Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3232332e302f32342d3234203d3e203237373438.roa
File:                     3138362e3134382e3232332e302f32342d3234203d3e203237373438.roa (raw, json)
Hash identifier:          VQMJI5dlDzF1RZ0pYeglznBF6cl4hyeV1GlSzatpOww=
Subject key identifier:   81:52:97:5E:9D:68:B4:6B:2C:32:4D:BC:76:02:72:70:4B:9C:B2:BE
Certificate issuer:       /CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D
Certificate serial:       35EB19BB7AA6A5F51259DC740D7E76C254FD330B
Authority key identifier: 00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3232332e302f32342d3234203d3e203237373438.roa
Signing time:             Wed 23 Jul 2025 16:05:00 +0000
ROA not before:           Wed 23 Jul 2025 16:00:00 +0000
ROA not after:            Wed 22 Jul 2026 16:05:00 +0000
asID:                     27748
IP address blocks:        186.148.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:eb:19:bb:7a:a6:a5:f5:12:59:dc:74:0d:7e:76:c2:54:fd:33:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D
        Validity
            Not Before: Jul 23 16:00:00 2025 GMT
            Not After : Jul 22 16:05:00 2026 GMT
        Subject: CN=8152975E9D68B46B2C324DBC760272704B9CB2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:1a:b7:6b:92:36:6b:5f:4d:54:96:b9:65:
                    a0:df:3c:1c:78:cc:2b:13:40:b3:35:d4:b4:10:f2:
                    cb:0b:48:89:7c:99:e1:dd:00:91:63:a3:11:5a:c0:
                    ba:3f:18:f6:8e:e8:8f:54:37:9e:b3:f1:a4:e3:d1:
                    3d:a0:ed:7f:20:2c:e9:ef:7b:48:10:bb:38:05:ba:
                    30:4e:bc:0a:cc:e4:5f:c6:1d:10:5e:f3:c0:7b:1e:
                    2c:9e:1a:c3:5d:38:9e:4c:5c:b0:1c:a0:ce:93:98:
                    5a:77:4b:d0:f1:47:d5:74:39:f2:68:c2:57:c4:2c:
                    20:d9:95:51:e1:e4:20:45:cd:c0:c1:3a:fb:04:fc:
                    f0:5a:03:18:52:7f:15:17:68:ed:71:33:b1:d4:38:
                    c5:e0:f4:65:27:db:f5:c9:83:b8:c3:89:3a:e1:ff:
                    3a:61:27:c8:83:5a:bd:02:0c:87:43:38:2f:86:26:
                    d3:bd:f4:e3:9e:74:47:07:c5:65:52:8b:4f:4c:6e:
                    17:b9:a9:93:43:20:71:56:53:f1:7e:9a:a3:11:98:
                    f0:97:14:e1:51:2a:0a:b3:70:ed:92:1d:c2:e0:09:
                    b0:7f:3c:6d:d9:53:bf:5e:46:0f:e6:5c:c2:aa:92:
                    4d:8d:4a:23:05:88:76:6f:32:c1:07:be:29:07:08:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:52:97:5E:9D:68:B4:6B:2C:32:4D:BC:76:02:72:70:4B:9C:B2:BE
            X509v3 Authority Key Identifier:
                keyid:00:03:CB:BE:FA:7A:3C:4C:DD:68:0C:13:BA:E2:DE:19:55:1E:8C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0003CBBEFA7A3C4CDD680C13BAE2DE19551E8C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515FF3122CA0A4479546020A1C0CB9CCAEFB9B37577553E6727771E3607A68F5/0/3138362e3134382e3232332e302f32342d3234203d3e203237373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:62:b2:10:9f:26:78:58:74:24:22:c0:2a:ee:24:fb:b4:2b:
