Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232352e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3232352e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          7Z66H/HOP0+atpfeVztpe+hbO1WNNxVRf82tKeT3YXY=
Subject key identifier:   A4:91:26:CE:2B:15:78:FC:E5:58:D1:91:FF:DB:8B:EE:9D:89:AC:1F
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       151ACF673A608A05F23D739A457B8189B93A00D9
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232352e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 04 Feb 2025 20:03:55 +0000
ROA not before:           Tue 04 Feb 2025 19:58:55 +0000
ROA not after:            Tue 03 Feb 2026 20:03:55 +0000
asID:                     22927
IP address blocks:        186.141.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1a:cf:67:3a:60:8a:05:f2:3d:73:9a:45:7b:81:89:b9:3a:00:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:55 2025 GMT
            Not After : Feb  3 20:03:55 2026 GMT
        Subject: CN=A49126CE2B1578FCE558D191FFDB8BEE9D89AC1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:74:85:2c:11:14:12:ab:ff:1d:66:5c:13:
                    45:15:65:43:34:07:6e:f7:20:9e:d9:4d:da:3d:75:
                    a3:e2:a9:4b:8c:96:a5:55:14:54:03:2b:bd:1c:75:
                    d3:8e:6f:b7:9f:ec:62:e1:2e:92:5f:65:79:cb:c4:
                    58:6d:09:b2:f8:f5:6b:44:f7:4b:b0:2f:cf:10:e6:
                    fe:8e:57:06:bd:52:4f:f5:d6:b5:5f:81:af:4f:c5:
                    ab:d2:f3:bb:30:97:bc:5a:eb:69:5e:ad:15:dd:88:
                    1e:bb:f7:36:c8:a0:cf:c4:c7:1a:d4:d8:61:0a:25:
                    31:5d:99:e4:d3:0b:07:a9:45:2b:25:92:be:f9:46:
                    91:bc:78:b1:4a:9f:20:f7:81:00:aa:1f:a5:2c:1e:
                    83:60:49:50:2b:9f:dd:6d:ff:bf:3d:e2:91:52:a4:
                    e9:56:f4:d2:51:2f:cf:60:bc:eb:1a:6f:90:15:7b:
                    32:ca:bd:9d:f7:f6:b0:7d:f7:ce:8c:44:84:cb:16:
                    f3:ac:5b:ec:49:9f:e4:d9:f4:98:fa:4e:22:54:75:
                    6d:5d:22:46:1b:73:d5:a1:27:36:88:8a:ca:d6:76:
                    02:a1:65:61:9c:5d:1f:10:83:f3:45:08:b5:54:36:
                    09:d9:df:37:ac:49:8c:5c:e5:8a:3f:fb:d0:a2:df:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:91:26:CE:2B:15:78:FC:E5:58:D1:91:FF:DB:8B:EE:9D:89:AC:1F
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232352e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:35:5d:70:a8:92:85:96:66:1c:65:1d:30:29:01:63:77:
         e1:5c:75:d7:4e:9c:9b:c6:33:ca:58:4e:9c:ff:b1:2f:0b:c0:
         6e:46:f0:44:8e:74:ba:07:83:c7:c0:9c:bb:49:2f:f4:89:f7:
         00:5d:2e:80:f8:7b:51:cf:ac:94:22:3b:e2:bb:d3:a7:9a:97:
         1a:30:12:46:ca:e2:ec:29:54:b2:ba:ca:34:bb:77:e8:7e:08:
         10:40:c8:77:19:fd:3a:a1:d1:a0:b7:3a:6d:3e:00:54:e1:60:
         51:9a:37:f3:8e:76:3d:e6:19:1d:06:31:06:a1:de:8c:bd:b0:
         c1:f9:77:8d:11:b9:7b:05:35:81:f0:61:42:89:9b:37:35:3d:
         06:af:a6:42:c0:41:7c:89:9c:77:06:69:83:58:17:02:bd:39:
         70:68:e0:7c:47:4f:20:2c:d0:81:a7:09:a3:6b:06:cb:65:54:
         b0:1e:0b:47:45:70:86:60:95:9c:32:fa:9a:a6:b8:4a:17:22:
         92:65:d9:50:8c:6e:63:37:3b:ee:b9:b6:a1:53:ae:99:12:99:
         58:59:6b:20:d5:f2:d3:d5:87:72:6a:6b:98:93:37:a6:00:53:
         a6:ce:eb:0d:b2:bd:5b:1e:85:01:9c:ed:56:dc:9b:0c:73:39:
         1e:5a:e6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:12 2025 by rpki-client