Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232372e302f32342d3234203d3e203532333437.roa
File:                     3138362e3137372e3232372e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          5cK/JqWEG0Zp2XPItHzfs7WxrwjU+ScTUqdJ9PYrTws=
Subject key identifier:   12:E5:1D:BF:C3:2F:D6:F5:F5:19:50:CD:1A:B2:B9:25:57:6F:B3:C6
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       28237AD07745E799971359976D69417512C38D6F
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232372e302f32342d3234203d3e203532333437.roa
Signing time:             Fri 01 Aug 2025 22:15:00 +0000
ROA not before:           Fri 01 Aug 2025 22:10:00 +0000
ROA not after:            Fri 31 Jul 2026 22:15:00 +0000
asID:                     52347
IP address blocks:        186.177.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:23:7a:d0:77:45:e7:99:97:13:59:97:6d:69:41:75:12:c3:8d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Aug  1 22:10:00 2025 GMT
            Not After : Jul 31 22:15:00 2026 GMT
        Subject: CN=12E51DBFC32FD6F5F51950CD1AB2B925576FB3C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:5e:c3:7b:31:ce:cf:e6:9a:db:78:1a:ed:
                    da:6d:87:17:2d:a0:d5:5f:bc:d2:e3:fc:5a:22:cb:
                    2e:44:9f:33:bc:da:4a:d4:8d:82:d0:3f:3f:f0:9c:
                    1b:a0:b9:1e:98:c6:99:59:92:92:96:11:f6:85:d1:
                    f1:e6:71:62:57:9c:ed:37:9b:8a:49:a0:42:89:17:
                    06:8f:38:c8:00:12:d5:38:5d:33:bd:61:de:e6:89:
                    0f:5b:ea:7e:7f:95:19:f0:79:f5:4f:49:7a:a0:5d:
                    81:c6:0b:98:74:63:52:65:76:08:9e:65:0c:2c:4f:
                    2f:c5:22:0c:cd:ee:f7:af:4e:9c:a4:37:86:4f:bd:
                    cc:3f:db:9f:a9:d1:08:6b:30:21:94:8a:64:ab:cd:
                    be:ce:35:21:22:df:db:71:44:cc:a3:65:93:f9:96:
                    30:93:6e:dc:6f:74:0d:49:36:bb:f1:c2:bd:48:30:
                    c0:e2:0e:28:4c:91:ec:f8:88:a2:60:c4:40:46:7c:
                    23:f3:6a:10:9e:00:76:89:3d:14:44:01:a4:c4:9d:
                    6d:db:2c:5e:66:5e:82:cb:1d:78:c4:2c:fb:bb:44:
                    d1:51:d2:05:59:fc:d0:77:7b:e2:73:b8:74:02:5b:
                    9c:73:e4:1a:3a:fb:f1:5c:17:b2:28:6e:44:b7:be:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E5:1D:BF:C3:2F:D6:F5:F5:19:50:CD:1A:B2:B9:25:57:6F:B3:C6
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232372e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:2d:53:06:a7:1e:23:69:63:e1:58:ef:f8:53:37:65:a3:8d:
         b8:8c:a9:cd:ba:96:b8:52:d8:f9:29:53:f6:b4:79:d3:ff:a9:
         3b:28:f9:9c:60:80:38:96:43:66:54:dd:f6:bc:9a:90:5a:4b:
