Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e302e302f31382d3138203d3e203237363935.roa
File:                     3138362e3135392e302e302f31382d3138203d3e203237363935.roa (raw, json)
Hash identifier:          QTBSXZnfpc36p5xB1fP8+eES2gbdgIxPvn/TM5scKWs=
Subject key identifier:   10:5D:D1:6E:2D:5F:B2:B0:45:9D:42:36:28:47:58:BB:AE:8F:7B:1F
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       4139406CB9ECAB9F01891258D1CC922B1818DE58
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e302e302f31382d3138203d3e203237363935.roa
Signing time:             Mon 16 Dec 2024 19:20:02 +0000
ROA not before:           Mon 16 Dec 2024 19:15:02 +0000
ROA not after:            Mon 15 Dec 2025 19:20:02 +0000
asID:                     27695
IP address blocks:        186.159.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:39:40:6c:b9:ec:ab:9f:01:89:12:58:d1:cc:92:2b:18:18:de:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Dec 16 19:15:02 2024 GMT
            Not After : Dec 15 19:20:02 2025 GMT
        Subject: CN=105DD16E2D5FB2B0459D4236284758BBAE8F7B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:dd:8d:4e:90:fd:32:25:18:a8:97:ca:48:
                    f8:95:56:49:a2:3a:9b:03:32:3b:df:d5:38:33:2b:
                    4d:04:f9:da:8a:ed:86:ab:98:0b:d9:b9:39:17:b9:
                    08:c7:be:9e:17:b0:f3:28:e7:f2:01:41:e6:48:9d:
                    6f:e0:14:36:f7:cf:a1:35:96:6e:06:4f:6b:1b:c6:
                    e1:91:e7:a4:1c:d3:b4:ad:27:a2:94:01:ed:9a:94:
                    9a:16:5a:63:ed:c3:69:92:55:cf:cc:6f:63:54:b0:
                    10:a4:14:c5:56:f2:04:73:97:dc:16:c0:05:19:5e:
                    d1:96:ac:b0:a0:45:e6:51:68:18:6f:7b:c9:91:79:
                    b3:6a:03:65:98:02:1d:f6:04:68:46:90:5e:63:2c:
                    ed:52:0f:d3:ea:72:04:6d:01:a3:98:f7:d6:06:a4:
                    d9:61:53:1a:17:51:bf:cf:52:bd:67:86:4f:1e:25:
                    e3:d8:1c:62:26:d5:0f:e1:80:e8:8a:f5:07:d5:fe:
                    38:82:dd:f5:2b:e7:a7:77:10:4a:8e:5d:fe:c8:dd:
                    08:05:0e:b0:c1:30:e4:ae:8c:36:ae:35:32:95:ec:
                    48:de:b2:3c:85:92:6b:7d:74:02:9e:6e:b1:46:43:
                    c4:c2:61:bb:3f:b0:93:09:fc:4d:6a:1c:9e:53:57:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5D:D1:6E:2D:5F:B2:B0:45:9D:42:36:28:47:58:BB:AE:8F:7B:1F
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e302e302f31382d3138203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6d:f6:96:ed:a1:c4:57:31:f4:3e:9d:fe:02:a6:3a:dd:8f:54:
         3b:66:cd:6b:92:2d:94:6e:3d:4e:96:3c:c4:e9:fe:0c:ad:d3:
         55:69:ba:68:b0:b2:6a:d7:d9:13:65:f8:ae:cf:1d:a0:81:95:
         fb:39:60:8c:cb:16:3c:f0:f8:b9:0c:17:22:7c:02:7e:d5:67:
         44:a1:9c:82:c1:25:7a:0f:da:9f:8b:37:67:61:0f:86:88:99:
         d3:08:0f:b7:ef:e3:9f:c7:b6:bd:c5:ff:1e:8c:d0:89:b9:bc:
         8b:7e:3b:c8:e4:d6:0e:c9:ac:06:87:ad:d2:a4:1b:22:19:69:
         0e:95:5d:5f:6a:f2:ac:af:04:c0:ab:6a:43:5e:2e:a3:b1:c3:
         30:da:ed:f1:22:65:db:5b:59:c5:51:b7:51:ab:73:24:21:87:
         17:35:14:73:ae:89:51:c6:33:94:e6:da:b5:8b:ed:08:eb:77:
         3e:76:cb:90:54:fa:17:1d:2d:26:24:06:39:5c:49:ea:7a:03:
         15:e2:69:3e:75:43:1e:dc:0c:32:12:ad:05:1e:2e:36:a1:de:
         a3:3d:a1:0e:76:1c:0f:5a:f1:f8:13:a1:43:72:4b:2a:ff:21:
         9d:04:fe:2f:1f:12:41:ac:48:79:9e:b3:c2:c5:0d:26:3b:c2:
         65:8f:6d:5d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQTlAbLnsq58BiRJY0cySKxgY3lgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNDEyMTYxOTE1MDJaFw0yNTEyMTUxOTIwMDJaMDMxMTAvBgNV
BAMTKDEwNUREMTZFMkQ1RkIyQjA0NTlENDIzNjI4NDc1OEJCQUU4RjdCMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gN2NTpD9MiUYqJfKSPiVVkmi
OpsDMjvf1TgzK00E+dqK7YarmAvZuTkXuQjHvp4XsPMo5/IBQeZInW/gFDb3z6E1
lm4GT2sbxuGR56Qc07StJ6KUAe2alJoWWmPtw2mSVc/Mb2NUsBCkFMVW8gRzl9wW
wAUZXtGWrLCgReZRaBhve8mRebNqA2WYAh32BGhGkF5jLO1SD9PqcgRtAaOY99YG
pNlhUxoXUb/PUr1nhk8eJePYHGIm1Q/hgOiK9QfV/jiC3fUr56d3EEqOXf7I3QgF
DrDBMOSujDauNTKV7EjesjyFkmt9dAKebrFGQ8TCYbs/sJMJ/E1qHJ5TV4QpAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUEF3Rbi1fsrBFnUI2KEdYu66Pex8wHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzgzNjJlMzEzNTM5MmUzMDJlMzAy
ZjMxMzgyZDMxMzgyMDNkM2UyMDMyMzczNjM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa6nwAwDQYJ
KoZIhvcNAQELBQADggEBAG32lu2hxFcx9D6d/gKmOt2PVDtmzWuSLZRuPU6WPMTp
/gyt01VpumiwsmrX2RNl+K7PHaCBlfs5YIzLFjzw+LkMFyJ8An7VZ0ShnILBJXoP
2p+LN2dhD4aImdMID7fv45/Htr3F/x6M0Im5vIt+O8jk1g7JrAaHrdKkGyIZaQ6V
XV9q8qyvBMCrakNeLqOxwzDa7fEiZdtbWcVRt1GrcyQhhxc1FHOuiVHGM5Tm2rWL
7Qjrdz52y5BU+hcdLSYkBjlcSep6AxXiaT51Qx7cDDISrQUeLjah3qM9oQ52HA9a
8fgToUNySyr/IZ0E/i8fEkGsSHmes8LFDSY7wmWPbV0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:44 2025 by rpki-client