Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e33302e3131322e302f32342d3234203d3e203133343839.roa
File:                     3138362e33302e3131322e302f32342d3234203d3e203133343839.roa (raw, json)
Hash identifier:          +oIiPsqvxD8dIOmgKV3pgvVdciFXd3wdOKxGv7mbt/M=
Subject key identifier:   33:49:9B:46:3B:CF:54:88:E5:A3:07:7E:75:E7:95:22:E8:C0:FB:E6
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       59DDB61BA1A6A839B532F4E8B11FAC9D846FDA0C
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e33302e3131322e302f32342d3234203d3e203133343839.roa
Signing time:             Tue 04 Feb 2025 18:17:56 +0000
ROA not before:           Tue 04 Feb 2025 18:12:56 +0000
ROA not after:            Tue 03 Feb 2026 18:17:56 +0000
asID:                     13489
IP address blocks:        186.30.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:dd:b6:1b:a1:a6:a8:39:b5:32:f4:e8:b1:1f:ac:9d:84:6f:da:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:56 2025 GMT
            Not After : Feb  3 18:17:56 2026 GMT
        Subject: CN=33499B463BCF5488E5A3077E75E79522E8C0FBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:64:a5:41:ca:f2:34:29:ce:37:9c:ad:f7:
                    9f:1c:2c:a0:47:01:8e:81:de:2c:01:27:b1:f6:a3:
                    0a:69:99:d7:39:e0:24:df:7d:52:0a:e7:9c:46:ed:
                    29:e9:03:bc:ee:2e:88:e2:9d:b5:a6:ec:1c:08:ab:
                    75:2b:f7:e9:ca:ea:2a:eb:3d:a0:c2:68:0c:07:14:
                    13:d9:42:c0:7f:54:8f:5f:78:bf:ad:5e:a2:06:fb:
                    a8:e4:b5:57:24:9d:65:73:7f:f4:c3:b3:d8:96:68:
                    bc:6c:92:fc:05:d0:78:a4:98:d9:a5:53:bf:c2:e8:
                    d4:15:9f:85:e4:ce:9b:09:fc:2b:03:75:d8:7b:4b:
                    76:e5:a1:aa:8c:08:9f:df:1f:ab:61:07:b6:ab:34:
                    8c:19:d3:49:90:b7:fa:c0:f7:ad:60:24:c5:93:5e:
                    31:7a:4a:f0:55:c6:9f:04:db:d8:aa:7b:42:76:69:
                    05:92:fc:c3:c0:77:fc:ff:36:0d:dc:7f:69:37:c7:
                    d9:61:7d:ad:6c:c2:2c:a2:a1:7e:5f:a0:e3:05:bf:
                    58:b0:4a:13:15:0d:d0:33:98:f2:4c:36:63:99:37:
                    cd:79:e1:58:4a:c4:93:e3:68:98:d9:a2:a8:a3:59:
                    5e:ab:63:3f:80:9e:f4:e7:fb:7b:70:94:d0:b5:96:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:49:9B:46:3B:CF:54:88:E5:A3:07:7E:75:E7:95:22:E8:C0:FB:E6
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e33302e3131322e302f32342d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.30.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:54:68:9f:a8:56:fb:5c:42:de:b8:29:82:c6:51:90:70:4c:
         90:49:26:21:69:c0:d3:6b:13:72:88:e9:73:02:77:f8:cb:23:
         10:67:4e:e1:ae:81:8b:25:72:f2:54:52:4d:ca:48:f1:a5:78:
         44:b0:95:a2:71:c5:5c:58:f1:d5:2d:31:2b:f0:72:82:65:9e:
         5e:25:46:a8:83:29:cc:71:18:21:ff:13:c3:00:f8:e0:79:78:
         b5:75:2a:4e:6f:db:3e:b0:44:ee:95:2d:4d:76:bd:ce:03:76:
         f8:35:db:d3:2c:b7:e5:4b:19:38:65:22:aa:74:5f:f1:74:38:
         55:cd:05:61:8f:46:51:3e:bf:ef:23:83:29:a1:98:b5:05:c3:
         89:bf:5e:be:96:da:5d:98:e1:18:5d:65:fd:e3:b0:e1:08:c6:
         7a:84:24:f9:b6:cf:ba:fd:00:9b:08:69:78:ad:45:cc:14:ad:
         28:5b:37:0e:5c:10:20:49:6f:f8:3c:a9:2b:96:42:96:49:0b:
         aa:3f:97:3d:a0:a0:f1:7e:bf:a7:af:61:70:5f:76:34:5f:36:
         5b:5f:bf:60:42:d8:c3:89:f9:12:d1:90:4e:19:dd:35:05:52:
         fd:b9:07:b1:28:9a:81:bf:6c:29:e5:c9:ce:2a:22:d6:cc:75:
         1f:49:7b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:18 2025 by rpki-client