Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e38382e302f32342d3234203d3e203238313134.roa
File:                     3138362e3138332e38382e302f32342d3234203d3e203238313134.roa (raw, json)
Hash identifier:          FiwzBazd3mGJrn5pD296okNKNGq6Ne/9NQHdy6agPmI=
Subject key identifier:   83:A1:20:04:7E:51:29:DF:A9:9E:71:E0:D6:72:E1:1E:41:58:86:6E
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       5F315BE402C000E819F081ADFF0C0600A0F83EF0
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e38382e302f32342d3234203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:43 +0000
ROA not before:           Tue 04 Feb 2025 18:02:43 +0000
ROA not after:            Tue 03 Feb 2026 18:07:43 +0000
asID:                     28114
IP address blocks:        186.183.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:31:5b:e4:02:c0:00:e8:19:f0:81:ad:ff:0c:06:00:a0:f8:3e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:43 2025 GMT
            Not After : Feb  3 18:07:43 2026 GMT
        Subject: CN=83A120047E5129DFA99E71E0D672E11E4158866E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:94:43:a1:cf:90:a4:90:1c:1b:5e:b9:9f:
                    7a:d4:7f:33:9e:c9:02:92:16:b2:b0:a8:10:7f:d5:
                    29:f5:be:c3:80:d0:c3:23:7c:44:a6:f2:82:93:f9:
                    3c:a5:8f:4a:3e:9a:84:ba:71:fd:fd:02:92:17:a7:
                    1b:82:81:55:78:78:65:44:3e:2c:15:2d:68:a8:80:
                    25:16:72:65:bf:02:22:d3:6c:b8:97:2c:c5:c3:18:
                    33:70:79:d8:ae:da:10:c0:9e:29:8b:44:cb:4b:93:
                    a1:00:5e:0a:96:c2:67:3f:9e:1e:5b:8d:a7:93:71:
                    04:2d:c1:84:b6:ef:3f:f9:9a:0d:20:00:a5:53:14:
                    d6:51:3f:ea:5f:fa:d8:b3:ed:4c:90:25:4e:b1:42:
                    50:2b:69:80:18:99:c8:c8:62:7e:2f:db:5b:2f:b1:
                    49:05:e5:42:df:cd:83:6b:4e:14:36:0e:e7:dc:01:
                    5f:ee:64:10:f4:9b:8c:93:eb:1c:cc:9d:33:a2:02:
                    10:98:01:c9:68:60:26:76:81:be:f5:7b:b0:b8:6a:
                    05:8a:ea:b6:e8:18:35:be:52:d3:82:be:c0:68:f5:
                    e8:19:3c:92:50:39:90:86:53:d7:32:1a:61:2c:f0:
                    52:93:b0:60:6e:61:1c:fe:f8:99:3e:ed:9b:9f:53:
                    7e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A1:20:04:7E:51:29:DF:A9:9E:71:E0:D6:72:E1:1E:41:58:86:6E
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e38382e302f32342d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e7:66:dc:72:84:8d:dc:53:ce:77:46:b2:d7:b2:82:3a:ce:
         c6:77:7b:dc:ff:7e:f1:7a:ca:1a:cd:2a:6d:12:b6:81:8d:5d:
         a0:28:ac:15:47:92:3f:9d:53:46:a8:ce:9c:7b:2b:6b:5c:94:
         db:55:24:35:9b:b8:fa:98:1d:5a:da:56:ba:96:ba:86:a9:cb:
         f9:6c:a0:3d:77:d9:a6:fc:2e:8c:05:d3:7c:ac:2f:11:15:53:
         cc:9e:80:9d:83:74:43:62:7c:14:b1:84:31:cc:93:aa:1b:63:
         4d:00:19:fc:0d:3d:20:98:9f:2b:76:a5:cb:f1:44:40:5e:60:
         f9:51:b3:eb:03:95:85:5e:6f:3b:24:37:cd:2b:36:04:f4:4f:
         29:fe:66:64:fa:ac:79:5b:5e:11:d4:35:86:b7:79:dd:0d:3d:
         6c:a1:15:57:aa:5f:2c:e1:70:03:6f:f6:74:b7:d3:fc:bb:01:
         33:aa:18:31:03:8b:87:91:34:43:f1:7b:3d:15:28:23:ff:14:
         13:45:af:89:99:18:92:69:28:f5:67:0c:c0:d9:6d:c5:f9:90:
         22:61:b6:9a:70:0c:4a:02:ac:0f:01:60:ba:3b:10:bc:d1:67:
         a7:d2:f7:68:89:e8:cd:34:60:47:45:27:08:4b:d7:69:83:9d:
         fe:13:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:20 2025 by rpki-client