Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e302e302f31372d3137203d3e203238313134.roa
File:                     3138362e3138332e302e302f31372d3137203d3e203238313134.roa (raw, json)
Hash identifier:          o9hqOz5P0q+SMtdqPHou0KBERx919Uhf7spQOTYdrjI=
Subject key identifier:   05:CC:72:E9:D8:56:B9:25:EB:56:6E:67:3F:4E:33:E9:65:04:CC:D6
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       37022ECBF033E3FFE7BEFECBBD3BC1554CDBA5B3
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e302e302f31372d3137203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:39 +0000
ROA not before:           Tue 04 Feb 2025 18:02:39 +0000
ROA not after:            Tue 03 Feb 2026 18:07:39 +0000
asID:                     28114
IP address blocks:        186.183.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:02:2e:cb:f0:33:e3:ff:e7:be:fe:cb:bd:3b:c1:55:4c:db:a5:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:39 2025 GMT
            Not After : Feb  3 18:07:39 2026 GMT
        Subject: CN=05CC72E9D856B925EB566E673F4E33E96504CCD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:21:22:85:86:4b:ef:2a:ac:4f:f1:ae:5f:
                    de:e3:94:f6:99:ee:6b:fe:5a:74:a6:74:52:62:fa:
                    f7:dd:6c:65:7f:6d:07:84:ab:4b:1d:b2:e8:5f:a5:
                    4f:a6:72:d0:5c:ed:63:30:6b:9d:dd:f8:be:5b:88:
                    78:ba:cf:6e:2f:a2:b7:a6:3e:77:9c:94:92:73:c4:
                    ff:34:62:9f:10:e7:78:4a:ad:15:0a:20:3a:3f:b7:
                    ed:7f:12:48:17:c4:37:e9:5e:98:e4:bd:b9:df:58:
                    de:8f:d8:26:d8:62:6e:c3:72:c2:3e:68:5a:a2:bb:
                    63:ec:ee:c6:b8:7e:1b:68:7a:e9:f9:ce:25:d2:02:
                    e8:c4:8f:5d:05:b2:78:64:bd:54:01:1a:5d:47:80:
                    2e:67:08:21:e5:72:c2:c2:17:74:fe:1e:5d:c0:b7:
                    87:a0:d5:da:48:e3:57:9a:09:da:c9:99:3d:26:5a:
                    aa:dd:f9:3a:6d:13:ed:ec:73:f6:d6:a4:20:bd:b2:
                    be:e5:0f:02:d8:5f:58:5b:16:c0:c5:67:df:c2:0c:
                    4e:aa:26:ab:b8:6f:f3:40:71:21:d6:a7:6d:cc:7a:
                    1f:49:a7:14:9e:03:41:46:c5:8d:10:d4:ec:e8:fc:
                    b1:ea:89:6f:ee:eb:4f:7f:c9:b8:58:ce:2a:92:ab:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CC:72:E9:D8:56:B9:25:EB:56:6E:67:3F:4E:33:E9:65:04:CC:D6
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e302e302f31372d3137203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5d:6b:a2:30:46:f9:87:70:b2:9c:bd:a0:35:e8:aa:59:04:fe:
         02:d5:25:c1:b8:7d:e4:78:98:cc:70:78:0b:14:13:c9:ab:b0:
         e7:92:7e:df:9e:1c:31:0f:07:c0:bc:cc:2f:23:91:2a:61:84:
         d0:fd:8b:11:96:9d:ed:bd:75:7f:ef:27:38:80:ca:b7:fc:89:
         2c:3a:17:d5:57:99:3f:c8:ce:0f:8f:59:6c:4b:c9:90:ea:74:
         5c:e2:28:fa:98:0f:b7:88:da:78:f5:4d:cb:75:2b:ba:0b:23:
         31:98:cb:23:51:36:a1:da:fc:86:52:0d:62:e0:28:e7:03:93:
         b4:b3:3d:e0:54:07:98:da:0c:56:ba:bd:a7:d8:6b:60:70:33:
         ec:0e:b7:22:35:6f:10:7b:73:27:06:4c:24:c3:92:f0:7e:36:
         a2:16:43:de:77:b9:57:54:f2:b9:a6:9b:6b:fd:29:27:30:cf:
         82:1e:7a:61:86:79:f6:32:77:25:10:c8:97:02:42:42:24:5d:
         e6:e9:e0:75:10:90:3c:e9:be:27:fe:56:ca:0f:bb:84:81:61:
         75:3c:23:db:fd:88:49:16:5c:aa:23:b5:f4:05:ea:49:98:ad:
         ae:a2:ce:a2:39:cd:b2:a7:20:c9:2a:15:ee:86:9a:b9:5e:9d:
         05:50:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:01 2025 by rpki-client