Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3234302e302f32302d3234203d3e2037303034.roa
File:                     3138362e3130332e3234302e302f32302d3234203d3e2037303034.roa (raw, json)
Hash identifier:          VPM9zdeUXPtADqG2LxFbhUPE4VT5qjOHRGLAuobS8Ks=
Subject key identifier:   11:F5:F5:01:FC:9E:ED:B7:CE:17:48:FD:EC:21:7B:FA:F8:08:49:17
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       5E4FB623E6F2DDCAA24FC9012EB79253843946CD
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3234302e302f32302d3234203d3e2037303034.roa
Signing time:             Tue 04 Feb 2025 20:00:55 +0000
ROA not before:           Tue 04 Feb 2025 19:55:55 +0000
ROA not after:            Tue 03 Feb 2026 20:00:55 +0000
asID:                     7004
IP address blocks:        186.103.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4f:b6:23:e6:f2:dd:ca:a2:4f:c9:01:2e:b7:92:53:84:39:46:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:55 2025 GMT
            Not After : Feb  3 20:00:55 2026 GMT
        Subject: CN=11F5F501FC9EEDB7CE1748FDEC217BFAF8084917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:72:78:05:23:2a:3a:4d:e8:44:d6:e3:65:
                    b9:b2:7e:3a:b4:2e:d0:74:8c:43:9d:0d:f1:01:70:
                    5a:9d:9b:2c:90:d9:a0:4b:66:4c:88:7c:4f:fd:7e:
                    50:a4:86:50:75:b0:24:82:c1:23:2a:4b:3d:7d:78:
                    f4:a2:0e:51:c9:9c:0d:7d:32:7a:b3:39:cc:b9:32:
                    20:4f:fd:f8:4c:fb:30:f9:2d:6e:89:a7:2d:03:a9:
                    86:11:9a:1f:8f:2c:1a:b2:71:aa:88:44:43:2a:e5:
                    d1:3c:86:3c:85:42:77:52:97:e8:2d:10:82:95:93:
                    c6:9e:25:29:67:07:bd:16:a7:f9:14:55:e8:df:46:
                    6d:8c:e5:fd:66:de:7d:2b:4b:ce:5c:d6:41:36:0b:
                    df:44:44:e8:2b:62:94:5f:6e:8e:f3:2e:d8:f3:c8:
                    11:27:22:69:c7:9c:0b:f8:f1:d6:c2:3a:fd:30:00:
                    d7:72:a0:21:a3:31:81:73:28:d2:02:ea:f9:78:d2:
                    f7:56:7b:5b:8b:a6:9e:23:ff:ef:2c:60:50:bc:c3:
                    63:63:39:5d:de:86:fa:ea:04:7c:74:d7:0b:4e:18:
                    44:9b:5b:cb:5e:fa:ba:65:15:dc:33:ef:d0:7c:85:
                    13:ee:f8:06:ab:82:0f:b0:c2:48:59:0c:0d:be:bc:
                    6b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F5:F5:01:FC:9E:ED:B7:CE:17:48:FD:EC:21:7B:FA:F8:08:49:17
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3234302e302f32302d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:45:cc:93:d9:de:cd:d0:83:84:66:5b:07:e2:ae:68:98:2b:
         12:59:33:3f:66:0c:39:4c:bc:20:12:15:41:84:f6:20:45:19:
         ed:c5:4e:c9:e4:36:3e:e8:19:76:e5:ae:c5:01:5b:52:75:0d:
         37:38:7b:03:69:72:c2:29:48:d0:d4:6f:9e:a7:8b:31:5f:7a:
         02:4f:a7:bb:43:f3:6b:68:71:7f:6f:7f:48:95:10:c3:f4:c8:
         92:d9:12:6c:0b:02:29:d4:ee:5f:29:a4:9c:88:32:c0:b1:cb:
         73:1a:f0:b7:3d:b7:61:0a:4f:c0:cf:4f:0e:b1:2e:14:28:be:
         2f:5d:5a:53:8f:31:7b:b9:c6:2c:a4:77:31:e7:5c:c8:0d:b7:
         ed:61:5e:5d:9c:39:63:03:f1:0b:14:1b:2c:18:43:d5:98:c9:
         60:04:8b:4d:cb:1a:f6:1d:28:d3:d6:05:a7:57:a6:c3:b2:d8:
         c9:72:df:c0:be:2b:46:12:2d:2e:53:d9:bc:8b:79:c6:b2:b9:
         e8:4d:0a:97:b0:8a:83:a4:c1:2c:91:6d:49:da:bf:06:60:01:
         38:37:c2:a5:9d:7e:0c:4d:d9:fd:78:04:20:47:9e:1e:53:52:
         24:e2:df:ef:8b:41:8b:63:3b:83:09:0d:31:d5:57:36:37:13:
         ec:4c:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:40 2025 by rpki-client