Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa
File:                     3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa (raw, json)
Hash identifier:          BNJk2fyz8MX0zLw9d5G+Z1dWbMRo51I6pv47DVU8OUQ=
Subject key identifier:   CB:1B:D3:94:64:35:DE:FB:60:A7:D2:D5:2B:72:80:03:51:7E:27:FA
Certificate issuer:       /CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C
Certificate serial:       150D794FB6E80C2F9B83F71D80897B538EC044E1
Authority key identifier: CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa
Signing time:             Tue 04 Feb 2025 18:10:36 +0000
ROA not before:           Tue 04 Feb 2025 18:05:36 +0000
ROA not after:            Tue 03 Feb 2026 18:10:36 +0000
asID:                     52350
IP address blocks:        186.148.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 07:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0d:79:4f:b6:e8:0c:2f:9b:83:f7:1d:80:89:7b:53:8e:c0:44:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C
        Validity
            Not Before: Feb  4 18:05:36 2025 GMT
            Not After : Feb  3 18:10:36 2026 GMT
        Subject: CN=CB1BD3946435DEFB60A7D2D52B728003517E27FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:9a:a5:9d:88:65:13:21:52:69:04:67:ed:
                    56:68:73:29:bb:0a:76:52:df:7b:5b:43:bb:91:70:
                    b2:86:ec:2c:6a:2e:61:86:e3:2a:a9:73:10:50:8b:
                    ea:56:43:05:b3:98:cd:40:11:b9:46:f3:20:84:6a:
                    fc:21:fb:32:7e:f1:20:a2:3f:3f:fa:24:ea:95:ac:
                    1a:0b:43:15:a9:af:ec:6d:12:83:ab:5a:ae:42:48:
                    0a:67:bb:9e:25:2f:63:db:d4:e9:59:ca:28:aa:89:
                    60:f5:88:b7:bd:04:89:94:66:d5:74:5f:91:40:46:
                    9b:cf:3d:41:60:a7:4c:bc:af:e1:c3:d6:a7:d4:ec:
                    be:55:3c:02:53:87:74:75:a6:30:37:69:4c:e2:b4:
                    61:a8:10:7d:80:99:fb:65:2d:fc:c6:a7:48:c1:94:
                    51:1e:87:25:1d:99:e0:98:a2:37:7b:4e:86:42:8d:
                    ce:42:a6:67:e5:d5:15:e2:92:44:64:ea:f2:64:39:
                    d8:11:35:3b:9a:69:ff:f5:a2:b4:23:c4:f2:79:e5:
                    fa:7e:2b:2e:52:de:1c:53:ce:2e:6d:41:81:4a:db:
                    58:47:1f:4d:cc:cd:39:af:48:af:61:c0:e9:a3:f2:
                    d9:c0:d8:42:77:cf:25:42:99:d7:d2:98:4f:21:18:
                    ad:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1B:D3:94:64:35:DE:FB:60:A7:D2:D5:2B:72:80:03:51:7E:27:FA
            X509v3 Authority Key Identifier:
                keyid:CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:6c:71:bb:76:9b:47:63:aa:74:55:31:53:9d:da:23:a3:cb:
         b1:93:cd:73:17:f1:a5:27:54:8d:79:e2:2c:87:76:1a:31:94:
         51:4e:df:d8:a0:e1:57:39:da:9f:76:63:f1:4c:2c:78:82:0c:
         aa:41:06:1c:c2:09:12:8e:75:b8:b3:14:eb:f7:ed:cd:fa:d6:
         f4:24:0c:6d:19:e9:c2:fd:d2:4a:78:38:79:df:ef:60:dc:21:
         3f:76:bb:98:ac:69:58:56:d9:62:4e:5d:16:39:6e:13:29:a8:
         ab:b1:2b:77:19:65:de:4b:1b:00:21:8f:4e:0b:7a:8b:e6:6d:
         16:76:41:23:98:cb:84:67:04:9a:b3:ec:bc:73:9a:09:05:31:
         77:a7:5e:f3:7d:10:05:cf:35:fc:eb:ad:77:f0:3b:57:2c:99:
         5c:26:56:fc:87:f2:ab:2a:2b:47:0c:d1:d3:b1:fd:4a:b8:4e:
         9e:09:da:db:24:6d:00:55:2b:a8:52:6f:9b:45:b6:76:fa:4a:
         95:a2:d3:0c:6c:ce:61:f9:c2:84:a2:1b:8d:d0:18:fa:6b:0f:
         0e:11:6a:b9:ba:f5:4a:45:8f:0a:ed:7f:99:8c:69:a7:fb:d9:
         78:67:f9:d0:63:cd:ad:9e:3f:ef:10:aa:14:01:e9:c3:4f:da:
         ae:01:a2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:44:09 2025 by rpki-client