjyFpChsqVVriwk0wHwYDVR0j
BBgwFoAUUTDMyrXBgcyTVdiTgYhFFbhfS6YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQzQwRjVDNzAyMTUxODc5NzBCMUY5MDQ1NDk3OUIzNzlC
ODAzMTA4Nzg4NTI2MkE3MDUwQUVFNjdCNEE0QUUyLzAvNTEzMENDQ0FCNUMxODFD
QzkzNTVEODkzODE4ODQ1MTVCODVGNEJBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTMwQ0NDQUI1QzE4MUNDOTM1
NUQ4OTM4MTg4NDUxNUI4NUY0QkE2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkM0MEY1QzcwMjE1MTg3OTcwQjFGOTA0NTQ5NzlCMzc5QjgwMzEwODc4
ODUyNjJBNzA1MEFFRTY3QjRBNEFFMi8wLzMxMzMzODJlMzEzODM2MmUzMjMwMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzUzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCirrI
MA0GCSqGSIb3DQEBCwUAA4IBAQDJjZHcEZC3lL3+ao8zb4HAWoPW/Aaoj0zHNjon
zU2G89w3RNFzjjk5WUvufyVyHe09W6W/pyvHhlE73LCDGJxrBN3gsHXlQVJhm6m5
XSa/Nk7HoEostX+eZHwrzjf5UYA3n4IBf+FJytVaBYw95yfOdJ9wD007Dp+1b6Xp
1OICRsBlh7RKuyFZMidYqA3qKRgxkizKcQonMdThOEYmpUGMyrxlu+srSOtd2bIk
TUpokN5q+F7cxjJVa8nXYw9C7kngZNzrKEZAB8Bs/KstP+jngEEfkLoZcd/bxXPu
vnfk2Z7OKNQU31lRJkLaLaEX6HdIrEqi8gUXcV1bFU3RT1vB
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:10:35 2025 by rpki-client