Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e36342e302f31392d3139203d3e203237363935.roa
File:                     3138362e3135392e36342e302f31392d3139203d3e203237363935.roa (raw, json)
Hash identifier:          uq4GoMYqfWbn70OOMFpBs735ogGDPqjlVgXP3S/0w4o=
Subject key identifier:   C4:DC:60:F0:E4:42:D9:B9:12:C7:4F:D9:5A:C1:D0:06:92:80:CF:EF
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       07A3824F9281BA45D68A0D341F22F6C29E8C06A4
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e36342e302f31392d3139203d3e203237363935.roa
Signing time:             Mon 16 Dec 2024 19:20:00 +0000
ROA not before:           Mon 16 Dec 2024 19:15:00 +0000
ROA not after:            Mon 15 Dec 2025 19:20:00 +0000
asID:                     27695
IP address blocks:        186.159.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a3:82:4f:92:81:ba:45:d6:8a:0d:34:1f:22:f6:c2:9e:8c:06:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Dec 16 19:15:00 2024 GMT
            Not After : Dec 15 19:20:00 2025 GMT
        Subject: CN=C4DC60F0E442D9B912C74FD95AC1D0069280CFEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:04:dd:c5:26:7a:5d:ba:64:1f:6e:4b:5a:
                    6d:2c:eb:93:d3:dc:40:49:b6:8e:02:82:cb:e5:76:
                    c2:d4:14:ab:38:1a:d9:c7:49:9b:fd:f2:1b:8e:37:
                    36:d0:fd:ce:69:e9:2d:be:36:9f:cc:d5:3c:14:20:
                    bf:1b:69:cc:63:3a:27:b3:03:11:3b:03:37:63:cb:
                    58:03:b5:70:9b:ab:82:6d:d1:da:3a:e1:80:99:67:
                    44:f1:56:51:a9:85:ca:97:dc:90:1c:f2:1a:ec:5d:
                    d2:c9:05:5b:c8:5d:10:fc:51:80:62:c1:b3:77:8e:
                    93:6b:85:d8:d4:3a:62:33:6e:39:a3:b4:2c:54:7e:
                    2b:ef:4e:3f:31:8c:36:15:e4:15:a4:67:05:93:b9:
                    90:92:cd:f4:84:81:66:33:fc:e9:72:8c:f1:94:51:
                    e2:81:60:cc:e6:a2:81:df:48:4a:a3:22:14:97:c5:
                    0f:ea:5a:61:9b:6e:d2:b0:25:fe:7c:6a:ae:5f:2e:
                    77:4f:55:e7:96:38:63:da:a9:8b:00:85:74:80:62:
                    e1:c1:81:cb:c9:55:c7:fe:7a:df:84:6b:81:f5:02:
                    00:bd:85:d1:2d:e8:7b:45:3e:40:13:9e:86:5c:4c:
                    fb:ab:bd:d5:bc:cf:6b:7a:f7:49:24:8b:55:8e:65:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DC:60:F0:E4:42:D9:B9:12:C7:4F:D9:5A:C1:D0:06:92:80:CF:EF
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138362e3135392e36342e302f31392d3139203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:62:23:d0:2f:9c:2c:a2:79:6d:07:df:97:2c:81:78:51:07:
         69:dd:16:75:c4:aa:5d:1a:86:c9:f6:b4:34:04:ab:d5:6a:d7:
         b4:ad:85:9d:02:fe:cf:ec:24:b1:14:bd:a4:8b:b6:e9:36:8c:
         fa:71:e6:36:50:52:ef:9e:8c:1d:56:9a:18:49:c2:4d:93:43:
         68:c5:1c:e2:9a:a5:d2:18:52:89:cc:48:3c:31:49:12:13:18:
         77:5e:28:67:64:9e:00:cf:dc:8f:24:73:eb:75:01:85:de:be:
         72:1d:24:6f:6d:a1:b1:46:8d:58:d3:c2:d3:e4:46:b2:ba:af:
         1d:82:62:7f:fe:e2:02:3a:6c:ff:c6:8e:b2:9e:68:ac:c2:62:
         22:83:56:83:34:1f:ec:bf:95:e3:00:60:14:17:8f:f7:c9:93:
         f0:b2:80:92:74:21:00:3d:59:36:1f:97:e2:1e:f7:2e:5f:6b:
         50:44:dc:6e:fc:f1:46:2a:b3:f1:92:ac:5c:db:10:b2:51:95:
         2d:93:ca:51:cd:59:0d:c6:fc:b2:81:05:3f:a8:36:c8:52:c0:
         49:6b:ba:7a:51:60:e9:3c:02:5a:3f:ed:86:d5:be:f8:0f:93:
         fc:70:26:82:91:f7:2d:35:f7:58:f3:8e:71:da:c4:bc:db:26:
         0d:b1:f2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:34:39 2025 by rpki-client