Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3134342e302f32322d3234203d3e203139313639.roa
File:                     3138362e33332e3134342e302f32322d3234203d3e203139313639.roa (raw, json)
Hash identifier:          +Xa6E/618oZauobDsf9yPS4PjqdvyvEzepqfgaMQPwA=
Subject key identifier:   A8:DE:15:E5:57:7B:2A:97:21:9D:3E:9A:A2:7C:E8:E4:49:45:9D:F5
Certificate issuer:       /CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
Certificate serial:       7059C2F4834B1ED5D45A723A29AEFE8522CA8836
Authority key identifier: 63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3134342e302f32322d3234203d3e203139313639.roa
Signing time:             Tue 04 Feb 2025 20:01:57 +0000
ROA not before:           Tue 04 Feb 2025 19:56:57 +0000
ROA not after:            Tue 03 Feb 2026 20:01:57 +0000
asID:                     19169
IP address blocks:        186.33.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:59:c2:f4:83:4b:1e:d5:d4:5a:72:3a:29:ae:fe:85:22:ca:88:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
        Validity
            Not Before: Feb  4 19:56:57 2025 GMT
            Not After : Feb  3 20:01:57 2026 GMT
        Subject: CN=A8DE15E5577B2A97219D3E9AA27CE8E449459DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:ff:c1:c7:18:14:10:53:52:30:c5:9e:15:
                    d7:87:69:95:64:e0:46:bb:b5:84:d0:da:d8:c3:55:
                    da:8d:c0:b3:63:dc:7e:a4:ec:56:9a:4a:dd:a8:29:
                    99:53:a9:0c:ab:3e:c0:6d:e8:fa:2b:03:a8:5a:ff:
                    15:d9:47:df:14:19:7d:b8:17:37:a2:d2:e2:e6:6c:
                    ec:d1:87:f7:ba:0f:e0:78:ff:3d:d2:2e:87:ca:b7:
                    5c:fa:81:52:54:ab:a8:60:ef:ad:b8:29:16:d2:e4:
                    06:a4:02:39:ac:ad:4b:20:3f:0e:13:8c:e5:3a:6b:
                    9d:bb:e1:87:12:6d:bc:ea:98:0d:c5:ef:cc:5d:8b:
                    69:73:1f:cc:07:35:30:9a:cb:49:12:dd:24:c8:3f:
                    de:dd:4c:5e:2d:5f:a4:ef:a7:c6:bb:50:d9:df:c2:
                    74:ac:36:d0:8d:79:86:97:89:95:b4:ca:ff:da:61:
                    f7:f4:51:20:dd:08:79:8e:f5:5d:37:8c:e0:39:1b:
                    d1:fb:d2:46:e3:50:d7:48:bf:0a:62:0e:1f:28:af:
                    bc:93:d2:6a:4d:c6:5e:a5:4b:e3:22:2b:17:aa:10:
                    62:90:5c:3c:45:41:92:f0:36:04:8c:0a:da:61:5c:
                    38:72:00:9b:8d:c7:41:60:4b:14:4a:47:fb:c2:35:
                    62:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DE:15:E5:57:7B:2A:97:21:9D:3E:9A:A2:7C:E8:E4:49:45:9D:F5
            X509v3 Authority Key Identifier:
                keyid:63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3134342e302f32322d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:8c:0f:1d:21:b7:b9:5a:37:7a:a2:cd:21:f7:16:4d:83:cf:
         4a:af:9f:ab:9b:4b:97:2b:32:f4:78:8d:2e:83:22:21:d3:65:
         43:f7:09:1c:a0:b4:4f:5f:0f:92:18:67:02:2a:13:38:d3:56:
         89:ae:be:e3:f8:20:a5:dd:d7:f4:72:af:e4:2d:a0:72:04:61:
         20:9c:10:fa:2d:7a:9f:8b:c3:c4:65:e7:33:80:91:82:5c:39:
         5e:2c:a9:2f:e3:cf:5e:75:b0:77:49:23:a4:d4:b0:87:7f:31:
         73:a5:37:48:12:05:0e:a5:7f:69:f4:8f:cd:52:0a:88:06:bc:
         e8:bc:15:ff:b2:22:93:6b:ef:37:73:6b:fc:bf:33:4f:69:64:
         20:1d:cc:1b:86:2b:98:2b:0f:07:0e:1a:62:6a:ac:75:82:92:
         a6:5a:fa:1a:9e:1e:05:ea:18:3f:e4:a5:f8:24:ec:d6:d6:38:
         82:fd:50:5b:b2:8d:ee:19:40:0e:fe:7f:99:d1:79:81:25:6d:
         da:1d:a2:53:19:bc:ca:53:9b:05:c0:89:6b:37:78:39:c7:ac:
         e1:12:6b:ac:7e:d4:03:6c:73:58:21:dc:5a:95:0b:bf:35:d7:
         79:ea:86:5d:90:ab:83:bc:55:8f:0b:e6:ef:3b:24:ac:ed:0e:
         a5:8a:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:51 2025 by rpki-client