Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3138362e3137392e302e302f31382d3138203d3e203532333933.roa
File:                     3138362e3137392e302e302f31382d3138203d3e203532333933.roa (raw, json)
Hash identifier:          Eru+PzPqnoDmCFsqaPzr3lGlwewaLAqqa/b6nuG0msc=
Subject key identifier:   01:6D:1A:00:5C:F9:A4:20:2A:94:32:37:8E:70:58:11:77:2B:3C:50
Certificate issuer:       /CN=DB11B7707911064B45F88A13AD77795D0BCE5CC6
Certificate serial:       72BB0C03E3066BF934E8F6681745ED73AE451B78
Authority key identifier: DB:11:B7:70:79:11:06:4B:45:F8:8A:13:AD:77:79:5D:0B:CE:5C:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3138362e3137392e302e302f31382d3138203d3e203532333933.roa
Signing time:             Tue 04 Feb 2025 18:28:56 +0000
ROA not before:           Tue 04 Feb 2025 18:23:56 +0000
ROA not after:            Tue 03 Feb 2026 18:28:56 +0000
asID:                     52393
IP address blocks:        186.179.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bb:0c:03:e3:06:6b:f9:34:e8:f6:68:17:45:ed:73:ae:45:1b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB11B7707911064B45F88A13AD77795D0BCE5CC6
        Validity
            Not Before: Feb  4 18:23:56 2025 GMT
            Not After : Feb  3 18:28:56 2026 GMT
        Subject: CN=016D1A005CF9A4202A9432378E705811772B3C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:19:2b:a6:90:64:97:2f:d6:6a:8f:20:25:
                    99:33:dd:ae:26:3b:52:05:1c:73:75:04:c6:16:83:
                    8b:81:f6:5c:ba:6b:bf:31:fa:79:d0:cb:49:61:04:
                    e7:8d:a8:0c:fb:e0:96:79:17:7b:47:9b:e8:b4:8d:
                    5f:d0:23:cc:d1:ef:50:80:2c:a0:af:11:87:37:ae:
                    ed:5b:4e:d9:e8:d6:7d:9c:49:ba:eb:a9:32:32:8d:
                    d7:45:fd:5e:27:d4:04:5f:3a:66:a3:ae:f5:89:cf:
                    fc:d2:2a:31:91:91:8f:8d:60:cc:b5:10:fb:17:9b:
                    27:76:66:22:b9:8b:e6:79:2f:b8:54:c2:c4:21:fa:
                    c3:9c:49:6f:e7:62:af:4b:e3:f7:a8:72:e4:26:20:
                    e6:81:d2:97:7c:69:89:f0:13:1e:f2:46:c3:00:41:
                    d5:92:13:bd:3e:f4:b0:bd:3e:e4:03:9b:0f:99:ff:
                    fd:19:6c:62:74:20:c2:b4:10:a9:81:b0:3d:5c:42:
                    13:1f:f7:75:f5:e6:b0:73:25:c4:4a:b6:7a:59:28:
                    e5:18:96:f1:31:26:05:9c:14:3f:9e:08:b9:93:32:
                    96:79:c0:37:8c:76:73:a2:5b:f8:ff:f6:81:b5:83:
                    4a:99:e4:88:4d:f3:da:95:bd:f8:6b:c8:6b:d7:f0:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6D:1A:00:5C:F9:A4:20:2A:94:32:37:8E:70:58:11:77:2B:3C:50
            X509v3 Authority Key Identifier:
                keyid:DB:11:B7:70:79:11:06:4B:45:F8:8A:13:AD:77:79:5D:0B:CE:5C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3138362e3137392e302e302f31382d3138203d3e203532333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bc:7d:da:97:fa:e2:db:3a:aa:df:b4:4f:13:44:f8:98:44:e2:
         8f:d5:b8:e0:64:d5:c1:b8:f9:b0:94:4e:bb:ba:17:54:03:0c:
         06:08:71:49:08:e0:3b:4d:41:1e:d8:f1:9c:7d:db:2d:2f:f6:
         3a:b3:e8:11:e8:3a:39:bf:ab:84:fd:55:77:a3:99:3e:7f:66:
         e4:fe:8e:e5:ad:0a:70:ef:8c:13:fe:61:b2:77:ef:21:61:d7:
         0d:35:cb:31:3d:b6:e9:94:64:b8:73:e3:93:ab:34:9b:7e:62:
         e9:7c:43:2b:6b:cb:70:f5:7d:55:fa:a3:ef:bc:3f:4f:9e:09:
         a7:51:ed:16:c3:bc:81:8a:48:85:da:69:99:09:e8:08:2f:98:
         9a:74:31:a5:e8:13:f9:2f:01:aa:3e:60:b7:dd:a9:c0:f8:3d:
         f6:c9:f4:b2:fa:86:42:96:aa:32:ff:3a:a0:f8:43:80:cc:38:
         9a:7e:cf:17:33:8a:ac:cd:bf:aa:4f:f5:0d:8a:93:5a:40:45:
         16:98:2e:a8:04:f1:ec:fe:b6:03:95:b9:2f:e9:62:2d:d9:80:
         c2:22:c7:b8:75:32:23:64:34:07:d4:ff:14:e7:9b:44:4b:09:
         04:0a:fd:3b:26:98:98:e3:59:8c:12:97:3c:ac:6c:75:27:94:
         aa:60:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:12 2025 by rpki-client