         eb:58:23:eb:e5:10:6a:ae:95:04:6e:7f:2f:22:58:2c:77:ac:
         cf:d3:f7:82:f1:df:dd:1f:a9:93:d5:35:04:b3:e0:62:d6:62:
         df:2c:54:6f:91:b0:cf:a2:f2:80:50:04:f6:46:c1:8d:5f:5c:
         72:ab:c2:71:72:cd:8a:f4:62:9f:37:fa:04:2d:9d:99:6d:49:
         3c:3e:d4:08:b4:c0:d1:52:89:56:55:f8:1a:60:6e:a0:95:73:
         03:59:5c:68:8d:c6:7d:9a:51:04:6a:99:9f:66:42:61:8d:f2:
         63:85:a3:59:8a:76:54:ce:97:f6:ef:3d:14:d0:b0:55:d2:d4:
         cc:40:e3:c0:e4:0d:ed:55:69:bb:0e:fe:ec:52:d3:4c:2e:26:
         37:98:0a:32:4a:0d:06:8e:28:a0:74:01:ba:7d:95:46:20:f0:
         dd:97:46:d9:e3:5e:08:a7:d1:22:bf:fb:ef:a4:35:aa:93:f6:
         d2:8b:f7:a1:f8:40:7c:3b:1d:be:3b:b9:4c:6e:e3:f5:a3:0a:
         c4:0f:a9:96:15:23:e6:e8:aa:58:3f:4c:9f:e6:cc:f5:bd:fc:
         e7:81:27:0b:ed:ad:32:d5:4d:9e:aa:8b:71:e6:09:ff:ee:19:
         67:5f:dd:55
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNesZu3qmpfUSWdx0DX52wlT9MwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAwM0NCQkVGQTdBM0M0Q0RENjgwQzEzQkFFMkRFMTk1
NTFFOEMwRDAeFw0yNTA3MjMxNjAwMDBaFw0yNjA3MjIxNjA1MDBaMDMxMTAvBgNV
BAMTKDgxNTI5NzVFOUQ2OEI0NkIyQzMyNERCQzc2MDI3MjcwNEI5Q0IyQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWBq3a5I2a19NVJa5ZaDfPBx4
zCsTQLM11LQQ8ssLSIl8meHdAJFjoxFawLo/GPaO6I9UN56z8aTj0T2g7X8gLOnv
e0gQuzgFujBOvArM5F/GHRBe88B7HiyeGsNdOJ5MXLAcoM6TmFp3S9DxR9V0OfJo
wlfELCDZlVHh5CBFzcDBOvsE/PBaAxhSfxUXaO1xM7HUOMXg9GUn2/XJg7jDiTrh
/zphJ8iDWr0CDIdDOC+GJtO99OOedEcHxWVSi09Mbhe5qZNDIHFWU/F+mqMRmPCX
FOFRKgqzcO2SHcLgCbB/PG3ZU79eRg/mXMKqkk2NSiMFiHZvMsEHvikHCEwBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUgVKXXp1otGssMk28dgJycEucsr4wHwYDVR0j
BBgwFoAUAAPLvvp6PEzdaAwTuuLeGVUejA0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTVGRjMxMjJDQTBBNDQ3OTU0NjAyMEExQzBDQjlDQ0FF
RkI5QjM3NTc3NTUzRTY3Mjc3NzFFMzYwN0E2OEY1LzAvMDAwM0NCQkVGQTdBM0M0
Q0RENjgwQzEzQkFFMkRFMTk1NTFFOEMwRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMDAzQ0JCRUZBN0EzQzRDREQ2
ODBDMTNCQUUyREUxOTU1MUU4QzBELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTE1RkYzMTIyQ0EwQTQ0Nzk1NDYwMjBBMUMwQ0I5Q0NBRUZCOUIzNzU3
NzU1M0U2NzI3NzcxRTM2MDdBNjhGNS8wLzMxMzgzNjJlMzEzNDM4MmUzMjMyMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzczNDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAupTf
MA0GCSqGSIb3DQEBCwUAA4IBAQB4YrIQnyZ4WHQkIsAq7iT7tCvrWCPr5RBqrpUE
bn8vIlgsd6zP0/eC8d/dH6mT1TUEs+Bi1mLfLFRvkbDPovKAUAT2RsGNX1xyq8Jx
cs2K9GKfN/oELZ2ZbUk8PtQItMDRUolWVfgaYG6glXMDWVxojcZ9mlEEapmfZkJh
jfJjhaNZinZUzpf27z0U0LBV0tTMQOPA5A3tVWm7Dv7sUtNMLiY3mAoySg0Gjiig
dAG6fZVGIPDdl0bZ414Ip9Eiv/vvpDWqk/bSi/eh+EB8Ox2+O7lMbuP1owrED6mW
FSPm6KpYP0yf5sz1vfzngScL7a0y1U2eqotx5gn/7hlnX91V
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:48:54 2025 by rpki-client