Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3136352e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3136352e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          aGMHLm0aY3Ye1quAGnzvEzjuw7gibEcsTeb3E2gXerw=
Subject key identifier:   BF:14:6D:2E:67:06:ED:9D:E6:EB:88:B4:BC:E3:3B:0B:00:4B:A6:90
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       4419100469A7E85616709CCF6CE2FAA5694277D4
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3136352e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 04 Feb 2025 20:03:50 +0000
ROA not before:           Tue 04 Feb 2025 19:58:50 +0000
ROA not after:            Tue 03 Feb 2026 20:03:50 +0000
asID:                     22927
IP address blocks:        186.143.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:19:10:04:69:a7:e8:56:16:70:9c:cf:6c:e2:fa:a5:69:42:77:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:50 2025 GMT
            Not After : Feb  3 20:03:50 2026 GMT
        Subject: CN=BF146D2E6706ED9DE6EB88B4BCE33B0B004BA690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:95:1a:21:40:a1:7e:ee:78:7d:71:16:97:
                    27:21:a4:04:19:60:aa:e4:09:e7:e7:9c:47:35:22:
                    77:4b:81:6a:a2:72:63:07:83:89:5b:05:9b:33:54:
                    43:6f:ff:99:d1:98:cc:41:eb:91:09:7c:4a:22:f2:
                    4a:7f:84:85:51:d5:5f:cd:58:0b:a0:87:1b:83:b7:
                    3c:a7:ee:0d:15:f4:7d:08:4e:77:e8:87:3a:aa:c5:
                    85:01:ba:10:29:38:f8:d7:29:9c:70:1a:f5:6b:95:
                    61:1a:7f:27:6e:1b:a4:fa:b6:f0:12:5d:94:60:fd:
                    66:68:29:e1:5d:4a:40:a6:89:11:42:08:59:b3:8e:
                    72:2d:23:d5:2a:5c:a8:5f:a2:19:e1:02:26:6e:cd:
                    5c:b1:e4:6d:23:00:c6:f7:7b:4c:bd:0f:cd:8c:51:
                    6f:19:fd:32:ef:ef:20:03:70:21:68:76:4c:63:d8:
                    c7:17:0e:b1:51:97:e3:89:cd:eb:0b:93:11:54:ab:
                    df:ab:f2:96:8b:91:1e:ed:c0:a9:59:7c:db:3f:37:
                    a1:5b:5e:12:1d:88:be:12:d6:c2:bb:ec:ba:75:c0:
                    9e:86:46:e6:1d:b0:c5:4e:78:a8:56:48:e3:e2:92:
                    a2:de:9e:22:9c:56:cd:91:18:5e:18:fc:96:b7:bc:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:14:6D:2E:67:06:ED:9D:E6:EB:88:B4:BC:E3:3B:0B:00:4B:A6:90
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3136352e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:b8:68:9b:98:c7:ed:15:4d:d5:de:9a:bf:e4:7b:14:36:b2:
         a3:bc:f4:f9:39:7c:e0:cf:28:92:da:87:39:d6:94:92:90:ab:
         58:e2:7c:b6:cd:4f:88:d2:1a:00:89:6c:99:65:79:dd:2d:b6:
         51:5a:97:a0:2d:c7:9c:f0:02:91:a5:cb:1b:5d:ca:7b:9e:a3:
         fe:48:97:88:ba:5f:f2:29:39:69:9f:6d:0a:ff:13:b1:68:84:
         36:30:31:0a:af:50:d2:de:d5:3b:b2:45:fd:72:03:60:c5:fd:
         73:62:2f:70:d0:2b:bc:01:77:88:44:90:bb:3a:66:a3:bd:b1:
         46:91:40:45:bc:5a:de:79:e2:ad:af:62:b3:eb:7b:28:0a:39:
         c5:3e:06:48:1d:ba:91:f9:5d:98:3d:37:b2:5c:c8:ed:9a:fb:
         cb:29:db:5b:06:d4:5c:2c:91:4d:cc:f4:2f:c8:2b:12:ec:88:
         2d:60:dd:eb:3d:15:fd:e2:ed:9e:5c:56:55:04:40:d0:f4:7d:
         cc:85:10:1c:1b:63:56:5f:95:63:1e:a6:53:08:21:33:a9:31:
         27:32:c6:31:90:c5:ca:1f:a7:c2:c1:a2:eb:25:81:e6:c9:58:
         f6:3b:7f:bf:30:08:49:1f:11:c6:1f:ef:a9:be:7b:2f:5b:de:
         82:2a:49:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:51 2025 by rpki-client