Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e33302e302f32342d3234203d3e203238303937.roa
File:                     3138362e332e33302e302f32342d3234203d3e203238303937.roa (raw, json)
Hash identifier:          +QThusJcsbiVq+1EDJ2zZ6RC+YT9H19BwPpMC+xpqH4=
Subject key identifier:   17:7E:CD:48:1E:D8:97:D3:C4:B7:08:F8:13:A7:24:1B:E1:E4:5F:AF
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       3130840E03D8A8AFA7A8FD40DCF334EB82CBB9E9
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e33302e302f32342d3234203d3e203238303937.roa
Signing time:             Tue 04 Feb 2025 18:11:16 +0000
ROA not before:           Tue 04 Feb 2025 18:06:16 +0000
ROA not after:            Tue 03 Feb 2026 18:11:16 +0000
asID:                     28097
IP address blocks:        186.3.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:30:84:0e:03:d8:a8:af:a7:a8:fd:40:dc:f3:34:eb:82:cb:b9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:16 2025 GMT
            Not After : Feb  3 18:11:16 2026 GMT
        Subject: CN=177ECD481ED897D3C4B708F813A7241BE1E45FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8f:7a:cf:7f:57:c7:c8:4a:65:6e:23:84:33:
                    69:e4:d7:f6:88:34:cd:a8:26:24:27:9a:d5:45:09:
                    4d:b0:c7:31:c9:19:74:4c:f2:ff:a7:78:8a:08:77:
                    69:17:27:df:dc:bf:76:03:78:1e:bf:70:fd:b9:ac:
                    b7:f2:93:b9:d5:22:e7:4f:1c:52:12:6b:7e:f3:39:
                    39:86:5c:27:81:b0:82:7d:b1:6b:12:6c:f0:a3:be:
                    05:df:6e:df:03:1a:be:0e:7f:c8:54:fc:07:44:ce:
                    7e:03:11:19:7f:bf:60:dd:b4:69:de:58:d3:5d:04:
                    b3:1b:bb:e6:bd:ea:04:c2:d6:52:ce:99:b8:30:60:
                    0f:d8:95:53:41:d0:5a:93:60:df:d9:a7:ba:be:10:
                    2f:16:97:1b:6f:cc:c7:76:b7:6d:74:6a:f1:92:ff:
                    3d:b4:bf:d2:96:1c:a2:d7:6a:3b:a0:62:93:b4:98:
                    fe:ef:58:e0:f4:86:11:1f:41:4e:65:16:2a:d1:f6:
                    de:ec:23:74:bf:2f:57:2b:28:f3:d6:4f:f3:97:1a:
                    d9:38:d0:63:61:47:f2:20:90:fb:29:dd:72:d7:e0:
                    78:93:f4:d0:25:9c:61:02:37:bb:ea:1e:91:a5:94:
                    3e:19:89:47:85:0c:e4:fb:bf:57:86:96:fe:ea:f3:
                    96:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7E:CD:48:1E:D8:97:D3:C4:B7:08:F8:13:A7:24:1B:E1:E4:5F:AF
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e33302e302f32342d3234203d3e203238303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.3.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ac:0e:5d:b3:8e:8f:01:48:56:8a:4f:75:04:4a:83:41:33:
         af:2c:a7:18:9d:92:ca:56:dc:65:c9:cd:58:49:b1:64:4d:ed:
         65:92:6f:83:25:0f:91:a5:3e:ee:f4:66:6e:67:70:9a:3a:5c:
         21:b1:4e:33:ab:e3:dc:fc:4d:71:1d:49:0f:d6:58:17:b9:f6:
         eb:00:03:dc:5f:e5:34:0d:46:65:28:89:da:bd:3b:7e:0c:de:
         3d:97:28:ee:e8:bc:11:e2:b3:65:c2:b7:a6:32:d9:b9:50:3f:
         53:ff:74:7f:b5:fb:01:e4:43:ca:ca:23:60:c0:5f:1e:87:94:
         91:8a:85:24:ee:48:03:aa:20:ab:a0:d0:4b:49:d3:94:d8:49:
         50:a3:be:81:0a:c8:16:37:74:a1:72:fe:2e:5c:a2:89:71:b4:
         f8:bc:0f:5d:b3:9d:0a:29:c5:9a:72:fc:ef:34:c4:d0:73:5b:
         22:bd:cb:80:84:19:37:f4:d2:29:ee:12:5b:44:25:73:3b:78:
         bb:ef:95:bf:02:4a:4e:a1:e7:4e:2a:18:65:88:8b:cf:56:0f:
         de:58:36:21:18:fa:11:47:06:2b:f7:fe:6c:e0:1b:ea:c3:bc:
         36:0f:21:03:ce:0b:07:f5:f5:14:28:47:71:aa:45:60:3a:d1:
         77:6f:05:3c
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUMTCEDgPYqK+nqP1A3PM064LLuekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNTAyMDQxODA2MTZaFw0yNjAyMDMxODExMTZaMDMxMTAvBgNV
BAMTKDE3N0VDRDQ4MUVEODk3RDNDNEI3MDhGODEzQTcyNDFCRTFFNDVGQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKj3rPf1fHyEplbiOEM2nk1/aI
NM2oJiQnmtVFCU2wxzHJGXRM8v+neIoId2kXJ9/cv3YDeB6/cP25rLfyk7nVIudP
HFISa37zOTmGXCeBsIJ9sWsSbPCjvgXfbt8DGr4Of8hU/AdEzn4DERl/v2DdtGne
WNNdBLMbu+a96gTC1lLOmbgwYA/YlVNB0FqTYN/Zp7q+EC8WlxtvzMd2t210avGS
/z20v9KWHKLXajugYpO0mP7vWOD0hhEfQU5lFirR9t7sI3S/L1crKPPWT/OXGtk4
0GNhR/IgkPsp3XLX4HiT9NAlnGECN7vqHpGllD4ZiUeFDOT7v1eGlv7q85bNAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUF37NSB7Yl9PEtwj4E6ckG+HkX68wHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzgzNjJlMzMyZTMzMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM4MzAzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAugMeMA0GCSqG
SIb3DQEBCwUAA4IBAQBFrA5ds46PAUhWik91BEqDQTOvLKcYnZLKVtxlyc1YSbFk
Te1lkm+DJQ+RpT7u9GZuZ3CaOlwhsU4zq+Pc/E1xHUkP1lgXufbrAAPcX+U0DUZl
KInavTt+DN49lyju6LwR4rNlwremMtm5UD9T/3R/tfsB5EPKyiNgwF8eh5SRioUk
7kgDqiCroNBLSdOU2ElQo76BCsgWN3Shcv4uXKKJcbT4vA9ds50KKcWacvzvNMTQ
c1sivcuAhBk39NIp7hJbRCVzO3i775W/AkpOoedOKhhliIvPVg/eWDYhGPoRRwYr
9/5s4Bvqw7w2DyEDzgsH9fUUKEdxqkVgOtF3bwU8
-----END CERTIFICATE-----
Generated at Tue Apr 15 18:05:49 2025 by rpki-client