Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/707a241055ca4e93d0ff1b7c954d30b3242f3713.roa
File:                     707a241055ca4e93d0ff1b7c954d30b3242f3713.roa (raw, json)
Hash identifier:          OtazFdxvf/1d6b8D7LjYYm9efMpot7/vsDLsqYbADrI=
Subject key identifier:   C3:39:48:D0:1C:44:15:50:2E:3C:8F:B1:39:F9:77:FD:36:5C:A5:A7
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       196511
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/707a241055ca4e93d0ff1b7c954d30b3242f3713.roa
Signing time:             Wed 11 May 2022 18:46:53 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27757
IP address blocks:        186.46.140.0/24 maxlen: 24
                          186.46.141.0/24 maxlen: 24
                          190.152.254.0/24 maxlen: 24
                          190.152.255.0/24 maxlen: 24
                          190.152.110.0/24 maxlen: 24
                          181.112.204.0/22 maxlen: 24
                          181.113.97.0/24 maxlen: 24
                          181.113.157.0/24 maxlen: 24
                          181.196.11.0/24 maxlen: 24
                          181.196.13.0/24 maxlen: 24
                          190.214.0.0/17 maxlen: 24
                          190.152.0.0/17 maxlen: 24
                          186.42.128.0/17 maxlen: 24
                          186.46.128.0/17 maxlen: 24
                          200.125.224.0/19 maxlen: 24
                          181.196.14.0/24 maxlen: 24
                          181.196.66.0/24 maxlen: 24
                          181.211.104.0/24 maxlen: 24
                          181.211.105.0/24 maxlen: 24
                          181.211.106.0/24 maxlen: 24
                          181.211.217.0/24 maxlen: 24
                          186.42.8.0/24 maxlen: 24
                          186.42.9.0/24 maxlen: 24
                          186.42.12.0/24 maxlen: 24
                          186.42.112.0/23 maxlen: 24
                          186.42.172.0/22 maxlen: 24
                          186.42.198.0/23 maxlen: 24
                          186.46.56.0/22 maxlen: 24
                          186.46.152.0/21 maxlen: 24
                          186.46.172.0/24 maxlen: 24
                          186.46.175.0/24 maxlen: 24
                          186.46.224.0/24 maxlen: 24
                          186.46.232.0/21 maxlen: 24
                          186.47.137.0/24 maxlen: 24
                          186.47.138.0/24 maxlen: 24
                          186.47.182.0/24 maxlen: 24
                          186.47.183.0/24 maxlen: 24
                          186.178.19.0/24 maxlen: 24
                          186.178.36.0/23 maxlen: 24
                          186.178.37.0/24 maxlen: 24
                          186.178.43.0/24 maxlen: 24
                          186.178.47.0/24 maxlen: 24
                          186.178.48.0/24 maxlen: 24
                          186.178.51.0/24 maxlen: 24
                          186.178.67.0/24 maxlen: 24
                          186.178.107.0/24 maxlen: 24
                          186.178.112.0/24 maxlen: 24
                          186.178.115.0/24 maxlen: 24
                          186.178.117.0/24 maxlen: 24
                          186.178.170.0/24 maxlen: 24
                          190.11.3.0/24 maxlen: 24
                          190.11.20.0/24 maxlen: 24
                          190.11.26.0/24 maxlen: 24
                          190.152.39.0/24 maxlen: 24
                          190.152.46.0/24 maxlen: 24
                          190.152.108.0/24 maxlen: 24
