Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3230392e302f32342d3234203d3e20323634373331.roa
File:                     3138362e3136372e3230392e302f32342d3234203d3e20323634373331.roa (raw, json)
Hash identifier:          grgRX132/0w+YMQrkXUHv1Hepgtk7Gih2WRXt8tgAgY=
Subject key identifier:   65:DB:FF:64:B6:9B:D1:19:01:CD:24:8C:29:4F:EA:8E:F0:09:10:19
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       50CCC0EC46F6705389AB3C2D079FEC7394AE6ED0
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3230392e302f32342d3234203d3e20323634373331.roa
Signing time:             Wed 09 Apr 2025 20:14:21 +0000
ROA not before:           Wed 09 Apr 2025 20:09:21 +0000
ROA not after:            Wed 08 Apr 2026 20:14:21 +0000
asID:                     264731
IP address blocks:        186.167.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cc:c0:ec:46:f6:70:53:89:ab:3c:2d:07:9f:ec:73:94:ae:6e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Apr  9 20:09:21 2025 GMT
            Not After : Apr  8 20:14:21 2026 GMT
        Subject: CN=65DBFF64B69BD11901CD248C294FEA8EF0091019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:e5:b1:3d:88:f8:f7:b7:9b:8a:a6:0e:3a:
                    95:80:09:a2:98:48:c5:e1:f4:1e:48:7e:b5:16:8b:
                    c3:e1:ce:88:57:94:86:39:33:36:bf:ae:fb:16:84:
                    5d:7c:18:5a:fb:e8:be:f8:f7:7c:ba:cc:a1:6f:ac:
                    56:5e:d0:6d:be:e5:79:59:45:79:b6:dd:2f:ea:ea:
                    17:8c:f3:91:0d:60:6a:8f:85:b4:6e:48:45:9a:52:
                    5c:16:6d:db:e5:06:a5:02:40:22:d6:6e:b6:42:45:
                    28:dc:b5:c2:2a:30:22:71:a9:85:7a:a3:18:d4:c9:
                    fe:40:72:f2:37:05:33:be:c3:53:3e:17:72:20:7b:
                    bc:44:f4:5a:a1:da:ae:c0:c9:72:fa:00:89:f2:e7:
                    2c:6c:37:a1:c2:a3:e2:70:14:f4:bf:0d:ff:d0:ed:
                    16:ad:a5:5e:c1:de:fa:7d:20:a5:9b:b0:a9:53:43:
                    65:e8:5f:54:c2:de:0d:02:ad:4d:84:bb:2c:18:39:
                    f0:ac:c0:3d:e3:3b:37:1b:d2:22:c1:c2:f6:b2:d1:
                    4d:ab:cc:c8:19:3c:43:b3:b2:70:f5:4d:a0:96:5e:
                    6b:56:a0:9f:51:b1:56:4d:88:fb:2f:ad:aa:f7:ee:
                    b6:26:64:40:eb:cc:77:c0:bf:71:91:49:01:91:d5:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DB:FF:64:B6:9B:D1:19:01:CD:24:8C:29:4F:EA:8E:F0:09:10:19
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3230392e302f32342d3234203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:d3:cf:e3:f7:2a:a3:4b:fd:2b:7b:7b:cc:12:33:06:05:71:
         14:18:f6:1b:02:98:ab:9f:3a:ac:ae:27:cf:ac:97:aa:8a:c8:
         3e:d3:6b:01:bb:6b:d4:53:79:4d:14:87:7e:ea:26:f7:d8:f4:
