Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36362e302e302f31362d3234203d3e203134353232.roa
File:                     3138362e36362e302e302f31362d3234203d3e203134353232.roa (raw, json)
Hash identifier:          HcMqUke9gUKSTbJfzccbeRwPG2IVaPrmbEh+Hh4vm3c=
Subject key identifier:   DF:B4:81:AF:FF:2F:71:95:01:42:72:19:78:FE:D1:71:01:D7:24:0F
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       4764F232E73A652627D5001A5DDAF3D27E0BEF0E
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36362e302e302f31362d3234203d3e203134353232.roa
Signing time:             Tue 04 Feb 2025 20:08:41 +0000
ROA not before:           Tue 04 Feb 2025 20:03:41 +0000
ROA not after:            Tue 03 Feb 2026 20:08:41 +0000
asID:                     14522
IP address blocks:        186.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:64:f2:32:e7:3a:65:26:27:d5:00:1a:5d:da:f3:d2:7e:0b:ef:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Feb  4 20:03:41 2025 GMT
            Not After : Feb  3 20:08:41 2026 GMT
        Subject: CN=DFB481AFFF2F71950142721978FED17101D7240F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:ce:24:02:c0:6f:7e:d2:6a:83:5b:f2:5e:
                    cf:a8:5c:c8:8a:f8:95:59:89:fc:c1:53:39:11:b2:
                    45:ec:bf:c8:39:7e:22:a5:f9:01:2d:d2:da:00:f4:
                    d7:e3:1a:bb:a2:5b:ed:ec:b5:2c:60:50:c3:a6:e6:
                    78:83:a7:4a:a8:a9:aa:73:ed:dc:ec:c4:99:57:89:
                    5b:83:51:b5:dd:fd:4a:3d:d5:76:95:e3:da:ff:ef:
                    9c:f5:4f:78:23:b6:4b:1f:33:1b:a5:bb:2a:35:1b:
                    22:55:9c:f9:e0:5d:e6:68:aa:9b:b7:73:ef:fd:16:
                    c4:de:9a:cb:15:35:d8:18:5e:28:69:76:6c:70:62:
                    cc:f8:20:cb:fb:01:5f:8e:18:e1:71:5f:ba:17:57:
                    91:4c:14:25:2a:dd:a6:f2:0c:b2:6c:e1:c4:55:22:
                    87:c5:bc:c4:50:96:c5:89:c1:58:7a:61:8e:ab:1c:
                    76:7a:1e:0c:d2:01:8b:b7:0b:ae:35:dc:5e:f7:c9:
                    87:24:f7:82:f2:cc:47:da:fb:bd:cd:12:76:71:22:
                    39:4c:62:5a:77:02:ff:3f:41:a5:a2:d5:5b:36:2a:
                    b9:91:65:03:4e:7a:b7:31:9c:3c:48:9e:df:77:c7:
                    e8:b2:3a:62:e8:de:36:ed:0d:8d:fb:be:09:18:fb:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B4:81:AF:FF:2F:71:95:01:42:72:19:78:FE:D1:71:01:D7:24:0F
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36362e302e302f31362d3234203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         dd:e4:ec:c4:c0:37:34:fa:0b:4c:5a:a9:ee:b9:41:1e:22:fd:
         3d:5d:bd:98:d7:4d:78:0a:cb:ff:37:49:bf:65:f3:52:82:84:
         f1:ce:2a:e0:9f:51:e3:23:9e:b4:9f:98:46:fa:46:7f:1d:0c:
         65:a0:c2:bd:cd:e4:6a:cd:08:c7:71:8c:cd:eb:e7:5f:d3:cb:
         ec:ae:07:2c:7a:12:4c:d7:13:db:22:5d:f7:7e:ca:b4:38:33:
         d3:f0:c9:87:b1:42:39:6e:1b:49:e3:67:d8:9a:fe:6f:33:06:
         23:4f:1d:85:14:91:94:c4:1d:1b:79:84:3b:67:08:52:2d:d3:
         1c:4f:02:dd:98:e0:c3:8f:ab:fc:63:ef:11:68:2c:d0:32:b8:
         e3:13:ca:aa:66:6b:f5:3f:2c:e1:98:2a:fb:be:86:b1:33:12:
         15:0d:ce:0e:42:22:e5:4c:9c:d3:66:0b:ef:62:cd:b3:ba:21:
         64:09:a8:bd:34:4e:02:d0:d6:b1:90:ca:e6:97:d6:ae:1f:ca:
         99:df:4f:2f:5e:74:b6:fb:df:c8:6b:53:49:79:2c:7d:64:71:
         01:6d:df:f4:3c:8c:1e:51:97:62:9c:70:0e:af:67:74:ab:fd:
         23:be:cf:3c:97:64:2e:25:f1:a6:d6:1e:36:65:3d:4e:77:55:
         27:02:53:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:34 2025 by rpki-client