                          190.152.109.0/24 maxlen: 24
                          190.152.131.0/24 maxlen: 24
                          190.152.161.0/24 maxlen: 24
                          190.152.185.0/24 maxlen: 24
                          190.152.187.0/24 maxlen: 24
                          190.152.191.0/24 maxlen: 24
                          190.152.201.0/24 maxlen: 24
                          190.152.216.0/23 maxlen: 24
                          190.152.220.0/24 maxlen: 24
                          190.152.236.0/24 maxlen: 24
                          200.107.22.0/24 maxlen: 24
                          200.107.29.0/24 maxlen: 24
                          201.219.50.0/24 maxlen: 24
                          181.196.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664273 (0x196511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=707a241055ca4e93d0ff1b7c954d30b3242f3713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:c1:e1:2a:49:f7:f1:df:e2:c7:95:59:f2:
                    f0:95:df:5c:77:e7:e9:3e:9b:3f:c3:c6:92:22:33:
                    69:43:7c:4d:e5:e0:45:48:b0:d9:8b:de:33:42:2f:
                    c5:82:61:9b:46:b8:5c:70:5c:64:7d:99:5f:92:8b:
                    94:56:b6:de:77:da:5a:af:d0:b0:da:d1:be:58:0c:
                    14:12:42:69:12:cb:c3:4d:81:91:4b:b2:3b:20:8d:
                    6e:e8:43:ff:e4:fd:df:4c:d3:46:e6:4e:d5:19:8f:
                    44:bb:76:68:e4:a6:fa:25:60:16:3e:2f:44:bf:89:
                    7a:4a:1d:36:26:46:82:39:61:7e:13:74:79:b9:9a:
                    dd:d5:ce:7a:17:4d:13:e9:c0:0d:85:5f:f9:7a:99:
                    2f:ec:d9:56:a7:5a:5d:81:b9:fa:19:61:90:4f:cd:
                    7d:b9:9c:a5:7b:07:94:8c:2a:40:47:2d:07:b6:ed:
                    01:c2:80:fc:21:ca:dd:50:db:37:22:35:a5:20:73:
                    7c:1a:50:21:5a:24:ef:e7:99:54:d9:8f:82:d3:8f:
                    a5:a5:29:d8:a7:01:1b:73:07:03:ec:65:31:6b:8a:
                    e7:ec:3e:eb:75:45:12:ea:bc:05:6e:c5:dc:92:16:
                    bd:37:70:6a:a5:4c:f5:d4:cb:49:88:77:ab:b9:99:
                    24:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:39:48:D0:1C:44:15:50:2E:3C:8F:B1:39:F9:77:FD:36:5C:A5:A7
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/707a241055ca4e93d0ff1b7c954d30b3242f3713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.112.204.0/22
                  181.113.97.0/24
                  181.113.157.0/24
                  181.196.11.0/24
                  181.196.13.0-181.196.14.255
                  181.196.66.0/24
                  181.196.88.0/24
                  181.211.104.0-181.211.106.255
                  181.211.217.0/24
                  186.42.8.0/23
                  186.42.12.0/24
                  186.42.112.0/23
                  186.42.128.0/17
                  186.46.56.0/22
                  186.46.128.0/17
                  186.47.137.0-186.47.138.255
                  186.47.182.0/23
                  186.178.19.0/24
                  186.178.36.0/23
                  186.178.43.0/24
                  186.178.47.0-186.178.48.255
                  186.178.51.0/24
                  186.178.67.0/24
                  186.178.107.0/24
                  186.178.112.0/24
                  186.178.115.0/24
                  186.178.117.0/24
                  186.178.170.0/24
                  190.11.3.0/24
                  190.11.20.0/24
                  190.11.26.0/24
                  190.152.0.0/17
                  190.152.131.0/24
                  190.152.161.0/24
                  190.152.185.0/24
