Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS262214.roa
File:                     AS262214.roa (raw, json)
Hash identifier:          OIw01CVDhi+kYMDeYojLnJMKw/nH4kZo/0Bj0eZFvis=
Subject key identifier:   EA:71:00:89:CE:AD:75:61:EE:DC:4C:09:2D:E1:61:D2:5C:00:98:B4
Certificate issuer:       /CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
Certificate serial:       79BDD0F9B3512091A3E852EB778A0C009F4405BB
Authority key identifier: 6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS262214.roa
Signing time:             Wed 07 May 2025 14:45:01 +0000
ROA not before:           Wed 07 May 2025 14:40:01 +0000
ROA not after:            Wed 06 May 2026 14:45:01 +0000
asID:                     262214
IP address blocks:        186.147.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bd:d0:f9:b3:51:20:91:a3:e8:52:eb:77:8a:0c:00:9f:44:05:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
        Validity
            Not Before: May  7 14:40:01 2025 GMT
            Not After : May  6 14:45:01 2026 GMT
        Subject: CN=EA710089CEAD7561EEDC4C092DE161D25C0098B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:95:f3:72:86:c7:b6:96:48:9d:df:ed:e1:
                    65:e2:1c:5f:a7:aa:67:b7:8b:02:c0:6d:4c:34:2f:
                    1a:7f:37:18:9e:d9:0b:3b:1a:f7:0b:7c:60:b1:06:
                    28:f4:13:87:98:d3:83:0d:70:e1:9c:96:1e:80:1c:
                    2f:75:9c:ab:00:02:0a:ce:6b:45:17:e5:f7:3a:1e:
                    72:97:f5:2c:c5:70:6a:21:62:02:b5:a6:6c:e3:4c:
                    c5:d7:a1:09:bb:0b:4b:a9:9e:14:9f:e0:1e:f0:c1:
                    42:44:bc:78:0f:6d:6f:40:6b:79:fb:5d:98:0e:2a:
                    d0:d0:63:97:17:3f:fc:ee:26:fb:0f:70:98:90:ed:
                    38:4c:48:15:a2:f7:f8:6a:cf:fa:11:e7:6b:bc:93:
                    f9:ce:79:6a:6c:94:ba:5e:bd:0c:ca:7b:88:ee:e2:
                    c2:48:91:57:63:a8:12:4a:4e:3f:b1:bd:17:48:5e:
                    22:6d:ad:5a:e2:c8:3e:f7:96:42:71:88:2c:65:15:
                    5e:2b:27:4c:6f:ac:4e:5a:6d:14:dd:92:38:6e:bb:
                    d4:40:ac:eb:f5:13:ac:34:ce:54:a7:1e:5d:05:8b:
                    6b:a8:a8:d9:23:4a:80:d0:42:03:a0:c9:fd:4b:77:
                    fb:9b:c5:1c:27:71:50:f8:6d:d1:f6:ed:6a:f9:62:
                    f2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:71:00:89:CE:AD:75:61:EE:DC:4C:09:2D:E1:61:D2:5C:00:98:B4
            X509v3 Authority Key Identifier:
                keyid:6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS262214.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.147.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:19:4c:b3:5a:ec:02:2f:b9:98:e4:d5:03:42:48:1a:7d:82:
