Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31392d3139203d3e203238303234.roa
File:                     3138362e322e302e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          PKVwLA+kvJ3hR3cCp4GNLWb6FUjQvwxmOyUCJiVaSog=
Subject key identifier:   40:32:AF:AE:D3:D6:D0:25:F7:A3:3C:12:75:6E:01:31:08:4C:EA:E4
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       564EFD2DA5577981A669E09F776BFA7DE0EEDD94
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:10 +0000
ROA not before:           Tue 04 Feb 2025 17:58:10 +0000
ROA not after:            Tue 03 Feb 2026 18:03:10 +0000
asID:                     28024
IP address blocks:        186.2.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4e:fd:2d:a5:57:79:81:a6:69:e0:9f:77:6b:fa:7d:e0:ee:dd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:10 2025 GMT
            Not After : Feb  3 18:03:10 2026 GMT
        Subject: CN=4032AFAED3D6D025F7A33C12756E0131084CEAE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:54:ff:8b:96:6a:5f:b9:e0:e2:19:47:fa:
                    74:3d:f5:c1:c8:99:2d:13:30:97:bb:52:c2:bd:68:
                    b6:f6:9e:fe:34:60:aa:46:c8:18:66:e1:53:60:48:
                    1a:c3:a2:c3:a8:a7:07:8a:b4:9e:4d:ad:b0:a3:eb:
                    82:9c:d5:34:07:05:b6:ab:2c:c9:6c:2a:0e:5a:83:
                    ed:2c:a0:52:35:be:52:87:8a:6f:c1:01:2e:27:09:
                    ba:80:b9:be:0e:24:75:2b:41:da:c8:b9:c8:d8:aa:
                    f0:ac:bf:f8:9d:53:93:79:81:e1:30:99:b5:49:1c:
                    99:18:6c:b1:08:20:1d:2f:48:b2:1c:1a:8b:9c:ee:
                    c2:5a:23:46:69:ef:22:70:b1:8a:d6:23:19:d2:30:
                    5d:37:c6:6c:b8:0d:4c:17:03:88:98:cf:3f:70:ad:
                    a6:39:22:fc:e3:e9:fb:75:fe:f2:8d:b2:2e:7e:18:
                    15:3a:c2:36:dc:7c:de:15:d4:5b:62:37:f1:ad:b4:
                    18:fd:2a:6e:11:80:91:f0:76:53:38:ac:2f:e1:f1:
                    01:49:6d:c8:0c:a5:7b:97:f7:34:ca:7c:c5:8f:5c:
                    ae:c8:5b:14:19:96:c9:cf:0d:b2:7b:b4:4e:8e:92:
                    d1:24:bf:62:5e:12:7e:4b:ba:4f:96:bb:37:ba:1e:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:32:AF:AE:D3:D6:D0:25:F7:A3:3C:12:75:6E:01:31:08:4C:EA:E4
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         79:52:18:6d:e3:a9:88:39:ce:43:a3:2c:ff:11:ed:ec:19:75:
         7b:05:31:98:13:51:51:90:18:8c:b5:c9:ac:dd:34:9a:aa:62:
         2f:5c:05:0d:2d:2d:2c:78:60:ba:65:d5:8d:59:29:55:55:cc:
         8d:7f:ac:c2:a8:35:23:5e:52:e1:46:9c:9d:80:1d:81:15:45:
         9e:b5:18:1a:a4:c2:9f:47:e0:e4:8e:d9:af:27:4b:69:39:e6:
         d7:83:2e:47:a5:a6:fe:d4:ac:d6:06:37:d4:17:32:4e:dc:75:
         50:62:23:86:83:a3:52:eb:27:ef:e1:30:50:a6:8f:71:76:35:
         bd:17:0e:d1:fe:36:22:5e:50:28:90:9d:d0:f2:14:03:e0:41:
         ec:8a:7f:44:49:f5:50:ac:79:cd:4a:f6:85:82:e7:d9:f3:21:
         14:d8:c4:2c:fe:51:c4:17:6b:50:a3:60:80:c0:1e:99:8b:13:
         4c:d2:1b:74:31:3d:96:d9:4a:55:21:55:75:bc:68:0a:e3:fe:
         f9:f9:53:29:94:4c:23:1b:10:88:d7:0c:ad:24:ac:8a:7c:3e:
         ca:f5:14:11:ea:d3:4f:df:27:c9:36:3f:72:f5:3c:c4:f6:c5:
         a4:fe:9a:6f:a4:ec:fe:e3:1a:b5:d6:b8:72:2a:b2:fb:15:00:
         62:bf:a1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:08 2025 by rpki-client