Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136362e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3136362e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          2wgRACzQnSd88wy7iM3t6TiGVVSyH5yoS7UsFfZVsHQ=
Subject key identifier:   DD:94:B5:F7:E5:6B:A6:BE:99:7E:55:06:BC:2F:31:C2:F4:40:7E:F0
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       42F7E477EED49F486CB66524B5D22F64AAA625D0
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136362e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 04 Feb 2025 20:03:57 +0000
ROA not before:           Tue 04 Feb 2025 19:58:57 +0000
ROA not after:            Tue 03 Feb 2026 20:03:57 +0000
asID:                     22927
IP address blocks:        186.141.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f7:e4:77:ee:d4:9f:48:6c:b6:65:24:b5:d2:2f:64:aa:a6:25:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:57 2025 GMT
            Not After : Feb  3 20:03:57 2026 GMT
        Subject: CN=DD94B5F7E56BA6BE997E5506BC2F31C2F4407EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:58:93:0b:fa:20:23:73:92:b1:19:ab:2c:85:
                    90:e6:ae:cb:d9:5a:e8:b6:26:86:d5:78:32:e3:7b:
                    68:da:32:d3:d8:c4:05:aa:75:e6:40:5a:73:3d:43:
                    44:f1:a4:c1:d1:3c:d2:e5:08:16:73:e4:87:33:66:
                    a3:3b:76:e4:e1:42:01:45:37:c6:24:2a:8e:bb:f6:
                    84:c7:27:fa:86:43:eb:39:5e:c3:90:fc:c3:72:77:
                    0a:f0:83:16:c7:0c:00:fb:78:f5:ec:69:b6:19:3b:
                    ab:ca:e2:a5:68:74:cd:c5:05:fc:11:3c:95:72:14:
                    55:74:d7:df:ca:25:47:ed:c8:2e:59:b9:db:2c:07:
                    c8:c5:db:77:74:2c:36:51:8e:cc:30:7d:85:c7:b6:
                    d2:8a:ea:68:61:f6:f7:15:0c:af:8d:32:f0:0f:8a:
                    89:72:6e:5d:f2:6c:d4:92:e8:a0:31:f0:82:ee:76:
                    22:a1:ed:0a:99:e5:1a:e4:47:a1:f3:28:b9:42:d3:
                    11:0c:5a:ea:e4:99:e1:77:39:40:50:44:42:ba:62:
                    42:a1:fb:19:87:f9:28:f6:01:a6:a5:8b:9c:bb:01:
                    a4:04:ab:96:d0:65:f4:fd:cb:53:06:45:23:f6:6e:
                    a1:83:61:aa:d8:e1:69:d2:6d:81:ba:8a:a0:83:ee:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:94:B5:F7:E5:6B:A6:BE:99:7E:55:06:BC:2F:31:C2:F4:40:7E:F0
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136362e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:82:dd:58:12:42:81:ec:91:53:47:f5:53:03:cf:a2:04:bd:
         67:ae:9e:62:9c:e1:ef:b5:3d:2d:d0:23:dd:1a:f3:5a:f7:aa:
         2a:88:2b:a6:49:14:28:f3:a5:e8:33:45:34:09:c4:c1:0b:de:
         34:77:fa:ba:b0:94:93:9e:9f:d1:9c:88:32:c1:8c:53:d2:0b:
         95:4d:89:72:86:c7:d8:01:bc:ae:7b:95:a8:14:ac:4c:24:b3:
         59:76:0e:ab:f9:ed:b8:5d:27:c5:75:62:3f:ed:a1:f6:4c:47:
         2e:a7:37:cf:49:21:24:d4:0a:7d:b2:34:19:b9:ca:8d:32:5f:
         d0:a1:ac:22:ce:5a:0f:04:5d:45:c0:65:dd:24:f6:a5:62:ec:
         35:c7:19:57:a3:22:8d:f5:72:4d:47:09:1c:3e:2d:81:3a:1d:
         f6:9d:54:3c:21:c3:d1:3c:1b:fd:45:79:84:7b:0c:e5:f7:3b:
         01:78:86:a5:d2:c3:3f:b1:fa:51:a2:60:e2:42:93:20:1d:0e:
         3d:1d:79:a4:f5:60:5c:3f:fe:78:81:e9:19:fb:d1:22:95:6e:
         35:19:81:0c:5a:13:55:86:ba:12:f9:52:ce:2b:1e:92:d6:97:
         b3:9a:53:9e:dd:11:82:0f:79:9a:2e:2a:53:08:72:d6:6a:21:
         fe:3a:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:47 2025 by rpki-client