Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3135312e302f32342d3234203d3e20323633373835.roa
File:                     3138362e31352e3135312e302f32342d3234203d3e20323633373835.roa (raw, json)
Hash identifier:          N2z3qaACbtDYLOQr6q7bLEhZk8Ch+ii4Ct97qcic/r4=
Subject key identifier:   C9:94:6F:3E:C9:2F:34:30:0E:0C:E5:36:99:C2:93:FE:F7:81:8F:66
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       241A5DD59FCC21E603F40C5A1B9E72D21468F3EA
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3135312e302f32342d3234203d3e20323633373835.roa
Signing time:             Wed 23 Jul 2025 02:05:03 +0000
ROA not before:           Wed 23 Jul 2025 02:00:03 +0000
ROA not after:            Wed 22 Jul 2026 02:05:03 +0000
asID:                     263785
IP address blocks:        186.15.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1a:5d:d5:9f:cc:21:e6:03:f4:0c:5a:1b:9e:72:d2:14:68:f3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Jul 23 02:00:03 2025 GMT
            Not After : Jul 22 02:05:03 2026 GMT
        Subject: CN=C9946F3EC92F34300E0CE53699C293FEF7818F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:6a:f4:c3:16:2a:29:25:0e:d9:99:65:bd:
                    68:1e:7a:98:43:75:49:7c:dd:db:ca:f6:9f:fe:3c:
                    4d:4b:49:7a:ed:1a:e7:65:52:74:8d:d3:97:22:f0:
                    f2:10:61:e1:06:19:81:31:90:6b:26:a3:6b:18:54:
                    1d:90:c4:02:45:35:a9:3b:a5:e7:83:ef:79:b8:79:
                    62:09:6f:32:aa:e4:62:b9:d0:ea:73:2e:e9:50:b5:
                    ff:bd:56:1b:1b:8e:6a:82:c9:f0:87:c8:16:61:e9:
                    06:77:e4:a5:21:1b:78:b8:8a:f4:3e:2e:2a:0f:ea:
                    6f:da:b9:04:ef:9b:73:e6:0d:58:a1:67:e0:25:1a:
                    ad:1b:d3:cc:6e:e1:9b:f4:9e:cd:7e:5d:ac:a3:15:
                    39:ac:73:0f:69:16:a2:06:e9:7d:1d:9f:f6:c2:3c:
                    82:3f:40:4e:e4:04:5d:bc:3b:d0:c4:30:95:69:f5:
                    fa:0f:50:df:b5:03:4c:59:92:ae:4a:76:64:b3:cc:
                    7f:ed:19:32:5f:c0:fe:51:97:5a:f9:cc:ab:03:f7:
                    89:9f:c6:c9:a2:09:0b:d6:ea:92:54:b4:e3:19:43:
                    fb:07:ee:54:13:d5:ec:f9:f1:5a:90:85:95:61:42:
                    e3:61:59:2c:3d:8e:49:c8:b3:f0:ad:48:af:7c:70:
                    ca:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:94:6F:3E:C9:2F:34:30:0E:0C:E5:36:99:C2:93:FE:F7:81:8F:66
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3135312e302f32342d3234203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.15.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:05:a9:8f:d7:79:79:26:bc:38:22:ed:0a:2d:b7:e2:ad:03:
         92:f7:d9:a1:35:0d:e2:e6:da:16:0d:56:39:07:4b:6a:aa:d9:
         5e:7d:34:35:08:1b:b2:1a:2f:b8:9c:69:eb:d4:db:60:ea:02:
         6b:1e:13:40:30:14:4b:89:57:ab:43:74:65:0e:d7:6f:cf:44:
         4c:c7:e4:6e:ed:74:e3:7d:f8:c4:ef:0a:25:34:89:2c:ba:67:
         35:a1:cb:03:34:b4:3f:23:e9:b3:96:a3:f5:dd:be:ca:f5:1a:
         19:e1:1b:32:f3:a9:18:a2:d4:f1:18:10:71:52:6b:fb:4e:f5:
         de:e8:26:23:4d:3f:44:48:a5:7b:a4:f1:1d:1a:7e:9b:d9:3c:
         aa:0c:d3:3f:eb:dd:d2:97:19:ae:76:41:7f:9e:c5:36:11:4c:
         dd:f3:43:9b:bc:9f:c2:6d:84:c3:dd:b7:5b:63:bc:ec:6f:4c:
         00:48:95:79:59:11:13:9c:1e:f5:69:42:47:4a:25:64:2c:f5:
         9c:12:91:a3:7f:b9:62:e5:69:10:41:57:80:cc:db:7c:56:0e:
         fa:e4:1a:69:af:23:d6:b1:a1:f2:e7:f3:98:5c:df:7f:9a:3f:
         f6:c5:24:4d:70:86:54:be:af:eb:61:fc:5d:86:f4:28:c0:b1:
         fb:58:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:00:28 2025 by rpki-client