Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E29CE22CE2761CAC90ED35BFEFA0020FCC5F74C93598DDB896FED7BF48D9F12/0/3138362e3137372e3139322e302f31392d3234203d3e20323633313831.roa
File:                     3138362e3137372e3139322e302f31392d3234203d3e20323633313831.roa (raw, json)
Hash identifier:          zVrgucVdf04d1V5Uz5q6Q/PAtljRbqTyiQUQbQVRDfQ=
Subject key identifier:   6F:F5:C6:B2:30:0D:B1:65:1A:91:43:7E:83:29:72:7B:FB:CD:70:4A
Certificate issuer:       /CN=9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE
Certificate serial:       08F2EE0AC3357371C2EDC6130A129D6E0725C260
Authority key identifier: 9E:5D:9A:89:7E:41:EA:D6:C5:9F:0E:88:98:F2:69:2C:3C:69:65:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E29CE22CE2761CAC90ED35BFEFA0020FCC5F74C93598DDB896FED7BF48D9F12/0/3138362e3137372e3139322e302f31392d3234203d3e20323633313831.roa
Signing time:             Tue 04 Feb 2025 18:39:09 +0000
ROA not before:           Tue 04 Feb 2025 18:34:09 +0000
ROA not after:            Tue 03 Feb 2026 18:39:09 +0000
asID:                     263181
IP address blocks:        186.177.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E29CE22CE2761CAC90ED35BFEFA0020FCC5F74C93598DDB896FED7BF48D9F12/0/9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E29CE22CE2761CAC90ED35BFEFA0020FCC5F74C93598DDB896FED7BF48D9F12/0/9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f2:ee:0a:c3:35:73:71:c2:ed:c6:13:0a:12:9d:6e:07:25:c2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE
        Validity
            Not Before: Feb  4 18:34:09 2025 GMT
            Not After : Feb  3 18:39:09 2026 GMT
        Subject: CN=6FF5C6B2300DB1651A91437E8329727BFBCD704A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:0d:f6:f9:ab:53:8b:4f:59:ae:22:68:3c:
                    f9:97:65:d1:4b:96:70:72:d6:ea:e7:1a:8e:b4:29:
                    b3:c6:20:21:6e:cc:0a:8a:c6:4f:39:0a:aa:52:e6:
                    0f:33:3f:d5:24:ea:e4:70:a0:d7:a6:25:a2:e8:f7:
                    21:a0:37:cd:b9:04:c7:5d:04:1c:b4:bc:83:9b:99:
                    53:c8:d2:7d:54:00:d5:5d:07:4e:c9:b9:6b:43:23:
                    72:78:87:d1:3f:33:11:fb:e6:24:40:bd:7a:42:a8:
                    13:38:f2:1b:85:f1:cb:e7:2e:db:26:a5:89:39:d1:
                    ce:dd:7d:16:c8:c5:41:06:79:80:b9:f0:7c:01:99:
                    fe:62:2a:c6:35:84:0d:8a:d1:6d:47:ea:d7:71:b7:
                    19:6e:a5:0b:ee:91:41:9b:b2:07:b5:9f:3b:01:cf:
                    42:55:f7:6d:5b:e7:0a:24:93:4a:e0:cf:ba:9d:34:
                    b9:1c:8a:11:dd:b7:b0:80:ea:e4:19:22:42:d3:1e:
                    b5:71:c7:b1:65:bb:ba:28:24:ec:f5:1f:46:55:8a:
                    77:f3:45:50:af:53:6d:d3:66:dc:c4:18:7f:18:3d:
                    12:cf:60:3a:c0:7d:61:ec:72:56:a8:3d:22:48:ae:
                    4a:83:1f:c5:ef:71:03:34:d3:b8:5e:b1:19:62:0e:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F5:C6:B2:30:0D:B1:65:1A:91:43:7E:83:29:72:7B:FB:CD:70:4A
            X509v3 Authority Key Identifier:
                keyid:9E:5D:9A:89:7E:41:EA:D6:C5:9F:0E:88:98:F2:69:2C:3C:69:65:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E29CE22CE2761CAC90ED35BFEFA0020FCC5F74C93598DDB896FED7BF48D9F12/0/9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E5D9A897E41EAD6C59F0E8898F2692C3C6965BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E29CE22CE2761CAC90ED35BFEFA0020FCC5F74C93598DDB896FED7BF48D9F12/0/3138362e3137372e3139322e302f31392d3234203d3e20323633313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:bc:0f:c9:e2:16:6c:48:e6:9a:21:50:66:b9:2f:00:16:83:
         76:0e:49:7e:59:68:ca:fc:c8:1d:54:c1:0b:c5:cf:b2:3b:32:
         d8:74:d4:fb:e0:40:43:ee:c4:67:c9:d4:47:94:c6:c9:38:50:
         00:e7:65:5b:75:1a:3c:ea:53:f7:ab:51:2f:dc:94:ee:9b:cc:
         41:73:38:46:4f:be:56:80:e4:8b:03:12:30:b4:58:a7:37:67:
         a2:12:f2:31:0e:f1:87:dd:07:45:1e:88:1b:d0:dd:05:e6:d1:
         88:8a:0c:b9:8c:76:bc:ad:7a:8d:8c:0b:b8:1a:4c:2e:84:21:
         9c:16:6a:3b:cc:23:56:c1:c5:ab:f1:c1:0b:c1:04:05:18:42:
         e5:c1:d2:28:6c:96:d9:c6:41:05:8b:97:59:d2:b2:98:d6:08:
         65:4f:99:ef:ef:25:ea:30:35:06:71:da:e3:11:a9:85:a1:97:
         3a:61:b3:a4:c7:5d:31:51:db:a1:81:91:4f:ca:f4:ae:89:2d:
         95:27:b7:90:19:3f:4c:58:5f:05:4b:61:0b:8a:32:41:ea:14:
         6f:4e:a7:52:26:73:bf:92:91:75:98:1b:82:ee:c5:66:09:9c:
         d2:dc:e8:82:65:38:0a:b2:71:8c:96:8c:74:e0:df:12:9d:20:
         3d:f7:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:56:34 2025 by rpki-client