Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138362e302f32332d3233203d3e20323635373238.roa
File:                     3136302e3233382e3138362e302f32332d3233203d3e20323635373238.roa (raw, json)
Hash identifier:          qbDyn6tqRjb/j7PbgA94cC85IE9w5ADRx8/lkuOcLw8=
Subject key identifier:   E2:95:B0:6A:FE:0F:B7:B5:3E:56:1A:8E:11:58:A2:44:D7:52:88:29
Certificate issuer:       /CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
Certificate serial:       56A7D56D64BCE7C0EF730FC34DF94B347F12E9F5
Authority key identifier: B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138362e302f32332d3233203d3e20323635373238.roa
Signing time:             Fri 02 May 2025 21:17:38 +0000
ROA not before:           Fri 02 May 2025 21:12:38 +0000
ROA not after:            Fri 01 May 2026 21:17:38 +0000
asID:                     265728
IP address blocks:        160.238.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 16:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a7:d5:6d:64:bc:e7:c0:ef:73:0f:c3:4d:f9:4b:34:7f:12:e9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
        Validity
            Not Before: May  2 21:12:38 2025 GMT
            Not After : May  1 21:17:38 2026 GMT
        Subject: CN=E295B06AFE0FB7B53E561A8E1158A244D7528829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ae:14:55:71:48:10:20:67:ba:90:b6:a1:89:
                    44:66:8d:a5:04:97:88:16:5b:ff:f9:78:c9:4b:20:
                    b7:e2:b6:51:d7:34:8d:b4:25:cc:41:96:a4:c9:b7:
                    30:67:67:6e:98:11:d5:92:08:52:f4:73:b4:3c:50:
                    96:e1:5d:90:72:4f:3b:a9:61:76:46:7c:8c:09:2f:
                    8f:c5:d7:d0:c4:7a:7b:62:08:0c:70:ee:b6:72:cb:
                    30:a6:a9:92:f3:24:61:a2:74:eb:f7:70:78:e3:06:
                    03:c5:33:c3:1d:79:7d:20:d5:16:4a:2d:6e:bd:26:
                    81:9e:14:8d:8e:2e:e0:60:eb:d8:4d:77:15:f1:4b:
                    36:4a:92:68:dc:58:30:0f:cd:50:5a:30:92:cd:95:
                    77:b4:46:f0:98:08:6b:b9:86:22:28:ad:65:70:45:
                    bc:ca:72:40:a3:53:81:31:a7:16:3a:27:3c:9b:c4:
                    59:e7:33:79:a6:82:10:24:0e:7a:c0:bf:ae:3a:cd:
                    f6:70:cf:96:b1:0c:79:9a:1e:26:a8:e9:d3:b8:29:
                    a2:49:c6:c9:69:92:5a:b6:6c:95:10:5c:fd:d4:eb:
                    51:4c:c5:db:54:66:7f:ed:bb:83:e9:49:60:16:ce:
                    80:af:51:5c:e9:5a:1c:f8:e2:68:92:fe:a2:f6:1a:
                    ca:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:95:B0:6A:FE:0F:B7:B5:3E:56:1A:8E:11:58:A2:44:D7:52:88:29
            X509v3 Authority Key Identifier:
                keyid:B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138362e302f32332d3233203d3e20323635373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:25:2c:7e:38:f0:5d:ab:c5:02:8f:df:d1:42:5d:0e:6f:3e:
