Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3138362e312e302e302f31382d3234203d3e203138383430.roa
File:                     3138362e312e302e302f31382d3234203d3e203138383430.roa (raw, json)
Hash identifier:          +u4oEiw0ugjn++zJewv0ccz6uaCxw+TLBl/H+eVsPoQ=
Subject key identifier:   C9:91:32:AA:C2:39:48:96:D7:83:CC:75:7E:8E:AC:5A:39:E1:A5:3B
Certificate issuer:       /CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
Certificate serial:       56021E23062D028518BAF660B1D446084BA0EB72
Authority key identifier: 0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3138362e312e302e302f31382d3234203d3e203138383430.roa
Signing time:             Tue 04 Feb 2025 18:31:47 +0000
ROA not before:           Tue 04 Feb 2025 18:26:47 +0000
ROA not after:            Tue 03 Feb 2026 18:31:47 +0000
asID:                     18840
IP address blocks:        186.1.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:02:1e:23:06:2d:02:85:18:ba:f6:60:b1:d4:46:08:4b:a0:eb:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
        Validity
            Not Before: Feb  4 18:26:47 2025 GMT
            Not After : Feb  3 18:31:47 2026 GMT
        Subject: CN=C99132AAC2394896D783CC757E8EAC5A39E1A53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:a2:25:3b:1e:25:a8:54:e9:e8:da:c6:5b:
                    4b:da:bd:d9:26:55:38:cd:cf:ad:55:bd:80:25:c9:
                    03:95:64:e8:af:36:57:4c:78:8d:85:e4:1a:4f:8a:
                    bc:5f:a3:a4:fb:cb:af:5e:41:c5:56:ae:07:b5:5b:
                    9f:7b:07:12:15:b7:b9:ca:74:ff:45:43:53:00:62:
                    0d:1a:88:8e:f9:3a:9e:32:07:71:4f:57:85:08:70:
                    49:5c:e6:b0:fc:0e:c5:37:37:a5:36:19:8c:90:5c:
                    5f:2b:b5:6e:ae:c1:76:1f:ed:49:cd:ba:b2:7f:c8:
                    12:35:74:89:16:26:d0:6f:1c:7c:17:16:cc:a0:c2:
                    bd:c3:e8:21:bd:f4:37:3b:12:1f:97:be:13:2a:a8:
                    6d:c3:cf:13:db:7e:d9:4f:dd:bc:94:00:38:99:94:
                    96:47:64:18:df:89:28:10:26:4d:6f:24:78:6a:4b:
                    26:82:9c:1c:f0:98:33:3f:ee:43:3a:19:ed:15:2b:
                    dc:25:8f:d7:aa:d3:89:7a:fd:9b:0b:3b:ca:26:44:
                    41:05:3b:02:db:f1:09:ab:35:73:f4:7c:a4:a5:92:
                    89:25:a6:84:86:42:26:05:5f:07:e5:20:d2:f2:c9:
                    96:0a:5a:c9:ff:34:34:38:35:58:e0:3c:f3:8c:db:
                    ce:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:91:32:AA:C2:39:48:96:D7:83:CC:75:7E:8E:AC:5A:39:E1:A5:3B
            X509v3 Authority Key Identifier:
                keyid:0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3138362e312e302e302f31382d3234203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         05:d7:c6:1e:95:fe:f7:80:98:13:98:af:6c:06:e9:f2:7e:3e:
         cc:e6:0b:b3:0e:30:22:4e:67:aa:b3:86:09:65:56:16:da:fd:
         8e:b4:68:8c:c9:f5:b8:f2:67:b1:8b:50:f0:03:50:8a:fa:0b:
         5d:2a:bb:7c:7b:ab:2d:75:e9:01:e9:14:c6:46:12:84:16:26:
         73:84:39:42:0c:52:6f:d9:69:b3:bb:5c:2d:47:d1:15:b6:9a:
         86:25:94:da:a9:f0:41:3b:59:31:c9:4f:c3:0c:ec:d3:e2:6e:
         e5:93:0c:af:f1:8b:73:bc:f0:d7:c8:d8:28:da:d3:49:37:0c:
         fe:67:50:a0:09:55:44:78:79:9b:22:59:6b:4a:28:c7:a6:21:
         41:1e:99:36:14:80:2b:68:5c:da:45:f5:64:5a:a0:6a:b3:a7:
         63:92:ec:c2:85:be:c6:59:cb:91:7a:fc:fb:5e:00:da:d6:cc:
         72:03:4c:51:35:e0:10:ab:5c:dc:fc:cf:a0:b3:fe:c0:20:17:
         b4:3f:72:58:cf:4c:74:86:f4:b0:02:19:49:59:4e:68:f7:6f:
         69:3a:c4:94:de:7d:b1:a4:23:d8:38:d5:d5:2c:54:9a:11:82:
         15:de:ae:32:7e:e6:b1:3b:e6:ac:14:ee:b3:3b:7d:db:c1:fc:
         9c:60:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:20 2025 by rpki-client