         4b:0d:bb:79:a5:d2:b2:34:7f:2e:13:52:95:7a:fd:5b:aa:9c:
         a5:01:b8:17:d1:20:d2:ba:e3:da:78:47:7d:af:6c:d1:20:f9:
         e7:d5:a1:44:1d:e7:7a:a0:2d:00:10:c3:40:67:ae:04:5c:e7:
         65:cd:a9:58:c2:ca:ab:5d:54:d0:a0:81:a4:b0:c5:6b:44:a9:
         15:43:96:0d:67:d7:11:1f:8a:82:83:08:59:6f:3c:a4:c5:5c:
         e8:e1:38:8a:0d:a0:cb:4a:fd:4e:ef:33:d1:a6:b7:c0:4c:04:
         19:25:31:b1:19:91:eb:f4:62:08:39:57:55:b3:f7:eb:bb:a1:
         c5:42:d9:0c:c2:f3:77:f1:30:cd:71:a6:d6:77:45:c5:87:64:
         74:7d:82:3f:41:69:6b:1f:ce:84:44:3f:dd:4e:12:c9:24:5b:
         dc:7e:6b:ac:d3:4c:df:bf:34:01:63:5b:18:0e:29:f5:52:af:
         23:84:d4:43:cb:97:96:13:1d:09:f5:45:c1:ca:2d:d4:91:f1:
         fb:5b:02:31
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUUMzA7Eb2cFOJqzwtB5/sc5SubtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk1MkExNkQzQUM1OTcyNjhFNzgyRjQ5MzAxMDFFOTBE
NjY4QTAxMjAeFw0yNTA0MDkyMDA5MjFaFw0yNjA0MDgyMDE0MjFaMDMxMTAvBgNV
BAMTKDY1REJGRjY0QjY5QkQxMTkwMUNEMjQ4QzI5NEZFQThFRjAwOTEwMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7uWxPYj497ebiqYOOpWACaKY
SMXh9B5IfrUWi8PhzohXlIY5Mza/rvsWhF18GFr76L7493y6zKFvrFZe0G2+5XlZ
RXm23S/q6heM85ENYGqPhbRuSEWaUlwWbdvlBqUCQCLWbrZCRSjctcIqMCJxqYV6
oxjUyf5AcvI3BTO+w1M+F3Ige7xE9Fqh2q7AyXL6AIny5yxsN6HCo+JwFPS/Df/Q
7RatpV7B3vp9IKWbsKlTQ2XoX1TC3g0CrU2EuywYOfCswD3jOzcb0iLBwvay0U2r
zMgZPEOzsnD1TaCWXmtWoJ9RsVZNiPsvrar37rYmZEDrzHfAv3GRSQGR1ay5AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUZdv/ZLab0RkBzSSMKU/qjvAJEBkwHwYDVR0j
BBgwFoAUSVKhbTrFlyaOeC9JMBAekNZooBIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQjYxNTExMEFBMDRFMzQzRjVDOEI1RTJFMjNERjE1MERE
MjlGRjUyNjY2MTAwNUJBM0E4NDkzNkIxOTVERjRBLzAvNDk1MkExNkQzQUM1OTcy
NjhFNzgyRjQ5MzAxMDFFOTBENjY4QTAxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OTUyQTE2RDNBQzU5NzI2OEU3
ODJGNDkzMDEwMUU5MEQ2NjhBMDEyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUI2MTUxMTBBQTA0RTM0M0Y1QzhCNUUyRTIzREYxNTBERDI5RkY1MjY2
NjEwMDVCQTNBODQ5MzZCMTk1REY0QS8wLzMxMzgzNjJlMzEzNjM3MmUzMjMwMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNzMzMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6
p9EwDQYJKoZIhvcNAQELBQADggEBAAHTz+P3KqNL/St7e8wSMwYFcRQY9hsCmKuf
OqyuJ8+sl6qKyD7TawG7a9RTeU0Uh37qJvfY9EsNu3ml0rI0fy4TUpV6/VuqnKUB
uBfRINK649p4R32vbNEg+efVoUQd53qgLQAQw0BnrgRc52XNqVjCyqtdVNCggaSw
xWtEqRVDlg1n1xEfioKDCFlvPKTFXOjhOIoNoMtK/U7vM9Gmt8BMBBklMbEZkev0
Ygg5V1Wz9+u7ocVC2QzC83fxMM1xptZ3RcWHZHR9gj9BaWsfzoREP91OEskkW9x+
a6zTTN+/NAFjWxgOKfVSryOE1EPLl5YTHQn1RcHKLdSR8ftbAjE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:27 2025 by rpki-client on console.sobornost.net