Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34322e302f32342d3234203d3e20323639393739.roa
File:                     3138372e302e34322e302f32342d3234203d3e20323639393739.roa (raw, json)
Hash identifier:          wtAxqOjK3PyTERr78jhjss3YnctgykGRUrtA+IxbleI=
Subject key identifier:   3C:83:F2:B9:BF:5E:1C:B1:53:35:3E:5E:C5:BD:DF:1D:A9:71:C8:6F
Certificate issuer:       /CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
Certificate serial:       40496AB62FC805A9328E3B91AFA27D17C94D557B
Authority key identifier: 78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34322e302f32342d3234203d3e20323639393739.roa
Signing time:             Tue 07 Jan 2025 14:45:01 +0000
ROA not before:           Tue 07 Jan 2025 14:40:01 +0000
ROA not after:            Tue 06 Jan 2026 14:45:01 +0000
asID:                     269979
IP address blocks:        187.0.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:49:6a:b6:2f:c8:05:a9:32:8e:3b:91:af:a2:7d:17:c9:4d:55:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7836A6382B609AEA7F412DBFA634FA3E775D333F
        Validity
            Not Before: Jan  7 14:40:01 2025 GMT
            Not After : Jan  6 14:45:01 2026 GMT
        Subject: CN=3C83F2B9BF5E1CB153353E5EC5BDDF1DA971C86F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:52:05:7e:08:0d:87:56:35:12:c8:02:92:
                    3a:ad:e3:7b:c6:30:c4:77:50:3f:86:4f:67:08:b5:
                    01:92:dc:e8:ef:41:dc:cf:27:35:c4:5a:4a:53:5e:
                    cc:04:1a:51:46:81:fa:f8:ac:8f:db:b4:5f:35:e1:
                    9c:70:fc:38:ea:21:bd:12:eb:d8:b6:4e:0b:38:18:
                    be:f6:02:23:36:9a:c6:90:32:a8:73:13:63:a6:a5:
                    6f:72:e5:73:d6:4d:56:38:0e:38:1a:fa:bd:e7:0c:
                    12:e3:91:26:36:27:52:03:b7:41:01:60:53:5d:7a:
                    56:fe:42:da:d8:88:05:e0:66:5d:99:bc:87:13:ab:
                    27:3f:a6:f5:4c:d8:ea:df:69:8e:a1:c5:4c:a3:80:
                    d3:a0:77:26:1b:6d:c1:d9:a6:0f:3d:54:84:f0:77:
                    0f:d1:6d:31:ae:1c:f4:4d:e7:ea:d4:a1:ed:8b:85:
                    2a:c1:f8:a6:ee:22:d8:5d:5c:e2:4b:11:2b:06:a8:
                    58:0d:b6:26:9d:93:a5:4c:90:0c:cc:3c:4c:42:ad:
                    1e:fa:45:59:36:09:c6:dc:49:7b:f6:22:75:a7:56:
                    36:e6:80:89:f0:06:ba:3d:b9:f1:45:df:7d:04:8d:
                    2d:81:13:8d:55:b1:7c:1d:d0:76:61:ac:73:a8:5b:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:83:F2:B9:BF:5E:1C:B1:53:35:3E:5E:C5:BD:DF:1D:A9:71:C8:6F
            X509v3 Authority Key Identifier:
                keyid:78:36:A6:38:2B:60:9A:EA:7F:41:2D:BF:A6:34:FA:3E:77:5D:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7836A6382B609AEA7F412DBFA634FA3E775D333F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DA17D066666E88F36F1F1E4191AA3BA09026E81A6332933325E6BED519CB850/0/3138372e302e34322e302f32342d3234203d3e20323639393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:c3:7b:76:64:7e:8a:21:bd:c9:9d:ad:82:ff:42:40:ea:a3:
         72:4c:78:e0:af:8f:8f:9c:79:06:de:2e:b1:a3:fb:cf:87:69:
         32:a8:68:16:d6:7b:c9:94:be:5f:96:54:5e:3e:20:77:cd:c8:
         2c:40:a5:da:54:06:02:a2:f1:ab:60:96:5b:94:fe:5a:44:31:
         d9:a8:3b:5a:af:51:1d:05:2c:c0:b0:a9:9d:d8:a0:2e:76:30:
         17:bb:00:fa:b2:60:30:fa:0d:e8:a5:73:b1:19:f7:5a:f8:88:
         85:8f:45:a1:d0:b5:0e:c6:b0:a8:96:07:e0:c0:3a:02:2c:e8:
         f5:aa:eb:14:ae:df:88:ad:62:4c:c3:49:da:3a:64:e2:c9:bf:
         da:51:fe:53:bb:08:17:4e:64:ff:1a:09:c9:0c:da:d5:0c:e9:
         0b:84:79:30:63:b2:5b:28:17:15:12:ff:59:a9:a4:3d:54:33:
         16:bb:a4:82:8a:24:50:2f:bc:60:8e:17:1a:a9:fc:76:41:83:
         91:aa:28:42:e8:57:19:73:74:bf:ce:f9:f3:50:cd:db:c4:a6:
         23:84:8b:b4:95:91:66:d9:fb:0f:75:fc:36:3e:5c:59:77:2b:
         f7:7a:0e:bc:6a:70:a5:10:8f:64:19:45:fb:9a:7e:66:79:c6:
         52:52:78:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:27:16 2025 by rpki-client