         f2:3f:01:fa:7e:5d:06:51:3d:3a:65:b1:ad:8b:9c:06:59:8e:
         07:60:cf:8a:7c:0b:31:09:98:43:f3:dc:14:cb:94:7b:6f:c1:
         77:11:40:63:96:dd:f7:1b:13:a9:03:d1:5d:06:f2:0f:98:db:
         ee:04:d9:f4:a9:d2:b5:76:59:1f:6f:6c:1d:34:51:30:4f:56:
         7e:90:bb:fa:6f:7c:b2:b0:f4:44:72:f5:c1:6a:32:ae:5e:88:
         80:76:4a:91:c6:81:63:43:71:b1:72:ec:26:0e:72:a1:f7:b4:
         70:94:e0:7b:bd:22:a1:55:8f:15:37:9b:f2:8c:a5:c6:00:10:
         55:e0:ac:db:08:69:4f:8f:40:f8:bb:14:5c:d4:99:8b:ec:5e:
         c1:5d:49:08:ae:aa:c2:60:81:f5:5c:a8:aa:3b:00:9c:7e:28:
         35:61:d5:f9:77:27:ae:03:08:b4:94:ba:a6:45:51:92:48:bd:
         75:c2:e1:d3:2e:08:b6:20:c6:7d:1b:60:23:81:c0:80:46:18:
         c8:0f:7b:14:f0:62:71:6d:64:0c:59:b9:3d:28:c1:3d:8e:19:
         39:aa:3b:7e:30:31:75:61:3f:59:41:7f:c5:2a:96:31:ea:09:
         8c:a6:14:0e
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUeb3Q+bNRIJGj6FLrd4oMAJ9EBbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVDQTdDQjg5MTJBREVGQkM5OTQ4NEUwNTNFQkU4NTJB
M0EwRThDMjAeFw0yNTA1MDcxNDQwMDFaFw0yNjA1MDYxNDQ1MDFaMDMxMTAvBgNV
BAMTKEVBNzEwMDg5Q0VBRDc1NjFFRURDNEMwOTJERTE2MUQyNUMwMDk4QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2A5XzcobHtpZInd/t4WXiHF+n
qme3iwLAbUw0Lxp/Nxie2Qs7GvcLfGCxBij0E4eY04MNcOGclh6AHC91nKsAAgrO
a0UX5fc6HnKX9SzFcGohYgK1pmzjTMXXoQm7C0upnhSf4B7wwUJEvHgPbW9Aa3n7
XZgOKtDQY5cXP/zuJvsPcJiQ7ThMSBWi9/hqz/oR52u8k/nOeWpslLpevQzKe4ju
4sJIkVdjqBJKTj+xvRdIXiJtrVriyD73lkJxiCxlFV4rJ0xvrE5abRTdkjhuu9RA
rOv1E6w0zlSnHl0Fi2uoqNkjSoDQQgOgyf1Ld/ubxRwncVD4bdH27Wr5YvLjAgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQU6nEAic6tdWHu3EwJLeFh0lwAmLQwHwYDVR0j
BBgwFoAUbsp8uJEq3vvJlITgU+voUqOg6MIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MEQ4RDQwOTRGNzVCRDU5MDZBNjg2Q0NDM0Y5RDYwNjI1
MUM2OTVFMzM1M0M1NjkwNTlEMTI2MDE4MDlFRDJELzAvNkVDQTdDQjg5MTJBREVG
QkM5OTQ4NEUwNTNFQkU4NTJBM0EwRThDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RUNBN0NCODkxMkFERUZCQzk5
NDg0RTA1M0VCRTg1MkEzQTBFOEMyLmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80MEQ4RDQwOTRGNzVCRDU5MDZBNjg2Q0NDM0Y5RDYwNjI1MUM2OTVFMzM1
M0M1NjkwNTlEMTI2MDE4MDlFRDJELzAvQVMyNjIyMTQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6kwww
DQYJKoZIhvcNAQELBQADggEBAHQZTLNa7AIvuZjk1QNCSBp9gvI/Afp+XQZRPTpl
sa2LnAZZjgdgz4p8CzEJmEPz3BTLlHtvwXcRQGOW3fcbE6kD0V0G8g+Y2+4E2fSp
0rV2WR9vbB00UTBPVn6Qu/pvfLKw9ERy9cFqMq5eiIB2SpHGgWNDcbFy7CYOcqH3
tHCU4Hu9IqFVjxU3m/KMpcYAEFXgrNsIaU+PQPi7FFzUmYvsXsFdSQiuqsJggfVc
qKo7AJx+KDVh1fl3J64DCLSUuqZFUZJIvXXC4dMuCLYgxn0bYCOBwIBGGMgPexTw
YnFtZAxZuT0owT2OGTmqO34wMXVhP1lBf8UqljHqCYymFA4=
-----END CERTIFICATE-----
Generated at Sat May 17 15:02:43 2025 by rpki-client