Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e36342e36342e302f31392d3234203d3e203237393533.roa
File:                     3138362e36342e36342e302f31392d3234203d3e203237393533.roa (raw, json)
Hash identifier:          vH2vuglmDq14rdjTMx3ATrlIw8ZPsDZgPB4i9HeHPDg=
Subject key identifier:   E5:EE:27:16:1E:65:AC:54:E9:90:2B:41:CF:35:DA:8E:F5:B6:DB:8A
Certificate issuer:       /CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
Certificate serial:       56C5011D48840B7D91997ACB0B3BD77883F75239
Authority key identifier: D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e36342e36342e302f31392d3234203d3e203237393533.roa
Signing time:             Tue 04 Feb 2025 18:56:24 +0000
ROA not before:           Tue 04 Feb 2025 18:51:24 +0000
ROA not after:            Tue 03 Feb 2026 18:56:24 +0000
asID:                     27953
IP address blocks:        186.64.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c5:01:1d:48:84:0b:7d:91:99:7a:cb:0b:3b:d7:78:83:f7:52:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
        Validity
            Not Before: Feb  4 18:51:24 2025 GMT
            Not After : Feb  3 18:56:24 2026 GMT
        Subject: CN=E5EE27161E65AC54E9902B41CF35DA8EF5B6DB8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4d:19:d2:f0:d6:8e:13:31:17:2b:0c:0a:73:
                    55:f4:f9:86:e9:94:79:a6:3d:41:4e:a2:a8:f9:9f:
                    8a:6d:b7:e7:ff:03:1b:92:45:fb:ad:7d:ac:f6:be:
                    0a:07:10:75:b2:38:d4:18:68:6f:53:a4:46:d2:c9:
                    a3:c7:3d:94:15:2f:3a:8d:fd:4e:80:70:af:05:0d:
                    37:5f:d2:4d:d3:2b:82:32:01:00:99:ec:b5:1d:a4:
                    a5:6a:af:2f:78:94:fa:01:b7:38:8c:a1:7f:95:41:
                    c1:d6:0a:11:1d:50:64:c6:35:02:3c:d9:84:b9:22:
                    ed:d6:e4:9e:cc:5e:8f:49:49:82:ef:1d:5f:9b:7a:
                    16:cc:01:21:74:76:a3:8d:15:c7:a3:e6:c8:af:79:
                    f3:94:1d:eb:31:64:db:e8:3d:aa:9b:78:35:b9:ab:
                    b4:41:3f:7c:36:e4:37:0f:e1:df:58:bb:30:ac:14:
                    df:a3:5d:59:e6:a3:7d:41:d9:41:40:2d:c5:23:0e:
                    a3:4a:73:5d:d5:05:a1:d2:f3:8d:d7:a6:54:cc:16:
                    f8:d2:34:2e:8b:d1:50:28:6c:d4:6c:f8:0f:de:3d:
                    2d:63:09:21:9e:ac:5c:e3:5f:d2:3a:e3:43:4d:e1:
                    6e:ab:b2:6c:65:64:cb:94:7b:ae:d5:d0:72:9a:4a:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EE:27:16:1E:65:AC:54:E9:90:2B:41:CF:35:DA:8E:F5:B6:DB:8A
            X509v3 Authority Key Identifier:
                keyid:D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e36342e36342e302f31392d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.64.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:15:24:3c:48:b2:60:cc:99:24:12:1d:8f:30:25:3d:4a:ab:
         55:df:89:d8:cf:5b:31:dd:21:f7:a9:63:ff:ce:b0:71:0f:3c:
         ac:c6:8f:ac:9b:81:67:6c:47:22:76:43:34:f8:c6:4f:66:b9:
         82:d3:8e:9b:26:b1:ad:3d:ad:58:a5:77:e2:29:bb:2f:3d:95:
         89:69:d9:47:3d:82:57:2e:54:26:f9:bf:2a:0f:34:f1:e0:f3:
         d1:e4:86:5c:7d:83:82:9c:54:d7:21:e2:92:fb:51:ed:52:fb:
         1c:0b:d1:d7:45:e9:2f:a0:7c:3a:0e:85:5e:d5:3d:b6:29:de:
         9b:42:97:c4:cc:c5:7b:66:9c:60:42:ae:25:f7:f4:af:69:ec:
         29:7c:01:87:21:7b:70:02:ed:78:c8:12:dc:6b:55:17:b4:52:
         b3:db:3d:33:94:9a:38:eb:29:ec:7b:c5:7f:be:94:67:26:37:
         40:8e:7f:c6:97:d9:bd:e8:12:4e:d9:82:89:e6:29:a0:50:92:
         60:23:19:d5:30:32:cb:35:0e:f5:ce:9a:21:54:1c:d8:92:7a:
         23:5f:19:61:df:2a:6b:45:9a:fb:a8:0b:53:07:d0:14:e9:43:
         57:27:8d:31:af:01:24:51:90:c2:49:e2:55:f3:e2:cb:74:15:
         59:8b:93:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:30 2025 by rpki-client