Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3132392e302f32342d3234203d3e203532323632.roa
File:                     3138362e322e3132392e302f32342d3234203d3e203532323632.roa (raw, json)
Hash identifier:          Rnzs0TCD74Yt/I4Yqde44O/4OK390knLFCKmY+PfTJg=
Subject key identifier:   D5:01:37:73:81:A1:DE:70:5B:EF:83:A1:D8:12:A6:5D:BA:B2:46:3E
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       2798DF9899BDCB0DBF74859321C5FF468BA3A61A
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3132392e302f32342d3234203d3e203532323632.roa
Signing time:             Tue 04 Feb 2025 20:04:54 +0000
ROA not before:           Tue 04 Feb 2025 19:59:54 +0000
ROA not after:            Tue 03 Feb 2026 20:04:54 +0000
asID:                     52262
IP address blocks:        186.2.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Feb 2025 20:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:98:df:98:99:bd:cb:0d:bf:74:85:93:21:c5:ff:46:8b:a3:a6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Feb  4 19:59:54 2025 GMT
            Not After : Feb  3 20:04:54 2026 GMT
        Subject: CN=D501377381A1DE705BEF83A1D812A65DBAB2463E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:f0:90:02:5f:8c:03:86:6f:a4:d7:32:8e:
                    30:32:5f:d8:b7:82:d5:99:57:1f:24:88:df:da:f5:
                    d5:0c:96:8c:f6:79:04:b0:1c:31:e6:a0:0a:c1:30:
                    ce:f6:c5:72:0b:1c:62:26:d3:e9:43:bc:c7:f6:55:
                    91:c1:75:63:ed:c1:66:4a:13:6e:40:07:c4:5f:3e:
                    c7:39:35:71:58:c7:e1:93:6f:2f:9a:60:ae:7d:97:
                    13:18:63:5f:0c:21:0d:81:f6:7c:38:e5:72:0a:77:
                    48:79:3a:41:34:50:cd:c4:a4:e3:45:75:0d:ff:dc:
                    bb:f7:ca:c0:b7:29:e1:43:e1:f8:0b:9f:1b:43:8e:
                    6c:03:70:00:c4:e4:60:28:89:d4:0b:78:cb:8a:80:
                    e3:61:d1:a2:76:6d:4a:32:f7:07:47:34:8c:48:18:
                    78:e0:db:61:3b:67:36:f1:5c:26:c1:b9:bc:8f:01:
                    83:53:39:f5:49:26:ef:dd:8e:e2:e1:7b:c4:7e:e3:
                    f0:b9:c5:69:9f:a7:a9:66:02:ef:73:3f:7f:04:c4:
                    32:42:c8:79:63:30:f6:da:d9:13:8f:a7:23:32:95:
                    58:52:4b:ce:03:66:35:bb:5f:ba:84:e4:ec:2d:72:
                    02:ba:05:89:ac:6b:3f:9e:ac:d2:1e:f1:1d:47:cb:
                    96:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:01:37:73:81:A1:DE:70:5B:EF:83:A1:D8:12:A6:5D:BA:B2:46:3E
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3132392e302f32342d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:a4:84:39:09:09:ff:dc:e7:46:64:d8:97:b0:1b:b7:f9:
         0e:d3:eb:6a:51:04:ac:f7:f8:fc:a0:1d:7c:76:09:da:1a:0a:
         22:5e:7d:b9:b4:7a:ae:12:69:49:8c:69:eb:26:f5:ee:57:a1:
         53:0f:4f:77:32:97:97:ea:82:1d:5b:a9:2a:1f:a7:39:34:dc:
         bc:d9:c4:d7:b6:88:9e:68:90:26:3d:67:e3:79:c2:8b:43:28:
         bf:e7:71:bf:24:9f:ea:83:27:b0:39:fd:ba:28:c1:03:f6:37:
         a4:10:44:7c:66:a6:cf:3a:84:a7:0b:d0:d5:3c:51:ba:85:d2:
         ad:21:0c:a6:65:85:9d:b3:59:28:e7:df:9c:93:42:76:38:d8:
         5b:c0:84:69:44:fe:07:44:8c:68:a5:9c:c2:ed:0d:fb:10:c1:
         4b:b2:9e:ae:31:a0:09:4d:21:db:d0:90:0f:26:1a:b2:dc:ac:
         61:33:f1:33:6a:d8:22:97:5e:d9:64:a0:84:03:59:4c:99:a9:
         22:12:38:a0:fb:48:3b:85:35:d5:0c:03:2b:c0:b6:22:b1:e7:
         88:f2:ee:50:62:34:26:50:7b:3c:eb:01:a6:2f:d5:a8:af:46:
         e2:1a:b9:15:87:d0:b5:1f:9d:23:12:f2:7f:f5:40:23:7c:e3:
         b3:d7:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 18:20:04 2025 by rpki-client