Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3138362e36352e36342e302f32312d3234203d3e203532333831.roa
File:                     3138362e36352e36342e302f32312d3234203d3e203532333831.roa (raw, json)
Hash identifier:          a7RJ6fjyjzhiZ88iSRnaaPFNLhHJQ73LxRsN01rWU+o=
Subject key identifier:   40:9B:97:10:5D:05:6C:FC:84:23:BB:4E:07:BE:24:41:AA:5E:75:78
Certificate issuer:       /CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
Certificate serial:       32A1A7C220324C290389D1FFBE495FD5FE6B2D0D
Authority key identifier: 18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3138362e36352e36342e302f32312d3234203d3e203532333831.roa
Signing time:             Thu 27 Mar 2025 13:13:01 +0000
ROA not before:           Thu 27 Mar 2025 13:08:01 +0000
ROA not after:            Thu 26 Mar 2026 13:13:01 +0000
asID:                     52381
IP address blocks:        186.65.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 19:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a1:a7:c2:20:32:4c:29:03:89:d1:ff:be:49:5f:d5:fe:6b:2d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13
        Validity
            Not Before: Mar 27 13:08:01 2025 GMT
            Not After : Mar 26 13:13:01 2026 GMT
        Subject: CN=409B97105D056CFC8423BB4E07BE2441AA5E7578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:8d:1b:4e:23:f5:df:20:97:27:06:4a:48:
                    1e:b3:48:24:e1:f7:15:4a:23:3e:22:fb:aa:80:8a:
                    fd:1a:33:69:a6:27:1d:0b:f0:dd:b4:67:9e:fb:bd:
                    6b:41:b6:a9:38:94:86:10:54:6d:30:11:48:a9:9a:
                    e5:e5:7d:b7:11:cf:ba:e9:5e:3c:43:70:41:2a:bb:
                    be:67:cd:1d:8c:fc:d7:d4:9c:d2:e5:95:a9:be:0a:
                    93:23:c9:86:d4:82:c2:e9:aa:70:64:8b:ae:46:1f:
                    1d:23:a4:00:92:d3:b0:00:3a:d9:00:e5:fc:d0:5e:
                    27:b6:45:80:2c:f4:98:f7:b9:52:67:b1:cf:69:7c:
                    09:6a:0c:27:3b:22:a5:ec:df:a9:cf:dc:87:64:4a:
                    52:c8:dc:db:b5:ab:78:66:21:be:d6:8e:b1:0c:32:
                    17:e0:fd:f5:bd:36:89:de:fc:c4:31:af:af:26:86:
                    69:b5:6e:ed:12:6a:f8:82:80:68:9f:20:86:f1:36:
                    d2:17:3e:d4:b5:0d:3c:10:6d:11:86:c2:a7:59:67:
                    92:76:02:bf:3b:69:3a:46:a9:85:d3:6f:e5:c2:17:
                    0a:71:12:04:5c:0d:37:d2:d3:4f:2b:a7:e4:6c:00:
                    fd:f6:08:75:6f:c0:b2:51:5e:de:06:51:f0:6f:e3:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9B:97:10:5D:05:6C:FC:84:23:BB:4E:07:BE:24:41:AA:5E:75:78
            X509v3 Authority Key Identifier:
                keyid:18:3F:C3:81:B3:E5:65:0B:5E:0C:C9:F0:A8:01:7B:BC:9C:2C:FB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/183FC381B3E5650B5E0CC9F0A8017BBC9C2CFB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/284B66622BDCBA6E3B5FB75DAF7F98292605C8E779008004B56D501770CA87D9/0/3138362e36352e36342e302f32312d3234203d3e203532333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:3c:01:f8:c1:ef:77:d8:22:ee:11:fc:f3:ce:20:4b:f0:cc:
         a9:0b:49:57:e7:5c:41:fb:82:b3:f0:d0:db:e1:70:c1:86:2b:
         1b:6a:99:48:1f:f6:f3:a6:82:48:4a:86:29:22:ff:5e:d0:65:
         20:e8:01:df:47:0b:25:3e:98:a7:c2:e4:41:8e:8c:a9:46:8e:
         3c:ec:ca:e0:85:8c:3d:36:b1:27:92:7f:58:36:f7:b5:8e:e1:
         13:08:07:c5:bc:a5:d4:51:44:2f:49:23:07:1c:84:58:ab:7f:
         32:99:35:0b:b7:4e:30:da:7a:7a:19:85:05:24:52:4f:8c:3c:
         e2:ea:57:4f:0b:52:0a:43:9a:05:b2:fd:5b:65:fd:e6:99:c2:
         99:c2:76:72:9b:04:92:76:83:2f:2e:ce:5f:27:7b:f5:8c:00:
         18:9e:85:f6:aa:e7:19:7d:ef:c0:31:6a:0b:a9:fb:74:2b:be:
         d2:51:d7:9e:a7:7b:d2:a9:3f:86:a5:8c:99:08:dc:af:91:c7:
         c0:1c:f4:8e:88:4b:4e:04:b8:5a:63:f7:93:50:ae:9c:36:9c:
         ab:7a:37:13:33:b3:fb:70:81:54:d2:96:67:f0:8e:a7:77:9d:
         89:86:d6:49:46:09:cd:cd:66:05:0c:bd:1c:91:62:ce:96:a3:
         15:dd:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:45:12 2025 by rpki-client