Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232342e302f32322d3232203d3e203532333437.roa
File:                     3138362e3137372e3232342e302f32322d3232203d3e203532333437.roa (raw, json)
Hash identifier:          R1Adt2/Bf0C5ZuEPVI17rO8ngPsxBBMNIM3czAR1Ogw=
Subject key identifier:   2F:2B:84:D1:2F:3A:74:01:8D:68:9B:05:BE:B6:A0:BB:9A:EB:06:91
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       338184420DA4F92B60B8DB645A7992C0517A8DF9
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232342e302f32322d3232203d3e203532333437.roa
Signing time:             Fri 01 Aug 2025 22:10:00 +0000
ROA not before:           Fri 01 Aug 2025 22:05:00 +0000
ROA not after:            Fri 31 Jul 2026 22:10:00 +0000
asID:                     52347
IP address blocks:        186.177.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:81:84:42:0d:a4:f9:2b:60:b8:db:64:5a:79:92:c0:51:7a:8d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Aug  1 22:05:00 2025 GMT
            Not After : Jul 31 22:10:00 2026 GMT
        Subject: CN=2F2B84D12F3A74018D689B05BEB6A0BB9AEB0691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b5:ca:0c:9a:15:f8:da:dc:9b:08:98:4a:f1:
                    26:6a:f7:17:77:68:08:a0:9b:ae:9e:e7:ac:5c:d3:
                    0b:1f:b6:b5:85:4a:7f:2b:ec:5c:98:aa:1b:7e:26:
                    f9:f7:34:c7:4a:f4:13:53:b5:cd:bd:9b:99:c0:91:
                    f9:b9:a4:6e:9e:90:11:4b:ca:90:3e:94:93:0a:04:
                    39:b0:ff:87:56:b0:1b:aa:21:6a:f8:99:86:6c:2a:
                    c9:e9:6d:61:31:a9:45:49:cb:ba:a4:5a:57:d9:4b:
                    86:e2:4e:58:4f:ad:d8:f8:ce:c9:9c:e6:fc:3b:95:
                    6c:c7:a5:63:c4:2f:99:08:1c:78:41:71:9a:d5:94:
                    a3:d2:16:42:1a:62:cd:ee:ab:d5:b7:d9:49:a4:50:
                    c0:ee:5e:32:79:66:61:04:95:e6:6c:ea:af:90:a1:
                    9c:54:77:24:1c:c9:5c:31:6e:29:da:db:03:51:5e:
                    6e:65:a4:8b:64:cd:29:b9:7c:d5:ab:92:f8:7c:8a:
                    a6:b6:3d:be:76:30:d3:d9:69:b7:f7:df:2f:85:d8:
                    9a:88:72:63:27:c8:1a:98:1f:76:93:7e:f1:54:52:
                    68:2f:8e:7a:21:41:d8:ea:bd:bd:82:0e:dd:c2:d5:
                    bf:dd:a9:97:d9:5f:15:d1:bb:75:ca:ca:10:28:04:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2B:84:D1:2F:3A:74:01:8D:68:9B:05:BE:B6:A0:BB:9A:EB:06:91
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232342e302f32322d3232203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:9f:b1:b7:53:84:0d:e7:17:0f:b1:e6:15:88:a4:f6:93:cf:
         50:77:92:5f:34:64:a0:47:43:b4:2c:89:7b:ff:0f:ca:ef:3f:
         6b:e1:a8:2f:b8:11:79:84:98:c9:21:e9:19:24:42:d4:91:ce:
         55:d3:f6:25:92:2f:55:13:b6:dd:ef:11:8b:cb:5d:b4:8b:12:
         bf:88:56:62:f2:a8:7a:ff:de:63:2c:d0:65:df:c2:b0:1d:9d:
         a3:83:60:64:38:98:3c:70:97:3c:14:a5:f5:2d:0c:75:d1:9f:
         37:6f:24:df:cb:db:7c:fd:ea:b1:0e:07:9b:61:c7:55:26:d4:
         70:3a:00:57:dc:1e:b1:10:73:ec:1d:66:27:41:82:d3:64:19:
         df:ff:67:0a:22:d7:92:db:b7:2f:1c:47:f0:59:74:5e:53:b7:
         11:66:9c:c6:65:5b:65:16:8e:ee:4b:2c:67:fe:21:f5:cb:c7:
         5c:91:8f:1f:34:ef:7a:5d:4a:b9:75:90:9c:fb:9f:a8:89:1c:
         8f:ad:dc:6f:f5:11:7b:a0:eb:ce:5d:27:f5:b4:0b:99:72:3f:
         ff:a6:26:58:e6:b8:50:57:ba:d3:5e:fe:4a:99:db:aa:8f:18:
         52:e2:e9:35:9a:e1:1b:d5:2c:d8:f1:5f:be:3e:5c:ef:10:a5:
         61:c6:ea:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:03:56 2025 by rpki-client