Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3232302e302f32342d3234203d3e203237373438.roa
File:                     3138362e3134382e3232302e302f32342d3234203d3e203237373438.roa (raw, json)
Hash identifier:          5NCnB5VtnRx/wEALc8fiGw+UiyCIRWJCruzO8iUScbE=
Subject key identifier:   B4:A4:8A:FC:DB:00:E2:1F:86:9E:01:F7:B1:BE:66:B8:7B:61:2C:37
Certificate issuer:       /CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D
Certificate serial:       4B035A312BDEFCA65B047BA7BC7C904546840FCF
Authority key identifier: 00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3232302e302f32342d3234203d3e203237373438.roa
Signing time:             Tue 22 Jul 2025 15:00:00 +0000
ROA not before:           Tue 22 Jul 2025 14:55:00 +0000
ROA not after:            Tue 21 Jul 2026 15:00:00 +0000
asID:                     27748
IP address blocks:        186.148.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:03:5a:31:2b:de:fc:a6:5b:04:7b:a7:bc:7c:90:45:46:84:0f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D
        Validity
            Not Before: Jul 22 14:55:00 2025 GMT
            Not After : Jul 21 15:00:00 2026 GMT
        Subject: CN=B4A48AFCDB00E21F869E01F7B1BE66B87B612C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:7a:36:08:cb:6d:f3:7c:79:69:0e:0f:7d:
                    3b:42:3a:ff:42:6d:77:7c:2c:24:ee:07:60:46:87:
                    04:0d:ef:7a:eb:26:61:f3:69:32:8d:49:10:b1:8b:
                    0d:69:3d:ac:d2:6a:18:24:7b:90:55:5e:26:90:a9:
                    04:4d:00:e0:df:f6:25:33:2d:24:5b:ac:80:a5:cf:
                    2c:0d:f0:48:b9:ca:9a:21:a1:99:ea:b2:30:4c:38:
                    5a:ab:62:08:c3:97:ba:2d:ee:41:d2:8f:86:31:a8:
                    20:e1:16:c6:cd:2f:ec:f9:ea:74:99:0c:5a:59:35:
                    33:fa:b0:22:73:77:2b:99:75:35:e1:8a:9f:8b:82:
                    9f:88:fb:77:74:52:79:15:5b:a9:56:6b:b9:7f:f8:
                    99:4e:42:26:1f:8d:47:71:c9:30:b3:22:d5:e6:c5:
                    4c:ba:4f:43:bc:27:33:0b:4d:20:79:8c:d2:13:72:
                    00:ae:06:1d:e9:2c:2b:6f:ce:d0:65:7a:5a:cb:43:
                    01:e4:9b:bc:de:3d:87:2d:36:d1:64:5c:e9:54:f2:
                    f0:c7:69:01:a1:22:f6:72:85:79:54:5e:32:5a:93:
                    f6:65:14:db:b9:47:43:25:cc:c9:60:85:48:3a:66:
                    e1:a8:c9:97:06:5c:cd:02:e3:8c:ca:da:2b:38:80:
                    c0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A4:8A:FC:DB:00:E2:1F:86:9E:01:F7:B1:BE:66:B8:7B:61:2C:37
            X509v3 Authority Key Identifier:
                keyid:00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3232302e302f32342d3234203d3e203237373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b9:cf:7a:2f:a5:15:fd:dd:01:2a:f6:88:7d:11:dd:c8:56:
