Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e32302e302e302f31352d3136203d3e203237393935.roa
File:                     3138362e32302e302e302f31352d3136203d3e203237393935.roa (raw, json)
Hash identifier:          y4R8D8EZrdq6Ej+6xq5JgeqbQn2pcBM04Tzv7yIM5x8=
Subject key identifier:   61:EB:3F:65:84:09:22:80:8D:92:A5:E0:0A:16:05:9F:EE:73:89:7C
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       7A64FA5F1B8CAB4C73B3DC43E8EC85CC92803096
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e32302e302e302f31352d3136203d3e203237393935.roa
Signing time:             Tue 04 Feb 2025 18:12:08 +0000
ROA not before:           Tue 04 Feb 2025 18:07:08 +0000
ROA not after:            Tue 03 Feb 2026 18:12:08 +0000
asID:                     27995
IP address blocks:        186.20.0.0/15 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:64:fa:5f:1b:8c:ab:4c:73:b3:dc:43:e8:ec:85:cc:92:80:30:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Feb  4 18:07:08 2025 GMT
            Not After : Feb  3 18:12:08 2026 GMT
        Subject: CN=61EB3F65840922808D92A5E00A16059FEE73897C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:bd:7b:e7:ca:9b:19:b7:db:83:75:ce:9f:
                    89:7a:91:24:8d:c5:89:7a:89:d9:11:9d:d2:ad:40:
                    95:96:c1:32:d2:ed:88:13:36:a9:91:e2:71:3d:10:
                    fe:5c:0f:db:4c:34:7d:9b:60:9b:bf:98:97:de:0b:
                    b3:90:55:9c:10:5d:ae:fd:d8:8b:e0:1b:60:00:74:
                    52:e8:a4:37:d1:6e:d4:49:ba:fc:97:bd:13:9f:30:
                    48:a5:02:3b:c8:48:57:0c:33:85:b8:80:c4:71:c7:
                    e8:e9:ea:08:6e:2e:66:db:10:73:f2:8f:ff:72:60:
                    2f:38:b2:8c:4c:8e:87:35:2a:14:a3:4e:9a:01:9f:
                    fc:bf:db:cd:f4:38:42:86:3a:4f:3b:bb:16:00:ad:
                    03:ae:b8:b9:07:56:b1:ff:7d:02:9f:68:84:1c:c4:
                    ad:f9:89:d7:06:e7:d8:75:2b:7f:63:00:74:23:9e:
                    b0:cf:05:a3:fc:6f:e2:f7:2c:c9:97:e3:3e:56:83:
                    87:3c:29:89:32:7f:3e:cc:de:42:7f:78:a9:b5:33:
                    45:c3:7f:d6:65:50:c4:33:ca:ae:b6:6d:67:42:18:
                    4e:56:1c:9e:0c:da:9b:3f:c7:85:6a:ae:a8:76:fc:
                    14:51:ed:84:6a:ef:95:3a:ba:5e:5b:f1:8f:09:14:
                    10:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EB:3F:65:84:09:22:80:8D:92:A5:E0:0A:16:05:9F:EE:73:89:7C
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e32302e302e302f31352d3136203d3e203237393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.20.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b9:23:6b:c6:0f:28:d2:99:2b:af:e6:37:5b:1d:df:09:d8:a9:
         55:05:db:7a:0d:f4:7b:9e:b0:3a:0a:e0:1f:38:9d:76:08:76:
         9c:c9:f9:41:3c:9f:57:ba:8c:df:75:a3:09:4f:67:69:9e:bb:
         cb:90:54:1d:c0:9e:57:9f:7a:b1:5f:1b:ea:0b:7c:b9:b2:77:
         13:7e:ec:60:47:47:c1:1f:49:e5:0a:5f:2d:24:2a:24:91:94:
         0e:73:4e:91:23:e4:2d:87:ec:58:b1:9b:1b:e7:01:ee:b1:1b:
         8a:aa:ba:0f:93:9f:41:7d:6b:dc:54:6b:2e:fc:80:be:12:72:
         5d:cd:1a:2c:0d:b5:d6:53:20:41:3e:69:ea:4c:28:17:cc:cc:
         b2:82:1b:2f:5e:e0:ff:be:00:9c:ab:05:8f:42:00:49:5d:2f:
         5e:15:6f:fe:ad:47:77:fa:ae:6b:1f:2f:09:15:12:ba:08:32:
         e1:86:1c:14:b7:e7:2b:62:ec:4e:d5:df:fc:37:a6:1b:b1:f8:
         f3:71:88:b6:31:3c:9b:3e:4a:a6:c5:a4:ff:f4:5b:66:af:f0:
         03:3a:74:81:28:ec:92:f4:7c:1b:c4:ef:3d:f7:c8:34:84:ae:
         1b:85:cc:91:02:94:f0:6c:16:0e:3b:be:f1:ae:d5:15:e5:3c:
         3d:cd:6b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:39:16 2025 by rpki-client