Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41A327354C910C7E411ABBEDB4C273E37A6D540FB284F2C0957B94B7D7D249C6/0/3138362e3137392e38302e302f32302d3234203d3e203135333131.roa
File:                     3138362e3137392e38302e302f32302d3234203d3e203135333131.roa (raw, json)
Hash identifier:          qVAjcN3UTGqPkLMomSeJMSMFUwU/js3bKvOUSrepRqw=
Subject key identifier:   75:C3:E2:33:21:FF:DA:2B:2B:A7:D4:30:50:F4:B2:B3:52:F2:97:AF
Certificate issuer:       /CN=B27D4A02E2262F7D3B677E37327EE2B6E04CD49A
Certificate serial:       5D1484B397CF7A4C1BD7FC05B047377E731F83BC
Authority key identifier: B2:7D:4A:02:E2:26:2F:7D:3B:67:7E:37:32:7E:E2:B6:E0:4C:D4:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B27D4A02E2262F7D3B677E37327EE2B6E04CD49A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41A327354C910C7E411ABBEDB4C273E37A6D540FB284F2C0957B94B7D7D249C6/0/3138362e3137392e38302e302f32302d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 18:56:04 +0000
ROA not before:           Tue 04 Feb 2025 18:51:04 +0000
ROA not after:            Tue 03 Feb 2026 18:56:04 +0000
asID:                     15311
IP address blocks:        186.179.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41A327354C910C7E411ABBEDB4C273E37A6D540FB284F2C0957B94B7D7D249C6/0/B27D4A02E2262F7D3B677E37327EE2B6E04CD49A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41A327354C910C7E411ABBEDB4C273E37A6D540FB284F2C0957B94B7D7D249C6/0/B27D4A02E2262F7D3B677E37327EE2B6E04CD49A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B27D4A02E2262F7D3B677E37327EE2B6E04CD49A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 00:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:14:84:b3:97:cf:7a:4c:1b:d7:fc:05:b0:47:37:7e:73:1f:83:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B27D4A02E2262F7D3B677E37327EE2B6E04CD49A
        Validity
            Not Before: Feb  4 18:51:04 2025 GMT
            Not After : Feb  3 18:56:04 2026 GMT
        Subject: CN=75C3E23321FFDA2B2BA7D43050F4B2B352F297AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:04:c4:c1:c2:4b:e3:8a:36:07:4f:b1:72:d6:
                    eb:85:23:b2:2c:b5:b7:fc:41:e9:77:4e:ea:84:80:
                    10:41:68:15:14:46:57:23:60:5e:f6:b3:2b:69:0c:
                    53:99:39:9d:2b:40:8d:94:ec:f0:2c:0e:d6:20:61:
                    a3:0a:6e:b3:65:cb:05:19:4d:09:3f:e5:b7:01:c8:
                    3f:2b:55:16:6a:5b:5b:03:ae:1d:36:3f:71:2a:5e:
                    ce:9b:f9:c4:64:25:1a:6a:6f:9c:fd:e9:74:aa:aa:
                    63:07:c3:4b:18:62:8a:92:ef:15:f1:74:ba:ab:d0:
                    e5:0b:47:00:b9:35:e9:4a:6b:a3:2c:2a:7e:bb:17:
                    6c:f0:9e:d7:af:a0:aa:97:1b:bb:e9:8c:da:c6:72:
                    7b:5c:c7:60:e1:be:7a:85:33:e8:cc:72:43:58:24:
                    10:8c:fd:4b:61:19:3c:2c:77:33:0c:72:64:2b:63:
                    b5:5c:f6:a9:df:16:8c:3a:c4:f1:7e:f5:2b:af:bf:
                    e3:7c:38:b1:57:5f:59:2f:7f:36:95:8a:aa:d0:49:
                    07:71:49:b5:26:dd:59:dd:26:40:99:d8:e9:d2:75:
                    b8:4e:73:c7:45:e4:e7:f6:20:da:f3:3d:af:b8:f7:
                    1b:dc:2a:6d:d6:2a:f9:08:ba:9e:64:2e:a7:bd:32:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C3:E2:33:21:FF:DA:2B:2B:A7:D4:30:50:F4:B2:B3:52:F2:97:AF
            X509v3 Authority Key Identifier:
                keyid:B2:7D:4A:02:E2:26:2F:7D:3B:67:7E:37:32:7E:E2:B6:E0:4C:D4:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41A327354C910C7E411ABBEDB4C273E37A6D540FB284F2C0957B94B7D7D249C6/0/B27D4A02E2262F7D3B677E37327EE2B6E04CD49A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B27D4A02E2262F7D3B677E37327EE2B6E04CD49A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41A327354C910C7E411ABBEDB4C273E37A6D540FB284F2C0957B94B7D7D249C6/0/3138362e3137392e38302e302f32302d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:51:86:c3:c3:1c:3f:29:e3:f2:ee:12:24:66:af:a3:70:35:
         21:28:2d:01:94:2a:04:50:fd:1f:e4:eb:eb:0f:37:92:64:a3:
         b3:4a:9b:10:54:bc:28:c2:c4:6f:77:eb:3a:86:08:8f:7a:c1:
         89:fc:2d:db:97:00:a0:6f:19:cc:54:01:89:2b:43:85:5f:44:
         ef:53:7b:9f:77:7c:b3:d0:e2:ce:5a:d7:bf:11:34:8f:97:79:
         8f:38:4e:bc:bb:30:1d:86:81:78:52:6c:0b:72:73:b1:1f:3b:
         5d:89:b6:ce:1d:0b:d9:eb:80:a8:1c:fd:f1:96:4f:6d:9e:95:
         76:21:b7:b0:f8:c9:3f:42:f7:e2:ef:5a:d3:a1:53:b1:ba:8d:
         2e:9a:41:b3:3e:54:f1:ee:8a:d1:ad:28:ec:a5:3a:1d:e3:e5:
         af:eb:01:8e:d8:76:7a:af:90:c1:6f:69:2b:c5:50:1b:c2:85:
         87:6e:58:85:ff:d5:2c:ee:8a:da:ef:75:34:0b:47:e6:fc:21:
         79:a6:5a:d1:39:ab:19:d4:b7:9e:e1:23:d0:06:87:2b:62:8a:
         40:44:85:74:9d:9d:72:70:ef:a5:01:d2:77:c9:7f:53:f5:a8:
         b8:02:97:6d:0b:db:5d:2a:fe:0e:43:fb:a7:a3:d3:79:d6:46:
         6f:ef:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:20 2025 by rpki-client