         6c:0f:17:dc:68:29:0f:02:4a:22:f0:81:90:0a:8e:b5:0e:fd:
         b5:32:b2:c1:e9:2d:85:5a:29:7d:79:b6:74:6f:22:d9:00:89:
         22:31:e6:d8:1d:d0:0b:14:37:d8:03:fe:16:66:8c:e0:bc:4f:
         07:e6:6a:f9:a1:90:f2:45:95:b1:d9:30:24:d0:ea:1b:f5:d9:
         12:32:9d:c0:fe:78:65:46:f7:74:90:d5:17:87:6c:5f:64:bf:
         27:e3:cd:7c:d0:aa:4c:d0:ec:f8:82:27:3b:35:03:7a:dc:8d:
         2c:8e:d6:b9:75:5d:93:c0:ec:1f:87:4e:5c:b8:c8:09:2f:d2:
         5b:02:03:9b:38:3b:01:1f:62:55:98:ac:5c:c5:ec:35:b7:24:
         9a:a1:80:1c:17:41:fa:47:a9:6b:18:5e:e1:8d:7f:75:73:9d:
         98:e6:a9:9e:57:df:be:99:d2:48:28:73:98:95:a9:9a:a5:ea:
         d7:8a:b3:d0:7c:c8:fe:b3:ac:0b:1b:66:c3:d1:d2:f3:67:1f:
         42:1f:c3:86:ea:7f:41:b8:87:67:dd:f9:0a:0b:9f:50:5e:b5:
         d9:dc:60:11:fb:e8:63:84:a0:17:36:ad:a1:36:9a:97:2f:91:
         b8:40:5e:c4
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUVqfVbWS858Dvcw/DTflLNH8S6fUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdFMUFCRUMwMTBBQkI5QUY0NjNCRjIyQjE2QzU2MUI1
QzJDNDQ0NDAeFw0yNTA1MDIyMTEyMzhaFw0yNjA1MDEyMTE3MzhaMDMxMTAvBgNV
BAMTKEUyOTVCMDZBRkUwRkI3QjUzRTU2MUE4RTExNThBMjQ0RDc1Mjg4MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWrhRVcUgQIGe6kLahiURmjaUE
l4gWW//5eMlLILfitlHXNI20JcxBlqTJtzBnZ26YEdWSCFL0c7Q8UJbhXZByTzup
YXZGfIwJL4/F19DEentiCAxw7rZyyzCmqZLzJGGidOv3cHjjBgPFM8MdeX0g1RZK
LW69JoGeFI2OLuBg69hNdxXxSzZKkmjcWDAPzVBaMJLNlXe0RvCYCGu5hiIorWVw
RbzKckCjU4ExpxY6JzybxFnnM3mmghAkDnrAv646zfZwz5axDHmaHiao6dO4KaJJ
xslpklq2bJUQXP3U61FMxdtUZn/tu4PpSWAWzoCvUVzpWhz44miS/qL2GsonAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU4pWwav4Pt7U+VhqOEViiRNdSiCkwHwYDVR0j
BBgwFoAUt+Gr7AEKu5r0Y78isWxWG1wsREQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTUxMUQ2ODFFNzJGOUQ4MTRGN0JEOEZDMzlEMUZFRDdF
QTNGOTRBQjcwNEY2ODhDOEMzOEYxQTUxNzMyQkRDLzAvQjdFMUFCRUMwMTBBQkI5
QUY0NjNCRjIyQjE2QzU2MUI1QzJDNDQ0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CN0UxQUJFQzAxMEFCQjlBRjQ2
M0JGMjJCMTZDNTYxQjVDMkM0NDQ0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1MTFENjgxRTcyRjlEODE0RjdCRDhGQzM5RDFGRUQ3RUEzRjk0QUI3
MDRGNjg4QzhDMzhGMUE1MTczMkJEQy8wLzMxMzYzMDJlMzIzMzM4MmUzMTM4MzYy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzUzNzMyMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg
7rowDQYJKoZIhvcNAQELBQADggEBALolLH448F2rxQKP39FCXQ5vPmwPF9xoKQ8C
SiLwgZAKjrUO/bUyssHpLYVaKX15tnRvItkAiSIx5tgd0AsUN9gD/hZmjOC8Twfm
avmhkPJFlbHZMCTQ6hv12RIyncD+eGVG93SQ1ReHbF9kvyfjzXzQqkzQ7PiCJzs1
A3rcjSyO1rl1XZPA7B+HTly4yAkv0lsCA5s4OwEfYlWYrFzF7DW3JJqhgBwXQfpH
qWsYXuGNf3VznZjmqZ5X376Z0kgoc5iVqZql6teKs9B8yP6zrAsbZsPR0vNnH0If
w4bqf0G4h2fd+QoLn1BetdncYBH76GOEoBc2raE2mpcvkbhAXsQ=
-----END CERTIFICATE-----
Generated at Sat May 10 01:26:39 2025 by rpki-client