Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3138362e302e3138302e302f32322d3234203d3e20323633323434.roa
File:                     3138362e302e3138302e302f32322d3234203d3e20323633323434.roa (raw, json)
Hash identifier:          0DlXsm98HlB5uDzTYzIjyDBNM1DJ5k3QRekEzRjOxzQ=
Subject key identifier:   07:0F:C7:F4:23:1D:2D:FB:D4:48:D0:F6:E0:82:00:2C:7A:70:4C:2F
Certificate issuer:       /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial:       14577BA46B190BB4C9185A87AE4C237800F50374
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3138362e302e3138302e302f32322d3234203d3e20323633323434.roa
Signing time:             Tue 04 Feb 2025 18:21:35 +0000
ROA not before:           Tue 04 Feb 2025 18:16:35 +0000
ROA not after:            Tue 03 Feb 2026 18:21:35 +0000
asID:                     263244
IP address blocks:        186.0.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:57:7b:a4:6b:19:0b:b4:c9:18:5a:87:ae:4c:23:78:00:f5:03:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
        Validity
            Not Before: Feb  4 18:16:35 2025 GMT
            Not After : Feb  3 18:21:35 2026 GMT
        Subject: CN=070FC7F4231D2DFBD448D0F6E082002C7A704C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:58:53:71:4e:3e:ea:57:60:51:03:a9:40:
                    3f:b4:70:b5:57:2b:5b:15:4b:4a:56:c1:cd:01:7a:
                    a3:2e:9c:03:98:c1:76:22:5f:07:19:11:59:46:b6:
                    a9:73:06:1a:7d:f3:5b:1c:b6:68:a5:96:75:d1:bf:
                    8a:16:cc:6a:c7:13:7f:99:63:4a:28:49:50:5a:c7:
                    e2:84:0c:79:1b:56:3f:ee:fa:71:20:aa:6d:77:07:
                    76:7c:78:67:7b:25:c9:5f:15:c4:01:7d:5c:71:11:
                    04:7e:7c:bc:93:38:de:02:cd:84:90:7b:4c:fe:a3:
                    a7:02:06:2e:b5:89:41:50:fe:71:bc:b7:48:74:54:
                    b1:70:59:af:93:ea:2e:23:b0:58:40:8b:ab:30:e1:
                    5c:42:f1:c1:34:f6:cc:51:38:d8:f2:f6:e0:d2:3d:
                    da:07:39:8c:41:b7:1d:a2:b2:8b:67:7a:ef:41:6c:
                    17:b3:82:be:67:a2:59:d6:d9:c1:f7:cb:ce:51:49:
                    9a:08:92:6c:b0:94:67:50:f8:6a:49:b5:0a:76:b3:
                    13:8c:91:41:37:8b:cf:30:03:b6:0a:dc:d2:a1:ba:
                    b6:3e:63:a2:0e:e6:8f:89:e8:d5:4d:fc:33:94:a8:
                    25:8a:72:b4:3a:01:75:bc:99:7b:61:e4:9e:82:ca:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0F:C7:F4:23:1D:2D:FB:D4:48:D0:F6:E0:82:00:2C:7A:70:4C:2F
            X509v3 Authority Key Identifier:
                keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3138362e302e3138302e302f32322d3234203d3e20323633323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:aa:d8:82:fd:2b:2c:c0:e6:b3:5a:90:34:41:1c:84:f3:cb:
         40:8e:80:c1:b7:e7:e6:c8:6b:31:9c:dc:94:e8:1e:34:f2:cf:
         96:c8:13:1f:ee:9b:c6:a7:3b:43:c3:4c:53:eb:09:fc:0a:07:
         d4:e9:2d:a8:78:15:c7:5c:ee:f9:5b:d4:57:b8:27:b5:c0:06:
         cd:3d:04:d1:6f:26:b6:ea:f6:8d:a6:53:1f:a2:d3:07:a5:c5:
         bc:0e:1d:f5:40:da:90:ce:0c:a1:e3:3a:b2:1d:16:4d:7b:45:
         23:d2:c7:7b:7e:bf:b9:97:ff:83:b1:5e:04:3b:3c:2c:bd:c3:
         3e:fe:88:f9:60:80:f2:bd:48:49:a7:94:d7:a2:3b:6c:bb:5f:
         55:d7:be:82:f7:c4:f5:b1:78:bd:e4:30:d8:c4:75:a3:93:d9:
         ed:f8:56:86:95:09:ab:45:04:6d:42:3b:e3:02:77:c7:a8:86:
         3d:b0:ef:ef:93:60:09:a7:bf:81:17:03:95:09:67:30:8a:45:
         23:d3:61:f0:c1:b9:28:38:5d:e4:16:f5:ca:0c:84:be:ee:31:
         2f:20:e9:f1:bd:55:ee:1c:b7:bb:18:a5:c3:e5:a1:af:d4:16:
         2d:53:b6:61:17:8d:78:8c:75:9e:a5:b2:f3:00:23:90:db:10:
         4d:d7:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:08 2025 by rpki-client