Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3133312e302f32342d3234203d3e203532323632.roa
File:                     3138362e322e3133312e302f32342d3234203d3e203532323632.roa (raw, json)
Hash identifier:          hUvG6dFrqDDRrcZesvSiZ5kHt/N9Xq+srrihtaPRth0=
Subject key identifier:   B0:56:FD:1E:6C:89:E1:51:58:2B:C8:2A:70:3A:BF:69:71:31:AA:83
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       28E53534D3B81ADE33E135BD4FC4A31695BF7E39
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3133312e302f32342d3234203d3e203532323632.roa
Signing time:             Tue 04 Feb 2025 20:04:54 +0000
ROA not before:           Tue 04 Feb 2025 19:59:54 +0000
ROA not after:            Tue 03 Feb 2026 20:04:54 +0000
asID:                     52262
IP address blocks:        186.2.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Feb 2025 20:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e5:35:34:d3:b8:1a:de:33:e1:35:bd:4f:c4:a3:16:95:bf:7e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Feb  4 19:59:54 2025 GMT
            Not After : Feb  3 20:04:54 2026 GMT
        Subject: CN=B056FD1E6C89E151582BC82A703ABF697131AA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:8d:ef:f6:8d:78:d4:6c:cf:bf:f7:bd:fa:
                    1d:a1:be:77:d9:5d:cb:23:de:89:37:9e:36:ec:3f:
                    9f:89:c4:60:ac:ef:f7:22:18:d7:92:3c:b5:b3:19:
                    e7:33:13:60:46:a4:4c:b9:27:2d:e6:66:3b:b8:14:
                    b6:da:02:27:73:23:47:97:5c:e3:f7:dd:fa:57:87:
                    07:de:17:e2:85:be:65:55:49:7c:48:d4:e6:9f:0b:
                    d5:87:f1:fb:2f:81:e7:28:a8:e2:c9:c3:3d:e5:9e:
                    8c:f2:43:1a:22:18:ac:74:b2:17:c6:41:a4:8f:3f:
                    3a:53:c7:a0:95:6d:4d:a7:a6:bd:66:0c:db:1f:54:
                    fe:86:d9:a8:14:31:84:ed:f9:8d:64:ea:ae:b6:6d:
                    1d:81:a6:45:c6:dc:1c:da:4d:42:28:76:01:fc:5f:
                    f9:87:e6:04:98:b5:89:7b:42:32:5e:7f:d3:07:fe:
                    b4:e9:01:4b:89:c4:7a:61:36:67:a5:54:9b:e8:b2:
                    ea:d9:04:95:bc:77:95:e6:d9:65:59:b6:14:79:03:
                    03:48:b5:8f:f5:05:0e:7e:38:ca:84:8b:df:c1:dd:
                    e9:6e:33:61:87:14:6c:ce:09:c5:cb:0b:93:ff:31:
                    57:25:2b:af:d0:d6:98:5a:60:be:1d:75:e4:78:34:
                    01:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:56:FD:1E:6C:89:E1:51:58:2B:C8:2A:70:3A:BF:69:71:31:AA:83
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3133312e302f32342d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:5a:72:85:1d:26:c5:58:71:37:1c:fb:21:8a:31:aa:d0:e8:
         be:61:17:d4:a4:70:02:cd:1d:5b:b3:97:41:35:75:3b:4e:4b:
         5b:9a:cb:8a:1c:62:22:67:2b:69:9b:dc:9a:3e:00:e7:8f:84:
         ac:3b:00:4d:f1:6f:d8:70:e9:96:51:4a:4b:a2:a2:a4:e7:99:
         53:7d:a3:d0:ae:55:ca:ee:b5:79:0e:38:62:52:b6:31:1d:17:
         00:54:ef:fb:4a:1f:49:f7:70:6e:72:80:2a:2f:81:6d:7f:17:
         58:03:95:79:e2:d4:11:cb:74:af:05:36:92:e1:e1:49:b5:1a:
         b0:5f:4a:87:57:de:1c:c8:a3:73:7c:11:6b:45:97:07:ea:e3:
         3a:ff:f7:d9:71:4d:32:0b:13:3d:4f:f6:60:45:58:38:08:5d:
         a6:d3:79:ab:4a:ed:7d:9e:a0:c0:63:1b:d8:60:f5:19:e7:b5:
         5d:49:23:89:9b:5e:56:7b:e4:e6:08:8f:74:51:a9:d6:d5:e5:
         4a:24:a3:11:57:02:44:6b:d6:a1:7d:69:d4:72:41:db:46:dd:
         59:eb:47:55:5d:2f:cb:fd:48:5e:00:d7:ce:f9:46:c7:bb:e8:
         07:b9:46:bf:c6:94:91:68:a4:87:c2:bf:29:2c:89:18:9f:ec:
         a1:f5:e5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 19:59:59 2025 by rpki-client