Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e39362e302f31392d3139203d3e203238303234.roa
File:                     3138362e322e39362e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          BvEmYprQ4NS0YwxhKyBebRgFV+V16IUoZw5Ybo78T+E=
Subject key identifier:   C7:75:CF:6B:B9:6C:B7:5F:30:F1:41:29:55:52:E5:C2:57:93:2B:7B
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       036683BE42A127DAC14EE82E13B0D8B8CA4FA5B1
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e39362e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:07 +0000
ROA not before:           Tue 04 Feb 2025 17:58:07 +0000
ROA not after:            Tue 03 Feb 2026 18:03:07 +0000
asID:                     28024
IP address blocks:        186.2.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:66:83:be:42:a1:27:da:c1:4e:e8:2e:13:b0:d8:b8:ca:4f:a5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:07 2025 GMT
            Not After : Feb  3 18:03:07 2026 GMT
        Subject: CN=C775CF6BB96CB75F30F141295552E5C257932B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d8:4d:83:17:e8:c1:76:25:ec:4f:d3:dd:db:
                    8d:80:df:f6:d5:ba:ef:2a:24:a2:ca:90:4e:fc:5a:
                    32:22:79:c1:07:2f:69:55:c6:09:9e:65:0b:02:0a:
                    b0:92:ba:98:9b:45:fe:ec:6e:56:9a:7e:ed:af:79:
                    03:3f:a5:b1:df:67:ec:b2:a7:a0:39:b6:60:ff:02:
                    54:fd:41:f3:a0:c7:38:0c:77:da:4f:16:8c:92:1e:
                    b8:40:bf:2b:26:61:9b:b9:91:7c:3b:c5:75:bb:57:
                    be:b2:98:bc:71:74:a4:78:3d:e4:77:81:1f:a2:8a:
                    b0:90:4d:c3:23:da:22:62:d4:4a:fd:7d:9e:67:b4:
                    a4:fb:44:bf:5b:84:d4:db:b5:a4:b4:14:c9:66:41:
                    ef:a7:27:62:c2:6c:37:8f:68:08:36:bd:4e:9f:f8:
                    8c:8c:72:90:5a:10:40:7c:b3:51:b5:43:43:72:79:
                    7b:bb:2b:37:d4:29:74:22:d3:f1:e9:9a:17:ac:5d:
                    e7:42:ed:89:8a:e8:ab:b4:50:07:8c:50:d0:5f:f8:
                    ee:55:6d:ca:8c:29:4b:3d:cd:b4:7b:6a:16:34:a7:
                    84:84:7e:3b:ad:af:8b:e9:2b:4b:12:e8:45:d7:56:
                    f5:41:ea:24:66:2e:ec:a2:30:3d:6b:c9:60:69:0b:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:75:CF:6B:B9:6C:B7:5F:30:F1:41:29:55:52:E5:C2:57:93:2B:7B
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e39362e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:3c:78:7c:76:96:79:a1:3e:0b:b0:6c:ff:f1:24:9b:ed:ae:
         68:4e:96:ab:cb:77:30:a4:89:67:e5:cb:f5:ea:16:0a:ad:de:
         f9:3f:5d:30:3b:f3:bc:fb:46:0a:94:37:83:1a:9b:29:8a:e9:
         7b:3b:ca:07:44:e8:dc:1f:30:2d:4e:37:e9:84:1f:ea:92:43:
         13:08:59:c3:16:1b:a1:86:0b:af:f6:36:b3:95:90:d6:44:c0:
         2f:2e:30:49:bb:7c:96:35:ab:b5:16:99:eb:51:cd:ba:6f:79:
         f4:d7:ac:27:42:ac:ef:1d:a6:cd:50:2e:09:0b:1c:33:5a:00:
         ae:49:80:e0:03:a7:6d:30:eb:64:9d:45:00:e2:03:cd:ae:4b:
         5f:5b:bf:1a:7d:1b:b4:52:a8:5e:1d:94:0d:a2:8c:b5:44:77:
         1f:0f:ed:02:84:4f:68:81:65:35:e3:02:47:05:6a:d4:80:d5:
         70:b1:7a:f9:58:1f:b5:d1:47:63:d0:fc:09:8a:b1:62:1e:76:
         1e:94:f6:a1:0b:63:ee:58:72:9b:59:9e:65:19:c9:95:a7:59:
         28:c6:55:d4:6f:6a:77:67:8b:8c:87:a8:2c:f9:5d:c2:c3:9d:
         81:6e:84:57:73:36:be:d1:4b:09:50:94:bd:bd:83:d8:f4:08:
         cc:cf:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:56 2025 by rpki-client