                  190.152.187.0/24
                  190.152.191.0/24
                  190.152.201.0/24
                  190.152.216.0/23
                  190.152.220.0/24
                  190.152.236.0/24
                  190.152.254.0/23
                  190.214.0.0/17
                  200.107.22.0/24
                  200.107.29.0/24
                  200.125.224.0/19
                  201.219.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:4d:83:9a:f6:5e:3c:1e:05:9e:89:b0:f4:98:dd:a4:46:85:
         7c:0d:e9:32:69:bc:d2:bd:fc:1f:1c:4f:0a:8e:e1:7b:d9:2b:
         ca:48:b4:58:2d:21:02:12:e7:57:d5:6c:76:44:39:ca:92:18:
         fd:08:06:5b:9c:fd:e7:2c:45:89:37:66:fa:c5:b2:23:14:3e:
         d9:11:07:78:c6:b8:bb:a0:3d:04:bc:6a:fd:31:ff:51:1c:8f:
         7b:ac:8d:f6:e2:26:6d:b8:fa:c9:c6:58:4e:51:d8:51:35:01:
         e1:bb:b6:e3:56:48:c6:89:39:c5:a1:df:bc:a9:c0:fb:c5:db:
         f6:c0:3f:03:f7:9f:41:19:c1:83:56:0d:29:aa:3c:07:c5:a6:
         22:b8:e4:26:ef:2f:ee:63:b2:b7:8a:90:b5:ed:6e:fa:08:98:
         38:e4:9d:98:0e:73:0f:3c:ad:a2:f1:8c:00:31:eb:e9:e7:25:
         05:c8:cc:86:22:6c:34:29:d7:b0:4b:cd:07:e3:ad:cf:5f:cb:
         0a:aa:c6:66:92:85:fb:9a:13:e8:51:00:20:82:e6:b8:79:7f:
         3b:59:15:fd:0b:2a:e4:b1:0c:e7:34:20:a4:99:9d:16:57:6b:
         17:17:8d:7b:fe:71:e4:ab:37:52:c7:64:67:cb:a7:6a:51:ba:
         a2:32:d4:3f
-----BEGIN CERTIFICATE-----
MIIGfjCCBWagAwIBAgIDGWURMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
NTllMWUzMzE3NzA0NTc1ZjJjMGI3NTBlZTczYjE2NmEzOWNkMzcwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg3MDdhMjQxMDU1Y2E0
ZTkzZDBmZjFiN2M5NTRkMzBiMzI0MmYzNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtlfB4SpJ9/Hf4seVWfLwld9cd+fpPps/w8aSIjNpQ3xN5eBF
SLDZi94zQi/FgmGbRrhccFxkfZlfkouUVrbed9par9Cw2tG+WAwUEkJpEsvDTYGR
S7I7II1u6EP/5P3fTNNG5k7VGY9Eu3Zo5Kb6JWAWPi9Ev4l6Sh02JkaCOWF+E3R5
uZrd1c56F00T6cANhV/5epkv7NlWp1pdgbn6GWGQT819uZyleweUjCpARy0Htu0B
woD8IcrdUNs3IjWlIHN8GlAhWiTv55lU2Y+C04+lpSnYpwEbcwcD7GUxa4rn7D7r
dUUS6rwFbsXckha9N3BqpUz11MtJiHeruZkkpwIDAQABo4IDmTCCA5UwHQYDVR0O
BBYEFMM5SNAcRBVQLjyPsTn5d/02XKWnMB8GA1UdIwQYMBaAFIDwxydPgiTR6Xbz
gObvMs8Q+J3TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTA1OWUx
ZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2QzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWNhNzEzZjUtNmNhYy00ODZlLWEwMTYtYTNlOGIz
MWJmMDI5LzcwN2EyNDEwNTVjYTRlOTNkMGZmMWI3Yzk1NGQzMGIzMjQyZjM3MTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hY2E3MTNmNS02Y2FjLTQ4NmUtYTAxNi1hM2U4
YjMxYmYwMjkvMTA1OWUxZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2Qz
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAVsGCCsGAQUFBwEHAQH/
BIIBSjCCAUYwggFCBAIAATCCAToDBAK1cMwDBAC1cWEDBAC1cZ0DBAC1xAswDAME
ALXEDQMEALXEDgMEALXEQgMEALXEWDAMAwQDtdNoAwQAtdNqAwQAtdPZAwQBuioI
AwQAuioMAwQBuipwAwQHuiqAAwQCui44AwQHui6AMAwDBAC6L4kDBAC6L4oDBAG6
L7YDBAC6shMDBAG6siQDBAC6siswDAMEALqyLwMEALqyMAMEALqyMwMEALqyQwME
ALqyawMEALqycAMEALqycwMEALqydQMEALqyqgMEAL4LAwMEAL4LFAMEAL4LGgME
B76YAAMEAL6YgwMEAL6YoQMEAL6YuQMEAL6YuwMEAL6YvwMEAL6YyQMEAb6Y2AME
AL6Y3AMEAL6Y7AMEAb6Y/gMEB77WAAMEAMhrFgMEAMhrHQMEBch94AMEAMnbMjAN
BgkqhkiG9w0BAQsFAAOCAQEAok2DmvZePB4Fnomw9JjdpEaFfA3pMmm80r38HxxP
Co7he9kryki0WC0hAhLnV9VsdkQ5ypIY/QgGW5z95yxFiTdm+sWyIxQ+2REHeMa4
u6A9BLxq/TH/URyPe6yN9uImbbj6ycZYTlHYUTUB4bu241ZIxok5xaHfvKnA+8Xb
9sA/A/efQRnBg1YNKao8B8WmIrjkJu8v7mOyt4qQte1u+giYOOSdmA5zDzytovGM
ADHr6eclBcjMhiJsNCnXsEvNB+Otz1/LCqrGZpKF+5oT6FEAIILmuHl/O1kV/Qsq
5LEM5zQgpJmdFldrFxeNe/5x5Ks3UsdkZ8unalG6ojLUPw==
-----END CERTIFICATE-----
Generated at Thu Mar 28 03:26:10 2024 by rpki-client on console-ams.rpki-client.org