Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132352e302f32342d3234203d3e203532333731.roa
File:                     3138362e3135392e3132352e302f32342d3234203d3e203532333731.roa (raw, json)
Hash identifier:          8+boctzqfyfnVa1UI5DKkkyWZd7W2yDzp24h4BvgrKM=
Subject key identifier:   C2:5F:F7:35:10:20:2C:39:A4:71:6B:2D:9F:43:3B:05:C7:5F:B2:09
Certificate issuer:       /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Certificate serial:       79D8EB696213CE30D2CD6D79A6DA249E78C73606
Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132352e302f32342d3234203d3e203532333731.roa
Signing time:             Tue 25 Feb 2025 14:35:00 +0000
ROA not before:           Tue 25 Feb 2025 14:30:00 +0000
ROA not after:            Tue 24 Feb 2026 14:35:00 +0000
asID:                     52371
IP address blocks:        186.159.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d8:eb:69:62:13:ce:30:d2:cd:6d:79:a6:da:24:9e:78:c7:36:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
        Validity
            Not Before: Feb 25 14:30:00 2025 GMT
            Not After : Feb 24 14:35:00 2026 GMT
        Subject: CN=C25FF73510202C39A4716B2D9F433B05C75FB209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:6d:03:02:72:37:6a:e0:e4:5a:c6:33:c6:
                    25:ab:f2:54:45:fa:6d:7b:66:bf:93:6f:6c:a2:38:
                    fe:a9:65:23:3f:1f:04:2f:a0:e3:15:df:de:76:59:
                    27:2c:07:fb:59:2b:3e:5d:0b:04:51:1b:47:62:69:
                    70:13:32:8c:89:6b:ec:ed:68:71:82:35:f6:bf:0c:
                    07:76:60:6b:e3:b6:97:45:1a:46:c1:a0:b2:3b:73:
                    14:7f:3f:cd:a8:6e:e6:1d:b0:7a:cf:32:d8:25:92:
                    dc:65:ea:d3:3d:0a:06:1f:6e:53:3d:2e:60:2a:ad:
                    cf:4e:ff:0b:4c:06:d9:92:f1:00:24:7f:b5:1b:41:
                    a8:8f:45:b7:b4:5e:5d:96:8f:26:e3:03:39:a9:01:
                    8c:b7:b5:2d:f5:e1:6a:16:24:47:cf:e2:0e:31:e8:
                    a4:a9:ee:98:df:7d:de:d1:a6:38:db:3d:af:79:44:
                    a8:ed:0c:8c:5c:e8:e5:76:98:66:37:84:02:c0:07:
                    06:5d:02:b5:d0:09:97:fc:05:75:40:9c:a9:fa:da:
                    84:7c:6e:11:ab:65:fd:2c:38:32:46:71:0c:ec:5e:
                    84:4b:9c:19:35:8a:e8:89:51:43:df:3b:a3:18:70:
                    61:b2:b0:e5:2d:98:7a:37:b4:0d:73:0d:59:d0:cb:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5F:F7:35:10:20:2C:39:A4:71:6B:2D:9F:43:3B:05:C7:5F:B2:09
            X509v3 Authority Key Identifier:
                keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132352e302f32342d3234203d3e203532333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:d7:d3:25:20:ff:ff:ed:43:86:21:52:bd:e1:ff:0f:67:
         16:2c:f7:b9:c7:60:82:76:74:d9:d7:03:77:d7:e8:19:ed:8b:
         0d:be:15:13:3c:f2:34:25:1b:87:99:45:da:d1:3f:36:3e:6d:
         e2:8f:79:ef:9c:da:80:89:74:c9:34:7d:6b:d3:80:d0:9d:a2:
         97:f1:a3:3d:dc:fb:ba:62:71:d5:8b:5c:47:6e:76:d8:d3:59:
         68:06:0a:52:94:1c:27:2b:e1:08:db:93:55:b8:35:14:ab:5a:
         39:03:90:b8:6a:a0:67:9c:d6:9a:4a:ce:2e:04:05:3a:c0:d3:
         ca:5a:57:76:01:43:0d:85:fe:d4:78:e3:70:48:58:db:f2:fb:
         cd:25:ef:88:23:eb:6b:93:16:b4:fb:89:25:22:b9:0c:90:40:
         97:b0:9b:cc:0e:c6:46:bb:49:a9:83:61:48:6d:b9:4a:be:a1:
         f1:4e:6d:4f:86:18:d7:69:95:0d:70:70:f4:c6:93:fc:2e:94:
         28:9c:03:e1:bd:13:40:0b:71:b3:75:e9:32:a8:9a:6a:e9:25:
         0e:2d:ca:ff:90:aa:ef:2f:0a:ab:44:8d:d2:12:0e:7b:ba:9c:
         10:9d:5f:38:92:1e:c3:4d:7c:4d:eb:e1:01:ee:58:e8:df:42:
         45:ca:e8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:14:13 2025 by rpki-client