Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e36342e3132382e302f31372d3234203d3e203532323238.roa
File:                     3138362e36342e3132382e302f31372d3234203d3e203532323238.roa (raw, json)
Hash identifier:          mnEAEufmbeRf97D71zYh0ZqrIBlPXSDNPMwEtIHV9Cc=
Subject key identifier:   39:06:A7:69:9D:5D:9D:63:E2:B5:C8:D3:AA:4F:47:5E:BB:C3:ED:64
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       5AE869EAB7C06D37F96CE149E314EF13DDC369DD
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e36342e3132382e302f31372d3234203d3e203532323238.roa
Signing time:             Tue 04 Feb 2025 18:01:49 +0000
ROA not before:           Tue 04 Feb 2025 17:56:49 +0000
ROA not after:            Tue 03 Feb 2026 18:01:49 +0000
asID:                     52228
IP address blocks:        186.64.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e8:69:ea:b7:c0:6d:37:f9:6c:e1:49:e3:14:ef:13:dd:c3:69:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Feb  4 17:56:49 2025 GMT
            Not After : Feb  3 18:01:49 2026 GMT
        Subject: CN=3906A7699D5D9D63E2B5C8D3AA4F475EBBC3ED64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:c6:3c:fe:b3:3d:43:19:7c:e9:b3:aa:bc:
                    c1:c3:dc:7c:91:dd:4d:f7:25:5c:54:a5:cc:30:cd:
                    05:ba:24:d3:6b:ab:b1:7d:5d:0a:cb:44:9a:dd:28:
                    f2:1b:e6:f6:40:aa:32:44:ca:71:00:85:22:10:c0:
                    46:06:3b:62:1d:14:86:bf:6c:82:87:ad:36:db:e1:
                    ee:54:4a:46:c6:e3:b0:52:0c:d1:32:4b:4c:58:b9:
                    99:73:02:77:92:01:0d:06:c2:f0:81:71:59:5c:c3:
                    59:05:4f:ff:cb:43:c9:c4:5c:24:a0:c7:2e:02:cd:
                    d9:da:a1:f5:0a:87:84:58:e8:eb:32:e4:86:f9:e3:
                    75:63:44:35:27:99:fa:15:36:c5:40:1b:f6:9a:4e:
                    69:19:4d:5a:c8:f6:2e:bc:be:e8:38:82:05:59:24:
                    09:33:00:be:48:a0:07:04:47:c7:09:22:60:0e:0a:
                    5e:b5:a5:90:36:e6:c4:24:66:a7:6a:b7:8b:49:a8:
                    e0:2e:6a:73:63:42:a1:a3:5c:a9:91:ae:49:3e:b2:
                    d8:7d:1a:b6:95:29:d0:bc:54:94:da:9f:ab:62:b1:
                    c4:c7:7d:6c:da:ab:af:2d:87:64:c4:19:5e:41:21:
                    01:01:4d:b3:2e:48:d3:a1:66:a4:04:e3:f3:b9:a0:
                    82:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:06:A7:69:9D:5D:9D:63:E2:B5:C8:D3:AA:4F:47:5E:BB:C3:ED:64
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e36342e3132382e302f31372d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.64.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         33:ca:23:f4:39:2f:a1:30:2e:74:42:2d:0e:f3:bf:51:8e:24:
         c4:0f:87:eb:c2:94:04:fd:0e:43:c3:02:b3:2f:df:5f:7d:5e:
         f7:e5:0f:f5:68:3b:b9:43:71:ae:7c:79:78:09:4e:a6:16:b9:
         8e:03:16:e4:43:9b:5e:5f:69:5d:e1:34:27:ad:b9:c1:b4:85:
         06:d9:7a:d5:10:b3:e5:5f:46:20:1b:b4:2a:ea:ff:ec:22:30:
         b7:46:0c:58:65:cb:a3:ed:47:20:ee:77:3f:ee:b7:29:2d:de:
         f1:b3:5a:b1:f3:ed:5c:b8:75:f1:94:86:01:de:e7:17:e5:6f:
         34:7f:bd:cf:80:81:3d:58:20:66:00:7f:56:10:28:a9:29:48:
         f0:de:32:c9:6c:3d:21:9b:d9:de:9d:41:d7:c2:86:d7:9d:b8:
         c5:87:84:ee:e0:ca:aa:88:08:ae:4c:10:a3:ac:ec:c9:3b:45:
         c7:3c:ab:74:ac:cd:16:6a:3d:ac:a9:c2:0c:f8:27:99:0a:e2:
         03:e7:c0:f5:7a:2f:5a:ca:db:e7:e3:51:1b:2e:b8:3b:49:db:
         a9:31:1e:0a:d9:7e:14:6c:63:51:f8:b7:6e:47:d4:a4:be:69:
         3d:77:18:cb:4d:68:4a:05:7c:da:62:ff:e6:31:89:20:f7:f7:
         f0:fa:5d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:04:57 2025 by rpki-client