Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3138342e302f32322d3234203d3e20323635373035.roa
File:                     3138362e32382e3138342e302f32322d3234203d3e20323635373035.roa (raw, json)
Hash identifier:          t4hjDlGvqXyPNQswTJlRHM6zLncfQYUlvfHghNhzCe4=
Subject key identifier:   AC:FA:3D:E6:E5:AC:82:67:03:1B:B1:86:33:99:AC:72:3C:AB:76:FB
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       53B294EF120CCFA28C150358DEB7BB0565FFFD8E
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3138342e302f32322d3234203d3e20323635373035.roa
Signing time:             Tue 04 Feb 2025 18:17:55 +0000
ROA not before:           Tue 04 Feb 2025 18:12:55 +0000
ROA not after:            Tue 03 Feb 2026 18:17:55 +0000
asID:                     265705
IP address blocks:        186.28.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b2:94:ef:12:0c:cf:a2:8c:15:03:58:de:b7:bb:05:65:ff:fd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:55 2025 GMT
            Not After : Feb  3 18:17:55 2026 GMT
        Subject: CN=ACFA3DE6E5AC8267031BB1863399AC723CAB76FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:27:79:33:ca:59:37:37:c8:35:e4:f1:cc:be:
                    55:6d:4c:79:52:42:ff:cf:27:7c:93:55:8d:25:41:
                    b4:33:10:11:eb:ca:12:d8:cc:14:e3:c8:ae:48:d9:
                    ef:23:a7:db:4a:10:a0:45:6c:27:33:57:26:88:bd:
                    6f:31:7b:32:59:13:eb:d3:54:cc:a4:d1:b2:6c:34:
                    61:d8:54:1b:06:20:a6:cf:11:9b:e0:4c:99:a8:1f:
                    86:d2:76:01:4e:46:95:5c:f4:79:2c:a3:82:cb:75:
                    4c:04:d8:42:84:02:28:6c:d8:69:a6:d9:ac:11:fc:
                    83:14:c3:0a:29:1f:0e:91:e9:24:fb:e5:cd:95:0a:
                    2d:44:77:4a:8a:43:b3:36:85:ea:03:ec:35:dd:ae:
                    97:46:66:0b:27:e2:b5:11:98:90:97:0e:66:7c:a8:
                    7b:5f:8c:18:7a:df:b9:6c:df:e0:f0:73:4b:2d:a5:
                    fa:42:8a:48:7a:e5:fc:d1:a7:38:cf:99:21:a2:d5:
                    44:00:d6:5d:37:7e:b9:1b:6b:55:db:9a:ba:2e:81:
                    f3:2c:b0:bd:b4:01:ad:b3:86:b5:12:ba:2d:25:ad:
                    1c:69:56:a3:55:d1:03:c7:3d:d6:1b:3a:da:b6:2c:
                    40:f3:b8:d4:18:88:d2:99:aa:cb:ef:f0:fd:40:a6:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FA:3D:E6:E5:AC:82:67:03:1B:B1:86:33:99:AC:72:3C:AB:76:FB
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3138342e302f32322d3234203d3e20323635373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:2d:df:f8:78:8e:da:4e:31:0c:85:de:3c:6e:e2:8f:f9:f0:
         c6:f5:52:4b:ee:d9:b0:4d:41:00:0b:a6:b0:11:6a:38:dd:5f:
         ee:64:99:08:e6:83:27:72:f1:e9:f2:d8:c5:bc:ba:d8:c7:d3:
         a8:55:97:a9:30:60:9f:5d:eb:3d:cb:df:f6:d8:52:3a:0f:99:
         09:63:bf:93:54:fe:3f:21:56:cb:32:f1:ae:24:19:71:b2:9b:
         85:97:6c:72:df:9b:4d:2b:11:3e:30:b7:3a:d7:0c:e4:84:da:
         d0:29:2c:19:3f:3a:d3:50:ca:a6:97:b1:ea:e6:cb:2d:19:9b:
         14:bf:9c:0d:c6:ad:48:8e:57:ad:ab:23:96:4c:97:9a:0b:a5:
         e0:f4:78:1e:09:85:c2:ee:78:52:e4:c6:ca:cb:8b:f3:16:97:
         ad:f6:e6:1a:2b:b8:09:d2:34:43:92:80:98:66:ee:20:a0:7f:
         d3:40:cf:95:72:d1:ae:ae:21:4e:99:6b:59:48:3a:90:83:98:
         c3:f5:9c:8d:ab:08:18:74:1f:5a:67:35:5f:dc:b5:c2:0b:87:
         fc:94:a7:bd:9c:47:de:f8:ee:87:36:48:ea:50:f5:be:6f:bb:
         7a:3e:99:de:54:79:08:9b:0d:38:00:48:88:55:b2:eb:05:b2:
         63:2f:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:22 2025 by rpki-client