         20:75:d9:03:b9:6a:e0:0d:0a:ef:c7:87:26:c1:6b:e1:d7:58:
         60:db:c8:66:5c:94:e0:08:72:71:49:a7:2a:eb:cd:7f:50:3d:
         10:09:3c:3e:1f:38:31:cf:db:f0:77:95:bf:ff:ac:cc:6e:50:
         ae:6b:29:dd:90:a4:83:4f:03:1f:57:d9:55:3d:b0:6d:b5:21:
         6c:57:3e:3d:ce:9f:87:2d:da:4e:d0:11:d7:14:7e:c6:ff:1c:
         b6:d8:77:a6:53:b6:a3:f6:7b:60:79:f4:40:c2:59:ce:b1:53:
         31:65:49:41:97:ae:5a:a3:71:3b:f9:c7:95:83:d5:e2:db:55:
         93:8b:19:db:26:3b:23:03:53:07:0c:8b:a5:df:a2:9a:3f:3c:
         f0:e2:e0:17:0a:43:78:53:ea:46:9b:f7:de:ae:70:dc:0a:1b:
         63:e9:cf:25:6c:4b:78:26:f2:f0:93:ca:e8:48:79:4b:cd:54:
         8a:9f:84:52:88:c2:43:8e:bc:4f:a0:cd:9a:47:ec:c0:5e:33:
         2e:5a:59:4a:ba:1a:09:75:43:1d:71:ea:bf:10:f2:48:7f:9f:
         fe:49:11:82:84:55:57:6e:7b:87:20:bb:c6:33:a3:8f:e7:49:
         c9:1d:3a:22
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSwNaMSve/KZbBHunvHyQRUaED88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAwM0NCQkVGQTdBM0M0Q0RENjgwQzEzQkFFMkRFMTk1
NTFFOEMwRDAeFw0yNTA3MjIxNDU1MDBaFw0yNjA3MjExNTAwMDBaMDMxMTAvBgNV
BAMTKEI0QTQ4QUZDREIwMEUyMUY4NjlFMDFGN0IxQkU2NkI4N0I2MTJDMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL+Xo2CMtt83x5aQ4PfTtCOv9C
bXd8LCTuB2BGhwQN73rrJmHzaTKNSRCxiw1pPazSahgke5BVXiaQqQRNAODf9iUz
LSRbrIClzywN8Ei5ypohoZnqsjBMOFqrYgjDl7ot7kHSj4YxqCDhFsbNL+z56nSZ
DFpZNTP6sCJzdyuZdTXhip+Lgp+I+3d0UnkVW6lWa7l/+JlOQiYfjUdxyTCzItXm
xUy6T0O8JzMLTSB5jNITcgCuBh3pLCtvztBlelrLQwHkm7zePYctNtFkXOlU8vDH
aQGhIvZyhXlUXjJak/ZlFNu5R0MlzMlghUg6ZuGoyZcGXM0C44zK2is4gMAlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUtKSK/NsA4h+GngH3sb5muHthLDcwHwYDVR0j
BBgwFoAUAAPLvvp6PEzdaAwTuuLeGVUejA0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTVGRjMxMjJDQTBBNDQ3OTU0NjAyMEExQzBDQjlDQ0FF
RkI5QjM3NTc3NTUzRTY3Mjc3NzFFMzYwN0E2OEY1LzAvMDAwM0NCQkVGQTdBM0M0
Q0RENjgwQzEzQkFFMkRFMTk1NTFFOEMwRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMDAzQ0JCRUZBN0EzQzRDREQ2
ODBDMTNCQUUyREUxOTU1MUU4QzBELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE1RkYzMTIyQ0EwQTQ0Nzk1NDYwMjBBMUMwQ0I5Q0NBRUZCOUIzNzU3
NzU1M0U2NzI3NzcxRTM2MDdBNjhGNS8wLzMxMzgzNjJlMzEzNDM4MmUzMjMyMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzczNDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAupTc
MA0GCSqGSIb3DQEBCwUAA4IBAQBtuc96L6UV/d0BKvaIfRHdyFYgddkDuWrgDQrv
x4cmwWvh11hg28hmXJTgCHJxSacq681/UD0QCTw+Hzgxz9vwd5W//6zMblCuaynd
kKSDTwMfV9lVPbBttSFsVz49zp+HLdpO0BHXFH7G/xy22HemU7aj9ntgefRAwlnO
sVMxZUlBl65ao3E7+ceVg9Xi21WTixnbJjsjA1MHDIul36KaPzzw4uAXCkN4U+pG
m/fernDcChtj6c8lbEt4JvLwk8roSHlLzVSKn4RSiMJDjrxPoM2aR+zAXjMuWllK
uhoJdUMdceq/EPJIf5/+SRGChFVXbnuHILvGM6OP50nJHToi
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:48:57 2025 by rpki-client