Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138362e3138302e302e302f31352d3136203d3e203237383331.roa
File:                     3138362e3138302e302e302f31352d3136203d3e203237383331.roa (raw, json)
Hash identifier:          FRor9gH3YL6iQ0nKW5Wd7lx07P8cXEV9iiySCkh4hPQ=
Subject key identifier:   2D:46:6A:E4:15:D1:7F:36:F3:93:DE:B3:08:87:7A:2F:81:32:7E:AD
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       4FEFCD78742753AE2DBA6FE1ACA659EC5C75891F
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138362e3138302e302e302f31352d3136203d3e203237383331.roa
Signing time:             Tue 04 Feb 2025 18:22:32 +0000
ROA not before:           Tue 04 Feb 2025 18:17:32 +0000
ROA not after:            Tue 03 Feb 2026 18:22:32 +0000
asID:                     27831
IP address blocks:        186.180.0.0/15 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ef:cd:78:74:27:53:ae:2d:ba:6f:e1:ac:a6:59:ec:5c:75:89:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Feb  4 18:17:32 2025 GMT
            Not After : Feb  3 18:22:32 2026 GMT
        Subject: CN=2D466AE415D17F36F393DEB308877A2F81327EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:16:68:a4:c8:97:60:0b:e3:ca:15:0c:dc:7d:
                    22:27:78:57:93:30:35:77:ed:b7:6e:a0:ed:c0:f5:
                    58:68:b8:64:0b:9e:61:41:4e:51:d6:55:78:d0:76:
                    69:65:3e:71:4b:18:49:49:ed:3b:58:75:82:eb:55:
                    fa:8c:0d:8b:82:73:e9:2b:85:75:0b:ef:a0:77:56:
                    b7:39:0f:42:8e:91:e9:b1:b6:7b:40:9f:b4:5a:76:
                    88:bd:9b:b4:a1:6c:b5:8c:5b:56:9a:e7:e7:b5:4e:
                    1a:70:6e:d6:f8:41:28:cb:c6:27:47:06:17:1b:4b:
                    66:42:bb:3b:1f:6c:17:1a:39:d5:aa:9b:01:f6:c8:
                    7b:25:36:24:14:7f:d6:0e:1c:a6:b2:06:c2:54:a1:
                    28:df:26:d9:5b:4a:92:0e:49:c2:9e:3a:bd:2c:28:
                    e2:ee:8e:ba:da:d6:0e:f8:65:c0:0d:aa:9b:6f:d4:
                    5c:f8:12:af:b8:3c:87:e3:24:71:28:cd:a5:9e:a3:
                    64:62:16:40:c6:a0:fd:0c:ea:03:55:6d:85:16:a4:
                    28:7e:af:92:28:2e:e0:41:ff:a1:bc:5a:25:2c:9c:
                    aa:b7:ff:d5:f9:ee:6d:7c:65:ba:4b:86:ef:4a:2d:
                    70:03:1b:1e:3c:e6:6d:fb:9a:e9:a5:6e:43:38:ca:
                    90:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:6A:E4:15:D1:7F:36:F3:93:DE:B3:08:87:7A:2F:81:32:7E:AD
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138362e3138302e302e302f31352d3136203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.180.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         8b:af:79:a1:1f:83:72:5e:82:a0:79:c7:3d:7b:0e:06:ad:f1:
         5f:ca:e7:28:0c:ff:ae:75:f5:93:99:d1:64:51:e1:f1:9f:e4:
         c4:1e:c8:d1:ab:76:17:86:50:e1:5c:33:72:d8:81:f1:a3:61:
         24:66:00:f7:c5:e5:ea:7c:57:5b:46:e6:0a:0f:d4:bd:19:68:
         65:17:96:46:60:3d:e1:32:b4:da:5c:90:67:1d:85:b6:8a:50:
         51:df:fe:79:70:41:10:83:fb:b9:61:08:b9:99:a0:bf:75:95:
         a7:35:e8:01:82:5c:24:02:e6:4e:3a:85:41:cc:d4:2f:40:f6:
         ff:d8:9f:a2:63:9b:b0:97:ae:17:1e:e7:8e:ec:e6:b8:6a:2d:
         04:36:c3:5e:3d:48:db:bc:00:21:9a:eb:fb:66:92:33:b7:ab:
         ff:df:91:86:f4:7a:d1:13:48:90:33:2a:19:f1:48:87:0e:a9:
         3f:21:2b:b2:8c:c2:09:69:9d:d4:a4:25:b5:ef:d3:1b:08:20:
         65:b8:62:2a:5f:76:29:6f:ed:81:7c:18:ac:60:86:79:c7:88:
         bf:41:93:c1:f3:d8:2d:bb:d4:63:1c:45:b3:8c:00:00:49:5d:
         56:ad:0c:16:a4:27:e6:20:f5:c9:a9:04:fe:92:55:6e:48:ff:
         e0:f5:7d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:58 2025 by rpki-client