Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138362e39372e302e302f31362d3136203d3e203237383331.roa
File:                     3138362e39372e302e302f31362d3136203d3e203237383331.roa (raw, json)
Hash identifier:          9R0VXEPSeH3nWjtHHLlvnoK2k4Szk29gupssLCWc5Gs=
Subject key identifier:   DB:05:76:8A:DC:EA:E5:77:02:D6:32:6F:58:EE:0D:83:42:25:10:46
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       4680E2628D330373AD677A14E1274B01CEEE5A8A
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138362e39372e302e302f31362d3136203d3e203237383331.roa
Signing time:             Tue 04 Feb 2025 18:22:35 +0000
ROA not before:           Tue 04 Feb 2025 18:17:35 +0000
ROA not after:            Tue 03 Feb 2026 18:22:35 +0000
asID:                     27831
IP address blocks:        186.97.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 02:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:80:e2:62:8d:33:03:73:ad:67:7a:14:e1:27:4b:01:ce:ee:5a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Feb  4 18:17:35 2025 GMT
            Not After : Feb  3 18:22:35 2026 GMT
        Subject: CN=DB05768ADCEAE57702D6326F58EE0D8342251046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:43:45:88:88:39:c2:10:57:e2:3c:da:5d:38:
                    98:7d:6d:86:55:96:5b:30:df:bc:cd:1d:29:e0:2a:
                    b4:ce:b7:11:7d:62:f7:9d:1f:a9:c4:a5:86:3e:7b:
                    5c:2e:69:b8:8e:a1:d2:a6:1c:86:8e:55:6f:a2:81:
                    02:01:9b:6c:6c:dc:f0:b1:fd:f9:2d:52:34:35:7c:
                    57:16:a4:b7:1c:65:c3:50:85:63:01:a0:68:c3:38:
                    1f:3d:54:2c:34:36:12:94:9e:00:6b:7d:33:6b:03:
                    93:7c:1c:94:a0:90:15:aa:92:32:f5:15:76:cc:d8:
                    29:a6:d1:5a:aa:dc:3d:32:c9:50:de:2c:c4:f3:df:
                    09:4e:a5:2c:fc:a2:af:fd:e8:76:f7:e6:b6:53:4c:
                    55:f4:4a:92:20:dd:73:d9:46:ca:46:bc:8b:4c:8e:
                    c9:e4:8c:f1:04:45:1f:ab:d0:23:ac:27:cf:37:be:
                    e7:d8:03:4e:9f:ae:45:eb:ee:a7:e7:c3:81:f5:8a:
                    ad:a6:03:66:66:9d:05:b6:29:cd:97:9c:fb:36:dd:
                    68:c2:b5:81:67:1b:ac:04:bb:21:e8:2a:a8:9d:2f:
                    ee:f4:10:67:04:f7:9c:d0:f9:72:6f:7e:45:96:5c:
                    bd:89:7a:b3:52:85:40:e5:bd:de:6f:fe:78:f1:6f:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:05:76:8A:DC:EA:E5:77:02:D6:32:6F:58:EE:0D:83:42:25:10:46
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138362e39372e302e302f31362d3136203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.97.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:db:fb:d2:4d:ab:6b:af:4f:e5:a1:bb:09:5b:a8:70:b0:4e:
         96:f6:b6:6f:70:de:d4:1a:0e:d3:d2:d3:cd:f8:73:b1:97:25:
         84:ff:f8:a8:b3:a4:18:29:70:ef:c6:d1:0b:13:74:f4:1e:41:
         8d:82:8d:67:07:ed:ba:85:90:25:83:f3:88:97:6c:e0:7c:4f:
         01:3e:ba:d5:b4:e5:f7:a7:24:58:93:2c:02:8d:a5:03:46:f5:
         3e:0f:34:28:73:2e:59:4e:89:10:7f:b3:6a:10:73:6d:54:20:
         13:fd:74:ba:f9:6e:c0:9c:d0:76:f4:12:b1:cb:d1:48:74:4a:
         07:7c:4e:cb:94:1e:76:53:ae:ed:ea:d3:f0:c9:2b:5d:1f:75:
         63:38:b5:ad:d7:85:be:8f:55:ed:cf:79:c9:cf:35:c9:85:36:
         a8:fc:5a:b9:cc:7b:ee:40:4d:ba:91:a5:26:1d:bc:ca:d8:03:
         b6:50:95:7b:a2:7d:11:1b:7f:46:e9:5f:9b:32:50:62:59:31:
         80:74:b0:ab:11:93:a2:e3:44:8b:4e:a2:21:ad:fe:4e:43:89:
         e7:84:0f:92:f1:24:72:43:d4:5d:ff:bc:31:0a:3d:04:ac:69:
         7b:b1:bf:10:8c:d0:4e:19:a9:79:73:7c:17:48:f9:48:41:93:
         89:c7:ff:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:35 2025 by rpki-client