Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3132382e302f31392d3234203d3e203532323238.roa
File:                     3138362e31352e3132382e302f31392d3234203d3e203532323238.roa (raw, json)
Hash identifier:          q0De4HKA2YELaZ6tQgcL67qGo3xMPdUN7OoGPhq9y7o=
Subject key identifier:   9D:2B:FF:C9:B4:A4:D1:97:89:09:D1:EF:2C:56:26:A9:C9:0B:CD:11
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       7ED8A6EF6FD12ED80E97C786BBE5CDEC35A4BAD6
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3132382e302f31392d3234203d3e203532323238.roa
Signing time:             Tue 04 Feb 2025 18:01:51 +0000
ROA not before:           Tue 04 Feb 2025 17:56:51 +0000
ROA not after:            Tue 03 Feb 2026 18:01:51 +0000
asID:                     52228
IP address blocks:        186.15.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 14:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d8:a6:ef:6f:d1:2e:d8:0e:97:c7:86:bb:e5:cd:ec:35:a4:ba:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Feb  4 17:56:51 2025 GMT
            Not After : Feb  3 18:01:51 2026 GMT
        Subject: CN=9D2BFFC9B4A4D1978909D1EF2C5626A9C90BCD11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:02:10:ae:ef:9b:7f:a0:62:e5:6b:ff:da:e6:
                    de:60:c2:71:e4:7a:fd:34:4b:7c:e6:a4:65:46:d0:
                    7b:49:30:50:e3:f6:4a:eb:b4:e1:4f:0b:49:a7:50:
                    16:5f:1f:fb:7b:47:ef:ce:ff:9f:54:c1:26:70:ce:
                    7f:5e:cb:3d:19:2d:87:77:fd:64:e0:d1:66:a6:a7:
                    54:03:91:41:79:0e:7b:84:f0:38:55:7b:7b:b1:05:
                    81:56:aa:5f:c6:82:fc:5e:bb:e4:27:37:9e:01:37:
                    96:15:de:fe:30:c0:21:9b:d7:57:25:00:04:8d:a5:
                    17:72:e6:82:95:85:91:ed:00:a9:e5:63:1b:76:79:
                    b6:47:80:8f:1d:3c:51:13:9d:ed:60:60:66:86:dd:
                    3a:d0:5b:50:70:e6:25:b6:1b:c0:72:91:de:8b:3b:
                    f2:55:4e:47:aa:d1:45:b0:b4:1a:0d:fa:e3:9d:62:
                    59:17:d5:7e:b3:34:a3:3d:1d:22:5a:37:bb:fa:44:
                    6b:d8:71:bd:e6:6f:47:1a:8b:1d:86:3e:1b:06:f4:
                    19:57:7b:6e:98:44:6b:21:1b:e5:36:84:44:d2:da:
                    1c:d2:67:08:2b:2f:fe:0a:e0:1c:f9:61:1f:d3:59:
                    af:38:65:0e:cd:48:95:d3:3b:16:b8:39:23:19:db:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2B:FF:C9:B4:A4:D1:97:89:09:D1:EF:2C:56:26:A9:C9:0B:CD:11
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3132382e302f31392d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.15.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:87:f3:79:26:42:4e:e5:f7:47:a5:3b:ca:a6:ec:0b:6d:db:
         5e:07:25:b7:22:79:32:cf:be:d5:eb:dd:a2:a6:f9:56:42:08:
         e5:c9:39:39:f0:cb:ad:25:c6:d1:49:8a:dd:d1:83:f9:d4:6e:
         8f:52:64:38:cd:0d:dd:7a:3a:45:33:7c:c3:af:3f:df:0e:0d:
         b8:d9:ee:91:1c:0f:a4:50:8d:a9:ee:6b:14:11:83:c7:79:92:
         86:b0:d0:67:cb:7e:34:bf:4b:da:73:ad:fb:6a:07:9a:c4:37:
         3f:b8:df:1b:15:ba:b5:eb:35:e4:82:b0:87:3a:00:5c:d7:56:
         a6:f0:5d:60:bb:1b:c1:ac:af:bf:71:2f:84:5d:d7:3d:bf:d4:
         27:28:78:28:73:5b:09:e7:a0:e8:e4:70:04:e3:50:e8:a3:6f:
         6f:7d:e9:c9:0c:2d:dc:c9:7f:44:dc:d4:b9:7d:03:a1:1e:a1:
         12:93:0c:61:b3:3e:40:f4:a6:28:09:bc:9c:f5:7d:96:f6:f3:
         87:99:89:37:0a:9d:c7:19:1f:d8:ff:f1:66:28:9f:97:2a:46:
         bc:3f:4a:5f:ba:58:e2:0a:c1:85:9a:b1:7b:20:99:9f:26:3a:
         d3:3e:93:c1:2f:2f:6d:6a:ab:5b:9e:eb:cd:9b:8a:02:ce:c9:
         af:68:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:08:29 2025 by rpki-client