Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36362e3132382e302f31372d3234203d3e203134353232.roa
File:                     3138362e36362e3132382e302f31372d3234203d3e203134353232.roa (raw, json)
Hash identifier:          kdkJ8BmcOkWYbSaZhTVtLO+07X/4svBLjWbXIgsVZrw=
Subject key identifier:   4E:11:A2:B3:61:C6:5E:1A:13:2E:4D:0B:D6:57:81:FE:BE:A6:7C:9E
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       4E61A55BDC89941F1E8FEB53EE9A0DCC85B4FE93
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36362e3132382e302f31372d3234203d3e203134353232.roa
Signing time:             Tue 04 Feb 2025 20:08:43 +0000
ROA not before:           Tue 04 Feb 2025 20:03:43 +0000
ROA not after:            Tue 03 Feb 2026 20:08:43 +0000
asID:                     14522
IP address blocks:        186.66.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:61:a5:5b:dc:89:94:1f:1e:8f:eb:53:ee:9a:0d:cc:85:b4:fe:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Feb  4 20:03:43 2025 GMT
            Not After : Feb  3 20:08:43 2026 GMT
        Subject: CN=4E11A2B361C65E1A132E4D0BD65781FEBEA67C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:78:33:6f:5c:b5:3d:ca:d3:59:80:4d:9d:
                    0b:c6:0e:a5:52:38:30:46:6a:76:64:94:51:f9:d7:
                    cc:ed:37:02:3b:30:9b:b2:5c:98:db:17:90:c0:c7:
                    03:12:0b:35:69:a6:19:70:21:2f:bc:f6:d8:69:15:
                    c8:86:2a:81:92:51:e0:4b:33:f3:fe:10:70:a7:7d:
                    b6:bc:98:69:da:0e:dd:8c:a3:99:c7:70:a8:2e:5b:
                    42:27:b1:2d:a2:c4:a7:de:82:73:bd:bc:b6:7e:96:
                    b7:39:81:38:fa:3b:a2:c5:45:ca:b9:d2:5c:5f:90:
                    87:5d:39:9b:aa:cf:ae:e2:82:5a:06:39:c6:0f:bf:
                    86:17:f5:db:28:5a:16:00:48:7d:91:7d:d6:2f:a7:
                    52:f3:d5:39:16:1e:30:09:48:2a:1a:4b:fe:60:12:
                    1b:ff:27:62:52:04:1b:32:5e:4f:fc:a5:84:8d:d0:
                    2e:68:21:e7:20:24:75:cd:e2:66:4d:49:fa:5e:31:
                    bc:70:78:3c:c2:99:ae:2d:e4:72:20:e4:f0:5a:1e:
                    27:8d:b5:c5:bf:a0:2a:52:62:35:bb:f2:ae:5c:82:
                    06:08:10:88:52:fd:79:cd:df:78:71:88:26:14:ac:
                    ea:8a:97:e3:f0:00:02:6d:99:2b:45:e0:16:9d:0d:
                    01:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:11:A2:B3:61:C6:5E:1A:13:2E:4D:0B:D6:57:81:FE:BE:A6:7C:9E
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36362e3132382e302f31372d3234203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.66.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         08:2f:6e:e3:27:68:19:b9:51:ba:a1:bc:35:2c:cf:1b:3b:ad:
         f9:58:ce:c1:95:72:6b:bd:14:da:97:3f:54:4a:8d:50:65:5a:
         fa:ea:ed:1b:15:c9:ed:06:c4:26:48:6d:29:37:86:fc:24:f5:
         3d:6b:cc:81:ff:89:d8:2f:aa:b9:42:c5:f0:9d:3e:64:de:52:
         42:0f:a5:00:a1:f7:a1:a5:1f:3e:2f:52:16:c1:42:16:c8:da:
         87:9e:64:a4:ab:84:ad:2e:19:08:5f:4f:e3:ae:c4:bf:0f:5d:
         09:10:72:d1:8c:06:ab:9a:1e:b3:ed:d0:9d:09:cf:ee:f5:3f:
         82:8f:cc:1c:32:fb:bf:43:a6:3c:6f:1a:1f:c0:63:8b:65:8f:
         10:06:63:72:6e:e2:73:16:47:7c:43:3d:a9:c0:1f:a7:04:48:
         8c:82:8c:46:d1:08:11:d2:ac:d2:06:67:b4:10:bf:7f:0f:e6:
         dd:02:23:01:24:0a:79:bf:d7:b2:e1:27:91:5f:45:74:b8:60:
         e0:f4:d5:fc:d6:09:fb:21:15:47:be:35:79:1a:1e:fe:85:31:
         9e:60:87:3a:ad:6d:67:93:a3:a2:d9:5b:83:e9:5c:f6:aa:66:
         23:64:2f:44:22:16:fa:d0:d8:e2:5f:4f:1f:7c:0c:c6:be:6f:
         a3:17:27:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:01 2025 by rpki-client