Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e32302e302e302f31352d3136203d3e2036353335.roa
File:                     3138362e32302e302e302f31352d3136203d3e2036353335.roa (raw, json)
Hash identifier:          6gt9ZGlCf9TNCIXKVit/WCLsX1k3/KtIaC13WTtNKu0=
Subject key identifier:   76:4D:B6:89:31:57:2E:AC:27:0F:01:C3:48:CC:8F:90:00:E5:BA:56
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       5E88B25E33242DB35FD90CCD5627957CFF1DC6AC
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e32302e302e302f31352d3136203d3e2036353335.roa
Signing time:             Tue 04 Feb 2025 18:12:11 +0000
ROA not before:           Tue 04 Feb 2025 18:07:11 +0000
ROA not after:            Tue 03 Feb 2026 18:12:11 +0000
asID:                     6535
IP address blocks:        186.20.0.0/15 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:88:b2:5e:33:24:2d:b3:5f:d9:0c:cd:56:27:95:7c:ff:1d:c6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Feb  4 18:07:11 2025 GMT
            Not After : Feb  3 18:12:11 2026 GMT
        Subject: CN=764DB68931572EAC270F01C348CC8F9000E5BA56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:45:c6:bb:b6:66:34:f6:31:91:6d:88:5d:66:
                    7a:96:50:e9:7d:6b:d5:52:66:59:c8:91:43:76:2d:
                    23:b8:67:a9:95:28:b0:cb:77:ff:66:a3:86:e1:ba:
                    25:68:9b:4d:35:99:8c:6c:a0:d7:a3:08:b6:e9:1e:
                    ba:8a:da:45:5c:72:c8:23:b2:9f:61:5c:8c:15:26:
                    4c:88:d5:b3:07:20:0b:48:a9:b0:4c:ed:d5:e6:9a:
                    3b:02:05:56:ea:1f:4c:a1:cd:5c:b6:2f:33:6b:87:
                    e1:69:ac:1b:fa:b4:00:06:55:98:67:3f:16:02:14:
                    d4:20:ed:08:17:f8:f4:87:61:7a:d4:19:ec:90:20:
                    14:0f:9a:0c:37:77:82:63:7c:a1:2c:91:b0:38:5d:
                    03:4b:70:ff:6d:47:85:80:ca:b1:b1:23:6e:97:14:
                    ee:09:8d:3d:29:55:95:7e:c4:ed:e4:4e:83:b3:df:
                    0f:23:d5:96:86:51:10:9f:7a:d2:6b:eb:1b:66:5f:
                    6b:ef:46:d4:69:7f:1c:e6:e7:a4:35:52:79:f7:60:
                    34:40:97:e4:1a:f6:de:e3:11:8e:3f:76:58:14:6a:
                    e1:a4:0a:4a:6d:53:02:73:6c:61:1b:06:1d:ee:9e:
                    96:6d:f9:46:12:0d:dd:d2:bb:4c:23:65:94:43:a0:
                    1d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4D:B6:89:31:57:2E:AC:27:0F:01:C3:48:CC:8F:90:00:E5:BA:56
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e32302e302e302f31352d3136203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.20.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9c:ef:0f:38:d6:5c:94:85:c8:05:62:2c:cd:ad:1a:60:e8:4a:
         b8:6f:39:aa:06:3e:95:a7:1d:67:07:96:9c:04:68:d7:c5:ba:
         43:8c:3f:d9:c9:c4:46:0e:9d:cb:ef:5a:18:30:f0:80:ef:d3:
         b8:96:61:aa:ad:fb:22:b2:64:e9:ad:a6:d3:8d:7f:4d:58:f9:
         59:17:ae:96:3e:ca:b5:8f:f7:b0:cc:49:f9:f8:02:88:0b:7e:
         cb:aa:1c:d9:a9:23:49:5c:dd:7f:a1:60:f0:83:d3:ec:0d:c4:
         0f:20:a7:0b:7a:cd:c1:24:72:60:4d:94:90:05:1f:80:b5:08:
         0d:c7:1b:f1:57:47:d8:c8:17:7c:e3:d9:46:ae:89:e6:f1:46:
         36:76:02:88:82:8a:06:a9:c3:22:9a:7a:d9:71:9c:28:31:89:
         ca:7e:ec:36:07:c5:a0:a9:03:69:91:61:1d:b6:31:ff:97:dc:
         ed:f0:a7:73:7a:e0:09:f0:12:bf:24:ef:4c:d7:9c:5a:6f:41:
         5e:d6:03:8c:a1:29:9f:f3:2b:2d:01:19:98:b5:d3:74:28:3b:
         62:9b:fb:9b:38:c3:92:61:0f:f4:02:05:e2:9c:7a:38:d0:83:
         42:36:82:b4:b4:5a:fc:11:58:b6:c5:eb:c1:5f:e5:23:46:69:
         97:01:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:56 2025 by rpki-client