Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232352e302f32342d3234203d3e203532333437.roa
File:                     3138362e3137372e3232352e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          Sq2XxPAHueujYVAHwsSC/C4lJ2aD1l947rPRPqo4akg=
Subject key identifier:   35:56:B5:0E:28:79:95:A5:03:92:4E:95:1F:69:B5:E7:03:7C:02:B7
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       12CA4ADCFA449EF64B726705979CFDC62A8BDB65
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232352e302f32342d3234203d3e203532333437.roa
Signing time:             Fri 01 Aug 2025 22:15:01 +0000
ROA not before:           Fri 01 Aug 2025 22:10:01 +0000
ROA not after:            Fri 31 Jul 2026 22:15:01 +0000
asID:                     52347
IP address blocks:        186.177.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 06:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ca:4a:dc:fa:44:9e:f6:4b:72:67:05:97:9c:fd:c6:2a:8b:db:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Aug  1 22:10:01 2025 GMT
            Not After : Jul 31 22:15:01 2026 GMT
        Subject: CN=3556B50E287995A503924E951F69B5E7037C02B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:d0:1c:b8:6a:7a:b7:d0:d4:a9:cf:d5:4e:
                    17:ab:ab:98:ca:af:f8:36:1d:4a:ff:2f:99:62:2b:
                    87:b8:12:00:83:be:91:13:b1:0e:c9:7b:2f:91:38:
                    c9:6f:8f:b2:e6:36:cf:73:01:26:67:77:bc:6a:8c:
                    e3:78:9c:08:f0:cb:cf:29:a6:28:27:2e:62:e4:cd:
                    22:67:e8:fe:88:03:7a:fd:cf:77:22:81:8a:41:cf:
                    dc:50:fd:91:61:b0:27:5b:7c:77:17:65:32:20:3d:
                    3d:0d:52:5b:85:c7:d1:a9:3f:9e:5b:dd:42:15:16:
                    b3:74:ff:b9:b7:15:95:b9:13:49:94:53:8c:a4:b4:
                    43:3a:de:39:60:95:fd:a8:ba:1e:02:06:4b:70:c1:
                    9f:61:e7:99:ae:78:12:0a:c5:81:f3:d2:f2:45:51:
                    ce:e6:56:c1:b4:a2:80:20:01:e7:b2:d2:1d:6f:fd:
                    07:e1:51:da:17:66:a7:07:21:1e:f2:e5:b3:25:90:
                    84:38:91:96:3e:72:73:9b:d7:fb:1a:dd:77:82:c7:
                    27:05:f3:fb:3c:98:2a:3d:d9:79:4c:0d:1b:6c:32:
                    78:d9:c7:ac:2f:95:9a:05:0e:6f:48:a2:38:aa:4e:
                    15:88:f6:66:83:86:a6:89:29:8f:a8:96:0f:ca:ce:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:56:B5:0E:28:79:95:A5:03:92:4E:95:1F:69:B5:E7:03:7C:02:B7
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232352e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:66:bc:44:26:b1:6e:72:10:ff:a1:fc:6d:e4:2b:87:6f:33:
         67:42:76:7d:38:bb:d6:76:82:d4:c8:e8:aa:19:a7:18:6c:d3:
         18:1a:3b:92:2a:ca:b6:5a:59:ed:eb:93:b7:fd:4e:a1:ab:4e:
         14:be:96:77:32:9b:8e:7f:ed:26:0b:d6:40:67:0b:e4:c0:b3:
         a2:a0:b8:f2:23:5f:c3:04:f6:fa:f8:71:66:57:d1:18:fc:ad:
         73:b7:b6:f3:33:40:fd:d8:53:de:b7:2b:b3:43:de:6f:62:d0:
         80:41:ae:35:89:78:0a:db:b7:23:61:20:c7:db:48:31:2f:64:
         1f:66:1e:b9:59:45:47:0d:59:c1:ed:8e:91:2a:57:4d:3d:ae:
         a5:21:de:02:56:97:e9:39:32:2c:da:eb:94:94:c0:27:1c:0e:
         93:21:ed:5d:d9:9c:d5:03:f2:9b:fd:f0:6c:68:cf:23:30:73:
         9b:a4:1d:cf:87:e1:83:ef:8b:2d:91:56:d7:b9:2f:96:cb:ae:
         ea:eb:9a:9a:c1:36:0f:21:37:65:f5:ea:69:7c:76:c4:4b:1f:
         d2:e1:91:46:81:42:6e:5f:ba:ca:30:08:67:04:fe:94:c1:33:
         d7:08:8d:81:23:6c:8a:33:5a:b1:34:4b:7d:46:96:d0:b5:ab:
         99:f2:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:33:39 2025 by rpki-client