Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3132382e302f31382d3234203d3e203532323537.roa
File:                     3138362e33332e3132382e302f31382d3234203d3e203532323537.roa (raw, json)
Hash identifier:          YrdPtNJG3FtWSMf1+QZdWePd8DQNSBVs7YVSzkweuaE=
Subject key identifier:   38:21:D7:9F:78:DB:12:96:6E:D8:05:98:5F:D5:E7:76:76:BB:0F:D2
Certificate issuer:       /CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
Certificate serial:       5AF89100110BC38003B3B91EA5CE14B5E46C49C3
Authority key identifier: 63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3132382e302f31382d3234203d3e203532323537.roa
Signing time:             Tue 04 Feb 2025 20:01:55 +0000
ROA not before:           Tue 04 Feb 2025 19:56:55 +0000
ROA not after:            Tue 03 Feb 2026 20:01:55 +0000
asID:                     52257
IP address blocks:        186.33.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f8:91:00:11:0b:c3:80:03:b3:b9:1e:a5:ce:14:b5:e4:6c:49:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
        Validity
            Not Before: Feb  4 19:56:55 2025 GMT
            Not After : Feb  3 20:01:55 2026 GMT
        Subject: CN=3821D79F78DB12966ED805985FD5E77676BB0FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:76:13:42:e5:07:07:41:68:10:ff:61:1b:
                    74:c0:09:6e:40:11:e2:6e:48:02:52:cb:ea:fc:83:
                    3e:29:be:f7:5a:66:a3:95:32:18:3e:5f:03:40:cc:
                    6e:5a:fe:b2:dd:68:bd:4e:df:f1:57:93:52:9e:2e:
                    91:a9:d5:e9:a0:c1:f6:d7:06:3b:62:db:1e:7b:ff:
                    af:f8:fc:09:34:71:65:97:0f:38:b2:9d:5c:8b:bf:
                    4c:92:5c:4b:79:10:63:5d:09:8e:0c:e5:3d:1d:82:
                    97:bc:93:07:65:42:2b:12:2c:39:40:2f:7b:1d:82:
                    1f:78:ad:7b:6c:39:d6:4e:30:b8:34:69:dd:8b:6d:
                    ae:64:6e:9b:03:52:55:c1:ca:80:61:36:90:c5:3f:
                    50:47:25:24:03:5d:f4:eb:d6:7c:d3:a4:41:1f:eb:
                    31:b9:fa:57:fd:6d:51:91:8a:d0:5c:91:2b:09:06:
                    b4:8e:f5:64:d7:38:1d:35:e3:66:3e:c8:1f:f8:c3:
                    d1:7a:de:01:36:4e:e8:45:29:6e:f8:88:9f:c3:a7:
                    43:e5:19:bb:18:69:9e:bc:d9:86:01:ae:d2:ff:4f:
                    df:e7:0f:46:51:5b:71:fb:bc:7f:24:cd:e5:00:98:
                    cb:3f:b9:65:14:12:3f:b1:d1:79:d5:0e:dc:68:18:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:21:D7:9F:78:DB:12:96:6E:D8:05:98:5F:D5:E7:76:76:BB:0F:D2
            X509v3 Authority Key Identifier:
                keyid:63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3132382e302f31382d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         90:ca:63:50:6f:5c:e7:90:43:32:08:4b:92:1d:aa:55:2f:f7:
         ac:af:dd:59:46:03:8a:b1:a0:f1:90:60:c1:91:0a:92:99:f8:
         6b:1a:6d:2e:04:1b:e0:13:6f:22:14:cb:5f:79:01:14:a0:36:
         91:97:23:97:76:39:37:98:ab:88:b7:5b:4c:69:9b:bc:93:67:
         a0:52:11:c1:ce:5c:22:b9:0c:4a:0e:dd:ba:bf:e0:ec:3b:b1:
         ac:e4:6e:1f:c7:2b:b2:e4:92:3e:de:e0:0e:ef:4c:74:ad:25:
         03:06:4f:62:f5:8a:d6:82:67:30:e9:17:17:8b:5e:09:4e:14:
         bd:c0:e9:18:97:82:2b:8a:b9:8b:27:16:c4:6f:b1:84:1f:c3:
         02:7f:86:c1:42:c4:1b:b6:eb:ff:5e:2b:61:3e:30:63:35:8a:
         ae:d7:e3:8b:a6:53:b0:56:bc:92:9b:8b:5b:0a:82:ef:b7:50:
         23:30:5d:65:53:64:04:1c:ff:28:cd:b0:54:97:d4:ea:36:ef:
         d6:b7:db:7a:b6:b3:8d:f0:67:ca:e4:2f:e3:1a:de:fd:60:81:
         c4:b3:84:3a:47:8d:38:f7:b5:00:de:51:72:d8:9e:66:2b:ff:
         7d:59:c8:00:f9:54:29:7c:14:ce:74:b4:1e:d1:59:fd:29:e4:
         94:64:ff:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:18 2025 by rpki-client