Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3233322e302f32312d3231203d3e203532333437.roa
File:                     3138362e3137372e3233322e302f32312d3231203d3e203532333437.roa (raw, json)
Hash identifier:          oTTN8c3oVr6krrZDu4Xyo2iS57fxlkJ1Tv7vpZxZwsM=
Subject key identifier:   D7:C7:BB:C5:37:38:2C:6F:98:8B:E2:21:B3:AC:BF:E6:87:0F:D6:66
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       782B135F8F075D46B9466F79D28A61789ACE8D08
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3233322e302f32312d3231203d3e203532333437.roa
Signing time:             Tue 04 Feb 2025 18:20:06 +0000
ROA not before:           Tue 04 Feb 2025 18:15:06 +0000
ROA not after:            Tue 03 Feb 2026 18:20:06 +0000
asID:                     52347
IP address blocks:        186.177.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2b:13:5f:8f:07:5d:46:b9:46:6f:79:d2:8a:61:78:9a:ce:8d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Feb  4 18:15:06 2025 GMT
            Not After : Feb  3 18:20:06 2026 GMT
        Subject: CN=D7C7BBC537382C6F988BE221B3ACBFE6870FD666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:48:5b:7b:48:0d:50:cf:f5:5f:e2:4c:f8:
                    dd:cf:15:ac:f6:fe:81:c3:c2:2e:e2:94:aa:04:0a:
                    a6:bb:c5:be:18:ee:c5:85:b6:2f:7b:e8:5f:3c:b6:
                    9d:10:3e:f2:55:e4:cc:9d:db:cb:58:97:4e:8d:f2:
                    d9:6e:4e:02:a5:59:0c:32:a3:2a:34:9a:09:f7:28:
                    01:0f:e6:de:fa:c7:36:fc:10:23:92:8f:c8:de:1b:
                    ee:73:15:88:51:c0:cc:b8:85:74:0c:7d:d6:85:8e:
                    74:68:33:69:0b:ed:f0:eb:33:cf:86:39:67:9a:59:
                    29:02:10:70:f0:94:84:90:36:b7:dc:65:6a:17:e5:
                    19:19:99:06:cb:6a:44:fe:f4:06:1d:64:79:26:45:
                    ad:49:4e:62:66:0a:88:97:21:32:3e:38:af:4f:7d:
                    22:8d:77:a7:ce:79:b8:e1:7f:2a:32:1d:c9:7e:97:
                    ff:33:54:75:8c:10:da:ce:d4:09:05:ce:de:2f:3e:
                    ed:91:b3:a7:4d:03:4e:b4:38:81:77:ad:ae:89:12:
                    9e:f8:c5:8a:47:e9:2c:b4:3d:3b:aa:6b:30:fb:76:
                    67:dd:44:5c:e1:05:7f:b9:22:4c:a7:0d:60:92:dd:
                    3b:2b:0b:21:e8:f1:73:f6:5d:d0:50:ef:9c:ea:28:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C7:BB:C5:37:38:2C:6F:98:8B:E2:21:B3:AC:BF:E6:87:0F:D6:66
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3233322e302f32312d3231203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:a9:1c:4a:5b:52:be:16:bd:8c:54:2b:68:b8:ea:f6:a1:
         5e:22:e5:a2:02:b2:91:b3:b5:c2:a2:4d:70:4b:08:56:d6:0e:
         f6:5e:3b:6f:a7:f9:9a:f0:34:73:52:9b:53:4f:f2:4f:ba:a0:
         76:24:3d:ab:d8:94:ff:c5:30:26:6a:77:a8:b5:0a:e6:d1:8e:
         50:75:c7:ef:ef:df:fd:66:02:90:bb:06:6a:35:36:d6:10:7e:
         2d:0b:38:1b:d0:15:3c:ee:d5:59:58:ae:d1:3e:dd:5c:02:24:
         fb:82:6f:5a:d5:b4:6e:c1:af:e5:07:2e:7b:74:53:ab:ae:f9:
         14:9d:4f:48:fc:99:84:38:4b:ca:0d:b5:46:c9:ac:85:92:ae:
         16:98:ef:92:ae:85:2c:fd:0a:bb:23:bb:6b:36:e4:ed:f2:66:
         5e:b6:7a:2d:8f:aa:22:d6:f3:58:6f:27:d1:78:b9:52:22:29:
         35:ab:64:20:da:e4:4b:23:4a:dc:7e:4c:da:af:76:be:4a:86:
         4e:28:fb:29:30:05:29:ce:66:99:b7:ff:09:c0:e3:af:d0:af:
         a4:99:a6:3d:6d:d9:e0:3f:cb:e9:dc:98:a0:ed:95:11:8b:7e:
         ed:69:ea:cf:de:38:63:09:79:7d:43:24:86:92:56:ea:a5:7c:
         01:20:60:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:25 2025 by rpki-client