Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3138362e3134382e3132302e302f32312d3234203d3e203532343733.roa
File:                     3138362e3134382e3132302e302f32312d3234203d3e203532343733.roa (raw, json)
Hash identifier:          SyWnl7O8aN7AQoZjnlTrET2hbMcucCC+bA16wzpzH88=
Subject key identifier:   46:75:B2:45:64:3D:C4:3C:A9:7E:26:B2:9F:74:54:80:BC:88:2F:9F
Certificate issuer:       /CN=D7363F403DF6F6AE0C574D827665A0235A1DED01
Certificate serial:       4304DB164D6AAC5C082D7EB94FC8F7B0128CEE98
Authority key identifier: D7:36:3F:40:3D:F6:F6:AE:0C:57:4D:82:76:65:A0:23:5A:1D:ED:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3138362e3134382e3132302e302f32312d3234203d3e203532343733.roa
Signing time:             Tue 04 Feb 2025 18:34:39 +0000
ROA not before:           Tue 04 Feb 2025 18:29:39 +0000
ROA not after:            Tue 03 Feb 2026 18:34:39 +0000
asID:                     52473
IP address blocks:        186.148.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 18:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:04:db:16:4d:6a:ac:5c:08:2d:7e:b9:4f:c8:f7:b0:12:8c:ee:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7363F403DF6F6AE0C574D827665A0235A1DED01
        Validity
            Not Before: Feb  4 18:29:39 2025 GMT
            Not After : Feb  3 18:34:39 2026 GMT
        Subject: CN=4675B245643DC43CA97E26B29F745480BC882F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1e:42:ca:86:61:a7:2a:48:64:62:04:0d:ce:
                    30:e6:61:a5:6e:87:9c:77:33:6c:5b:75:83:16:41:
                    75:bc:87:b7:ea:cc:f3:cb:7e:b0:3c:1a:a7:4c:12:
                    21:d7:83:92:15:15:76:75:f8:da:08:6b:f6:2c:98:
                    21:c4:d2:7a:45:44:4c:e3:39:67:8f:5f:b2:d6:03:
                    a5:75:17:2c:f3:95:ca:fe:a9:0a:d8:12:f5:91:7a:
                    85:dc:c8:a0:0e:2a:a8:b8:b0:e8:aa:6a:ed:dc:27:
                    9d:40:2f:5e:09:13:47:2b:9d:10:d5:48:b1:30:0a:
                    de:60:a5:31:bb:22:39:55:5a:1f:6e:26:09:5b:d3:
                    53:ec:40:db:6e:c5:97:07:11:b6:3c:42:9c:f5:7c:
                    61:fb:26:31:69:b2:ea:77:94:aa:25:f2:c0:ee:e2:
                    35:46:b0:5a:16:8c:7d:04:d4:0b:d0:80:80:10:fc:
                    58:fb:b3:ef:7b:d7:ff:e8:b5:46:8b:19:41:e7:38:
                    76:72:9d:bd:ec:cf:d4:9e:fa:5e:b0:c9:a6:a0:80:
                    08:87:c9:95:1b:2a:07:d2:26:61:c0:97:dc:37:9c:
                    be:ed:78:11:a9:c6:ef:24:6e:02:ef:ab:8a:52:e9:
                    87:de:85:e7:3c:27:36:de:21:ed:73:fb:4f:26:66:
                    58:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:75:B2:45:64:3D:C4:3C:A9:7E:26:B2:9F:74:54:80:BC:88:2F:9F
            X509v3 Authority Key Identifier:
                keyid:D7:36:3F:40:3D:F6:F6:AE:0C:57:4D:82:76:65:A0:23:5A:1D:ED:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3138362e3134382e3132302e302f32312d3234203d3e203532343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:80:1b:c8:69:8b:dd:29:40:9d:90:4a:f9:db:50:ab:d8:a5:
         3e:8e:60:fc:4f:6e:fe:3a:be:b8:89:a4:d8:ed:af:c8:5f:09:
         9f:4c:8d:02:b8:b0:4f:68:45:bd:11:f7:53:10:b9:33:e3:d0:
         dd:a5:3a:74:e4:0a:9c:6f:99:1f:36:01:68:ce:ad:27:32:66:
         d6:e6:e9:72:f3:05:65:da:b1:b5:f6:4e:a3:f8:80:f7:ae:a0:
         2a:ae:14:88:44:60:e4:11:ef:0f:0f:8b:84:a4:fe:7c:7e:8d:
         06:f1:c3:2f:6b:5d:40:b3:ce:64:90:5a:42:f1:90:5a:c3:e6:
         31:98:e9:73:fc:6f:0b:e1:a2:16:7c:25:83:3a:5d:13:fa:b6:
         7c:3f:fc:14:e2:3a:2f:fe:c5:f7:93:84:10:9e:cb:2c:69:31:
         ff:02:e3:10:cf:a8:9d:a3:f5:ea:36:27:9d:0f:a9:9a:af:c5:
         5f:62:6a:3c:af:f8:78:13:fd:8f:2e:00:21:02:1a:1b:b7:02:
         c3:08:4d:42:ae:6d:c8:54:b6:35:93:6f:2f:aa:93:22:fe:31:
         d6:f7:6b:7d:37:27:28:b2:f8:dc:1d:47:27:55:02:25:cf:c6:
         de:73:ee:b8:6c:73:50:1b:b5:f1:24:43:31:69:f3:26:f3:74:
         05:4a:cb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:08 2025 by rpki-client