Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3139322e302f32302d3234203d3e203233323433.roa
File:                     3138362e3138392e3139322e302f32302d3234203d3e203233323433.roa (raw, json)
Hash identifier:          k9wYZF/Vpro0ZMZWamrnCmhb60bAvFFtHUwTua6x2cU=
Subject key identifier:   DC:42:61:31:11:1E:8F:EB:A7:68:57:16:4C:7A:55:29:45:CC:54:6A
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       5B8B75E5735919E52C1E45AE4C0EEA37B307562B
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3139322e302f32302d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:25:37 +0000
ROA not before:           Tue 04 Feb 2025 18:20:37 +0000
ROA not after:            Tue 03 Feb 2026 18:25:37 +0000
asID:                     23243
IP address blocks:        186.189.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 02:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8b:75:e5:73:59:19:e5:2c:1e:45:ae:4c:0e:ea:37:b3:07:56:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:37 2025 GMT
            Not After : Feb  3 18:25:37 2026 GMT
        Subject: CN=DC426131111E8FEBA76857164C7A552945CC546A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d0:78:a9:12:a8:cc:07:bd:f6:64:ff:9e:fa:
                    9e:1a:09:6f:7a:b4:3b:50:e9:65:de:b2:88:8f:75:
                    b3:c6:7c:87:60:05:f7:13:0e:b9:12:94:72:56:00:
                    11:04:83:d0:4d:95:d2:a6:86:c9:6a:84:c7:03:6f:
                    ab:ff:d5:98:e8:85:13:4a:55:90:39:99:2f:d2:7a:
                    91:86:58:cf:9a:ef:ad:23:c6:b2:06:c2:3f:e8:c9:
                    4a:a3:83:90:85:b9:b9:bd:d9:a8:61:74:bb:0a:0d:
                    18:ee:c5:74:b0:4a:d7:74:4f:72:bf:05:62:33:04:
                    78:f6:f4:1a:87:d1:42:f8:5c:49:37:ef:8b:51:e1:
                    c9:8a:08:5f:c5:b8:1f:3e:5d:59:a3:7f:c4:cd:c7:
                    c5:f7:b4:52:c3:d8:7d:fc:0b:a3:c9:93:97:29:d9:
                    6e:fd:bf:25:81:d4:a2:25:50:95:26:0b:46:1b:42:
                    75:b7:13:52:ef:fd:f7:56:90:5b:29:d5:19:53:50:
                    52:75:d3:c8:22:1e:a1:42:8d:e3:61:01:bd:d8:b2:
                    dc:02:cb:fb:68:fa:2c:1a:5a:92:dc:33:3c:bf:9b:
                    c5:12:78:ce:af:a9:ca:53:df:07:b4:35:d2:24:4f:
                    89:ad:cb:21:eb:7c:11:d6:82:32:54:48:c9:f4:e7:
                    6a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:42:61:31:11:1E:8F:EB:A7:68:57:16:4C:7A:55:29:45:CC:54:6A
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3139322e302f32302d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:02:7d:30:ae:f5:26:02:0d:dd:9d:2f:fa:15:7b:d3:b8:50:
         90:88:74:64:d4:67:72:3f:12:e3:c3:97:00:c4:ef:ff:fd:ed:
         0d:22:e4:11:5b:89:83:0c:e8:80:18:e1:b2:78:c7:54:94:64:
         6b:87:9f:16:8c:d8:dc:47:7d:02:a9:ce:bd:3a:80:38:4e:65:
         e7:79:73:49:00:ae:58:bc:32:3a:23:d1:c2:88:8e:a5:27:fc:
         e9:0a:85:46:2e:ba:a3:45:0a:02:8e:d5:9f:2e:40:c2:25:eb:
         7f:25:43:c3:95:eb:7e:16:a1:43:3a:37:f4:82:79:df:1f:b2:
         e0:23:54:ca:cf:9f:a2:63:b9:2c:d1:59:3d:60:5d:2e:12:02:
         67:7d:28:ac:67:84:32:18:30:cb:53:63:3e:74:54:4b:36:be:
         ba:58:de:d2:75:44:16:93:37:21:6d:fa:5d:0f:55:76:da:62:
         e7:0d:f7:e0:c2:1d:71:59:da:a1:8a:df:2f:4c:50:3b:2a:48:
         f9:d1:02:ec:b6:95:00:16:f0:68:3b:84:79:3e:58:42:90:df:
         60:c8:66:70:3d:f2:e4:d7:51:b2:eb:9b:0c:23:54:a7:75:ba:
         51:3e:c2:b0:5f:8b:b6:bc:9e:61:ea:cd:65:09:4a:71:3f:4f:
         0d:9f:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:11:07 2025 by rpki-client