Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e36342e302f31392d3230203d3e2033383136.roa
File:                     3138362e3132312e36342e302f31392d3230203d3e2033383136.roa (raw, json)
Hash identifier:          RiRo3I1dx3fyAHSC+D3FIlrtaFBPYIfvllVc8cYyTc4=
Subject key identifier:   78:94:18:9A:79:EE:E0:49:FD:08:60:BC:9D:CA:8E:6B:33:37:03:FC
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       228F3C29A802AA667A685890296BCC1D1DB1236A
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e36342e302f31392d3230203d3e2033383136.roa
Signing time:             Tue 04 Feb 2025 18:46:48 +0000
ROA not before:           Tue 04 Feb 2025 18:41:48 +0000
ROA not after:            Tue 03 Feb 2026 18:46:48 +0000
asID:                     3816
IP address blocks:        186.121.64.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl
                          rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 23:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8f:3c:29:a8:02:aa:66:7a:68:58:90:29:6b:cc:1d:1d:b1:23:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: Feb  4 18:41:48 2025 GMT
            Not After : Feb  3 18:46:48 2026 GMT
        Subject: CN=7894189A79EEE049FD0860BC9DCA8E6B333703FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c7:90:1b:93:b6:99:6f:da:d5:f1:01:70:2b:
                    16:43:95:77:ef:7b:38:77:68:bf:78:e1:18:ae:5b:
                    77:99:fc:3c:78:ae:d5:4a:3c:4c:7b:2a:51:7f:14:
                    95:f3:3a:da:0a:46:b3:23:f0:2c:5c:35:1d:1d:3b:
                    59:bc:a0:9b:4c:ad:c3:d7:11:f0:83:54:b1:38:86:
                    41:b6:d8:4e:01:b8:79:bb:63:87:a8:b2:3d:5d:3b:
                    3f:55:28:a1:2f:0d:0d:4c:e9:06:3d:d5:e3:ae:ac:
                    fe:c5:aa:c6:70:e7:6b:f9:4d:2f:5b:e9:4d:af:3a:
                    0f:8c:f2:ed:fc:2a:79:c8:bf:12:36:2b:fc:4c:77:
                    7b:c3:40:9e:63:8a:f3:a5:1b:05:83:02:a7:3b:f4:
                    d1:8e:5f:59:4a:cd:4f:8c:f8:4d:91:3e:cd:ad:a4:
                    70:73:26:fe:52:06:22:c4:1c:18:d2:85:a5:94:5c:
                    e3:f0:19:d8:63:fc:cd:b2:cf:e1:47:b1:52:de:4e:
                    89:db:f5:1b:f5:65:47:d4:b6:3a:9e:90:3c:d4:e0:
                    51:d9:c1:4f:6a:4c:5e:0b:43:2e:3e:ea:b0:a6:d7:
                    6a:bb:7a:b1:d9:e3:b0:03:9a:cc:51:8a:92:ec:3e:
                    eb:20:b3:4c:12:a8:04:03:4a:42:29:67:44:03:63:
                    09:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:94:18:9A:79:EE:E0:49:FD:08:60:BC:9D:CA:8E:6B:33:37:03:FC
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e36342e302f31392d3230203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:ca:3d:36:4a:b2:7f:1f:cc:44:a0:e4:0a:49:94:e7:96:d6:
         e3:c4:56:11:83:c7:17:e3:f6:00:68:05:a0:f7:c0:16:1f:75:
         11:e0:11:e4:63:ea:46:ed:d4:cd:98:f0:a5:59:d4:a6:04:c0:
         51:5f:7c:bf:da:25:fb:a7:a2:be:5c:eb:ed:00:25:44:4c:a2:
         04:a6:91:d9:fa:9f:bd:ae:97:fe:a1:56:5a:67:b9:f1:bb:9b:
         08:d9:66:2b:0a:cc:b0:6b:11:89:5b:ab:89:08:94:31:d1:72:
         44:2a:fb:2d:81:bd:b5:6a:2a:5a:81:b2:82:e2:02:5a:ec:e8:
         16:43:1a:e5:e6:4a:6b:19:be:e1:44:a7:53:bf:49:d4:31:37:
         b8:e0:ea:24:35:80:a1:a4:37:a3:e4:45:35:cc:c4:8d:09:19:
         bc:98:6c:be:01:60:a7:95:ea:4a:a9:92:53:23:82:d7:5b:7a:
         8b:7d:40:b3:a3:e3:d6:d8:17:c3:d1:e4:d7:f7:f1:61:b8:67:
         e2:01:08:9a:fc:d1:05:cf:9e:cd:d9:e5:86:cb:a4:49:32:a2:
         bb:5c:e2:28:5e:e5:e9:e6:f7:0d:f6:46:05:f8:00:57:19:87:
         3a:13:27:52:4e:69:d4:ca:1e:7b:bd:55:1c:45:dc:14:ad:55:
         80:c4:70:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:47 2025 by rpki-client