Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3138362e3137392e36342e302f32302d3234203d3e203532343638.roa
File:                     3138362e3137392e36342e302f32302d3234203d3e203532343638.roa (raw, json)
Hash identifier:          zkMjyQ9YuxxNrSWSHViqsoqWXFtH6nfFKMmPI6XhXkQ=
Subject key identifier:   2C:EE:7D:B5:DE:9F:F7:ED:0F:82:9C:AA:48:65:7D:99:3F:7D:66:AE
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       12ED4EF0D223DB9878E5886F0AEE5584561A078B
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3138362e3137392e36342e302f32302d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:33:42 +0000
ROA not before:           Tue 04 Feb 2025 18:28:42 +0000
ROA not after:            Tue 03 Feb 2026 18:33:42 +0000
asID:                     52468
IP address blocks:        186.179.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ed:4e:f0:d2:23:db:98:78:e5:88:6f:0a:ee:55:84:56:1a:07:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Feb  4 18:28:42 2025 GMT
            Not After : Feb  3 18:33:42 2026 GMT
        Subject: CN=2CEE7DB5DE9FF7ED0F829CAA48657D993F7D66AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:04:99:5a:50:bb:38:eb:c2:9d:ad:ca:44:
                    5b:3a:d5:21:91:d5:75:1d:8f:d7:17:cf:1d:e3:d1:
                    6c:ba:7c:ec:16:2d:3e:e4:40:dd:37:de:8d:f0:09:
                    d2:a5:88:8d:8d:1f:c0:a9:74:c4:55:3f:0a:1e:01:
                    b9:4f:e2:69:90:2c:ce:b5:84:ed:a8:60:76:4c:4f:
                    6e:fd:45:1e:6d:b2:55:67:37:61:dd:49:cc:9b:68:
                    4c:66:87:78:87:4a:7f:94:b5:4c:e1:6b:22:dd:64:
                    66:db:0f:50:cb:73:a4:1c:aa:67:d3:f9:85:8a:b4:
                    85:8c:69:fd:63:25:66:60:d9:3d:fb:98:5d:ba:00:
                    b1:64:a1:04:6f:4f:d9:73:6c:79:cf:96:0c:85:ab:
                    36:45:07:ab:e5:0c:3b:ae:a3:9b:81:00:70:58:29:
                    3e:d6:9b:bc:53:b2:b0:7e:ec:70:59:d6:9c:2e:75:
                    3d:cd:b9:76:3a:72:8e:48:f0:69:27:df:16:0b:a1:
                    91:11:54:6f:e5:7b:17:b4:ca:04:d2:ff:d9:9e:6d:
                    40:91:4e:0e:b9:14:33:11:b9:63:47:83:d0:4b:7f:
                    41:3e:c0:d7:d1:16:78:33:74:6f:a2:24:6d:31:79:
                    2d:25:f2:3a:d1:4e:78:73:79:af:5e:6c:32:00:85:
                    9d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EE:7D:B5:DE:9F:F7:ED:0F:82:9C:AA:48:65:7D:99:3F:7D:66:AE
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3138362e3137392e36342e302f32302d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:9e:ad:e7:9a:33:30:58:64:9a:68:02:df:57:74:98:92:88:
         2f:5a:8f:c6:b5:b4:bc:4b:10:aa:e7:c0:e3:36:72:60:46:29:
         24:61:29:8b:7a:48:e7:5f:8b:ba:85:6e:f1:05:80:82:6d:d8:
         e5:c2:75:ef:f2:c0:8a:f0:59:79:43:3b:86:96:7e:b1:db:7d:
         c0:9c:c1:b0:3d:03:f8:5e:10:b4:bf:dc:dd:ab:33:3b:3e:d9:
         27:a2:ed:67:b8:33:6a:4c:d1:d9:90:37:27:74:9b:33:27:b0:
         2b:64:e0:fe:f9:9a:4a:84:56:b6:18:bf:94:e1:59:d3:2d:de:
         63:f0:fc:4c:ab:ab:61:6a:89:10:54:70:2c:62:b7:bd:58:50:
         aa:2b:40:41:1e:87:5d:01:da:69:45:05:a7:7f:73:92:f6:5f:
         16:3e:ae:b8:5e:77:23:3a:fc:aa:12:98:4f:55:4d:f3:e8:6f:
         d7:9e:78:6d:d2:59:d1:93:9f:eb:a4:0e:6e:79:f0:cd:56:f4:
         78:77:95:96:7d:67:e6:5e:81:8f:36:e7:15:1a:6a:a7:4c:dd:
         a8:2d:94:0d:6f:04:98:1f:f0:be:00:32:54:86:f4:a9:33:8c:
         3a:df:1b:5e:44:d1:0b:12:21:d8:f3:1d:65:03:14:5c:db:25:
         06:eb:bb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:05 2025 by rpki-client