Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3233312e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3233312e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          FEIFOX6Z8SwWUC7e1oHd8fuYx51Kf8SWe2VEHnXgWiE=
Subject key identifier:   98:1F:58:0A:DA:EF:43:7B:69:70:54:99:9A:29:94:DD:06:14:0A:E4
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       06611E03048C4DC31092E555D456033E8E383C25
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3233312e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 04 Feb 2025 20:03:58 +0000
ROA not before:           Tue 04 Feb 2025 19:58:58 +0000
ROA not after:            Tue 03 Feb 2026 20:03:58 +0000
asID:                     22927
IP address blocks:        186.141.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:61:1e:03:04:8c:4d:c3:10:92:e5:55:d4:56:03:3e:8e:38:3c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:58 2025 GMT
            Not After : Feb  3 20:03:58 2026 GMT
        Subject: CN=981F580ADAEF437B697054999A2994DD06140AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:43:24:76:0a:9c:0c:e8:6a:47:8b:9c:eb:
                    02:d7:51:a0:9c:77:34:df:69:2f:03:60:27:92:bd:
                    ff:08:b6:03:d7:ff:a4:56:6a:a7:22:1d:d4:2c:fb:
                    42:9b:b0:b2:3d:9a:a0:c2:87:b3:74:b6:6f:f9:5e:
                    53:06:88:67:92:c5:48:0e:4f:89:19:1d:e5:6a:77:
                    14:ff:bb:86:a8:4d:ac:e4:9d:60:1d:4f:c4:98:1c:
                    13:76:ec:3c:3b:21:ff:c9:76:8f:64:78:c9:06:f4:
                    1a:10:9a:53:01:f5:5d:ba:dc:c5:ea:70:c4:1e:cc:
                    c0:f4:ae:0c:de:04:3b:74:53:cc:37:86:a2:80:55:
                    1a:a3:ff:0c:1b:9b:cd:5b:31:5d:b4:b6:c3:8b:30:
                    dd:f6:70:3f:5b:22:91:5a:ca:fa:6d:e5:8e:b2:12:
                    5d:80:43:17:cc:72:a0:ac:48:35:be:37:7e:94:17:
                    45:db:d4:f2:f1:33:08:3c:b0:1c:cf:5b:2e:7d:98:
                    c6:b4:e7:64:17:6f:7e:8d:ba:3e:c4:20:9d:fd:24:
                    2e:f1:f2:b6:26:4c:64:74:bc:bb:6b:42:74:93:57:
                    30:5f:59:e8:20:3e:24:fe:16:3c:55:6a:a6:0f:5b:
                    3b:41:49:86:70:60:bd:47:a8:f0:bd:30:06:f8:18:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1F:58:0A:DA:EF:43:7B:69:70:54:99:9A:29:94:DD:06:14:0A:E4
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3233312e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:80:60:8a:80:e0:7c:0e:f6:f6:39:a1:08:ca:2d:f6:db:d4:
         aa:e1:3e:8d:5a:e7:b0:62:20:3b:aa:05:2a:9a:75:37:4a:c7:
         01:5e:f7:1a:17:ed:1c:b3:ad:bd:2e:2a:e1:11:12:14:fa:67:
         81:b3:0b:de:98:94:58:51:4c:00:73:8f:33:e6:9a:d2:f5:52:
         7e:f8:38:6f:a8:b6:51:8b:04:4f:e4:2f:f6:ea:0d:8f:ff:67:
         2a:a5:1b:56:9e:7a:b2:80:6d:ab:2b:4c:77:31:66:e1:15:fe:
         d9:eb:97:7c:2d:a4:34:bb:37:1c:55:62:09:bc:8e:c7:bc:7b:
         50:92:98:8d:75:15:5a:40:38:4e:38:ce:29:b6:ed:cb:72:0f:
         60:bf:7a:a0:4d:19:d6:9f:72:7c:e0:c1:ed:5c:ce:f3:f8:7c:
         25:ec:c2:a3:68:f2:a9:bf:70:e3:9f:7a:df:39:c9:3d:d6:f8:
         4b:2b:d0:90:c7:e4:1c:82:d4:a8:2c:3d:0c:ae:04:c3:6f:33:
         7e:dc:48:6c:ad:76:32:a9:25:0f:29:ef:2b:df:49:d6:89:92:
         b4:e3:45:00:ed:d5:0c:73:53:65:7c:0d:1d:da:ec:c6:32:ea:
         a6:01:96:c2:ef:9e:df:51:18:21:9f:51:88:3c:02:36:69:cd:
         2b:1e:d3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:25 2025 by rpki-client