Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3138362e39362e36342e302f32302d3234203d3e20333934363834.roa
File:                     3138362e39362e36342e302f32302d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          hT1eHJRLbaHMJZyt3/UJKFB93BRo+KIG5sx3p4w2cx8=
Subject key identifier:   2B:F9:4E:EB:F4:37:28:18:6E:34:55:C2:6E:1A:39:47:76:2B:1D:03
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       3A97DF9E0AB5FF02494D211168DAF4DED1AFD39E
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3138362e39362e36342e302f32302d3234203d3e20333934363834.roa
Signing time:             Tue 04 Feb 2025 18:38:18 +0000
ROA not before:           Tue 04 Feb 2025 18:33:18 +0000
ROA not after:            Tue 03 Feb 2026 18:38:18 +0000
asID:                     394684
IP address blocks:        186.96.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 13:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:97:df:9e:0a:b5:ff:02:49:4d:21:11:68:da:f4:de:d1:af:d3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Feb  4 18:33:18 2025 GMT
            Not After : Feb  3 18:38:18 2026 GMT
        Subject: CN=2BF94EEBF43728186E3455C26E1A3947762B1D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:10:7d:30:98:6a:17:52:bf:f9:ee:88:4a:
                    72:7d:1e:ec:42:fa:a1:b4:cf:a4:42:de:2a:19:65:
                    c8:65:8e:b4:26:a8:ee:26:34:fb:a0:c6:f6:7d:47:
                    9c:12:b7:1a:d6:77:48:f3:86:0d:fb:b3:3b:37:a0:
                    7c:60:fe:0d:fb:51:51:41:7e:56:9b:c8:43:71:37:
                    89:09:a0:6a:cd:66:94:4e:05:d1:60:43:1f:7e:30:
                    10:dc:0b:78:b9:20:18:cf:0b:55:05:6d:a9:1f:f6:
                    84:a4:d7:35:b5:34:41:a3:84:00:1a:cd:cc:f9:4a:
                    bf:4d:84:3b:70:cd:7d:90:23:5a:4a:b9:00:70:5c:
                    5f:f1:9d:58:b3:2a:74:45:b0:28:b7:e0:0f:dd:e4:
                    c0:66:cb:c5:82:15:8c:01:9f:d3:36:7e:e5:00:d7:
                    a5:44:2f:fa:e0:2e:d6:30:e0:ac:8c:47:80:f6:f2:
                    1b:41:e4:ed:dd:c4:28:f1:f2:92:38:0f:f9:eb:c9:
                    14:50:c8:9b:27:b0:a0:94:9c:bc:52:e2:e0:b1:62:
                    c1:72:d2:a5:e2:2c:29:71:df:25:aa:b9:c3:cc:c8:
                    b4:b3:a0:c0:84:a5:6c:09:87:e1:cb:e2:0a:73:1d:
                    90:b0:86:9c:51:f1:17:21:69:22:c3:b3:ad:d7:34:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F9:4E:EB:F4:37:28:18:6E:34:55:C2:6E:1A:39:47:76:2B:1D:03
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3138362e39362e36342e302f32302d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:0b:e9:d2:32:46:5a:4a:a7:65:b0:fd:69:2e:e9:33:18:4e:
         79:87:e4:d5:3f:41:60:67:98:9d:1b:5d:9f:c6:da:cc:85:0b:
         dc:28:63:10:4c:7f:0f:ef:b0:ac:d4:01:78:a0:23:a5:42:12:
         e9:ed:e6:38:a0:55:b4:f4:2e:b5:a1:ae:36:1e:bb:a1:b3:8b:
         2a:59:71:11:6e:9c:1d:1a:1c:fa:8f:aa:36:9f:0f:58:42:a0:
         50:57:f8:55:b3:32:3d:ae:c8:90:4b:9c:cf:7f:e9:8a:6a:ab:
         d6:36:41:3c:d7:d9:a6:8f:21:7c:27:21:2e:8d:65:24:dc:b2:
         08:0b:a6:49:69:f3:50:1d:3b:e6:37:ae:d5:12:52:f0:a8:f0:
         d8:52:50:94:8d:60:d4:03:60:b4:9a:cb:cd:e4:25:e2:a7:90:
         3b:37:53:2d:8e:72:58:e3:e8:99:47:b3:d2:57:37:f7:30:79:
         2a:f0:64:f4:a1:24:48:d6:98:96:f7:28:64:b1:a9:f5:a4:74:
         4e:8f:42:b9:98:f1:bd:c3:f3:06:8a:b7:e6:86:0d:d6:50:98:
         a9:e5:ee:95:60:36:50:76:75:a3:c0:55:58:5f:9a:31:e0:19:
         90:22:0b:16:42:12:be:36:a8:ec:9d:a7:27:74:8a:79:63:65:
         71:d6:f1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:54 2025 by rpki-client