         f7:5f:e3:7e:09:b1:9b:eb:fb:b9:70:de:9d:49:d0:d6:a2:2e:
         0e:69:a6:01:41:1b:4a:84:fa:1c:12:0e:7d:b3:39:8a:ef:3c:
         17:42:d4:b5:2f:63:e4:6c:cd:98:a8:93:62:42:a5:b0:4e:72:
         21:bc:4f:e0:49:78:28:6f:9d:64:fc:7b:8f:1f:33:b3:1d:ff:
         9f:74:65:3f:67:a5:6e:da:3b:50:a8:ec:2c:0c:ac:a9:82:fb:
         27:06:b2:84:66:6d:41:91:3e:c6:c1:1b:fa:1c:80:0b:76:4b:
         32:7e:a2:1c:5e:2d:2a:1c:58:85:cb:fe:b4:6a:ba:a8:e6:f6:
         a6:fb:41:ba:d4:a2:96:29:94:6a:53:31:a1:a6:df:9b:59:53:
         ac:35:24:c8:39:ae:f0:4f:91:ca:13:d0:cc:94:ee:de:27:d7:
         b3:80:23:27:88:50:fa:a2:57:ba:da:38:4b:dc:d5:ec:ff:c7:
         74:c2:00:44:5b:d6:ac:51:a1:89:77:3b:a0:7d:6d:34:14:e9:
         db:94:4e:10
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKCN60HdF55mXE1mXbWlBdRLDjW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkU3NUY0MkQyNzExMkZFNUQ4OTU3RkRGMTk0OTUx
MDVGOUFERjAeFw0yNTA4MDEyMjEwMDBaFw0yNjA3MzEyMjE1MDBaMDMxMTAvBgNV
BAMTKDEyRTUxREJGQzMyRkQ2RjVGNTE5NTBDRDFBQjJCOTI1NTc2RkIzQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi4F7DezHOz+aa23ga7dpthxct
oNVfvNLj/Foiyy5EnzO82krUjYLQPz/wnBuguR6YxplZkpKWEfaF0fHmcWJXnO03
m4pJoEKJFwaPOMgAEtU4XTO9Yd7miQ9b6n5/lRnwefVPSXqgXYHGC5h0Y1Jldgie
ZQwsTy/FIgzN7vevTpykN4ZPvcw/25+p0QhrMCGUimSrzb7ONSEi39txRMyjZZP5
ljCTbtxvdA1JNrvxwr1IMMDiDihMkez4iKJgxEBGfCPzahCeAHaJPRREAaTEnW3b
LF5mXoLLHXjELPu7RNFR0gVZ/NB3e+JzuHQCW5xz5Bo6+/FcF7IobkS3vgPzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEuUdv8Mv1vX1GVDNGrK5JVdvs8YwHwYDVR0j
BBgwFoAUkvvnX0LScRL+XYlX/fGUlRBfmt8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQjE5MzQzRkU0Nzk5N0Q4MzBDNjFDREU1NENFODEzODlF
MkZERjMzRURENjI0Nzk5OEQ1Q0E2RUQxREZDNTMwLzAvOTJGQkU3NUY0MkQyNzEx
MkZFNUQ4OTU3RkRGMTk0OTUxMDVGOUFERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCRTc1RjQyRDI3MTEyRkU1
RDg5NTdGREYxOTQ5NTEwNUY5QURGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkIxOTM0M0ZFNDc5OTdEODMwQzYxQ0RFNTRDRTgxMzg5RTJGREYzM0VE
RDYyNDc5OThENUNBNkVEMURGQzUzMC8wLzMxMzgzNjJlMzEzNzM3MmUzMjMyMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzNDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAurHj
MA0GCSqGSIb3DQEBCwUAA4IBAQCzLVMGpx4jaWPhWO/4Uzdlo424jKnNupa4Utj5
KVP2tHnT/6k7KPmcYIA4lkNmVN32vJqQWkv3X+N+CbGb6/u5cN6dSdDWoi4OaaYB
QRtKhPocEg59szmK7zwXQtS1L2PkbM2YqJNiQqWwTnIhvE/gSXgob51k/HuPHzOz
Hf+fdGU/Z6Vu2jtQqOwsDKypgvsnBrKEZm1BkT7GwRv6HIALdksyfqIcXi0qHFiF
y/60arqo5vam+0G61KKWKZRqUzGhpt+bWVOsNSTIOa7wT5HKE9DMlO7eJ9ezgCMn
iFD6ole62jhL3NXs/8d0wgBEW9asUaGJdzugfW00FOnblE4Q
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:30:34 2025 by rpki-client