Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3136302e302f31392d3234203d3e203139313639.roa
File:                     3138362e33332e3136302e302f31392d3234203d3e203139313639.roa (raw, json)
Hash identifier:          wanyBJETw+lmFLYh1iiZ51ikzcZ74bL4MYQkX9K56c8=
Subject key identifier:   62:E8:53:C7:A9:B9:82:FC:B0:42:99:49:56:89:83:DD:E1:D5:A5:B9
Certificate issuer:       /CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
Certificate serial:       60BEB873D399CA8081A3E6CF46626867C21AD5C3
Authority key identifier: 63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3136302e302f31392d3234203d3e203139313639.roa
Signing time:             Tue 04 Feb 2025 20:01:56 +0000
ROA not before:           Tue 04 Feb 2025 19:56:56 +0000
ROA not after:            Tue 03 Feb 2026 20:01:56 +0000
asID:                     19169
IP address blocks:        186.33.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:be:b8:73:d3:99:ca:80:81:a3:e6:cf:46:62:68:67:c2:1a:d5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
        Validity
            Not Before: Feb  4 19:56:56 2025 GMT
            Not After : Feb  3 20:01:56 2026 GMT
        Subject: CN=62E853C7A9B982FCB0429949568983DDE1D5A5B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1d:2a:14:4c:de:23:70:3f:64:a5:d5:8a:62:
                    e6:20:d2:d2:a8:fe:77:90:90:c6:05:d8:07:58:d5:
                    cd:ae:e4:ea:bb:a9:1e:4a:c5:04:06:77:f4:84:ab:
                    f3:67:0f:ed:78:86:56:f3:0a:21:7e:71:d5:9e:e2:
                    25:6c:97:32:d7:3d:19:5d:0a:1b:dd:1b:22:fd:1c:
                    24:5e:d9:56:93:ab:34:11:4f:6f:62:51:d9:a1:88:
                    c1:29:69:75:d1:f6:96:05:a8:51:d7:77:46:79:ef:
                    b7:d8:01:f6:6c:cf:00:f9:29:da:b3:2a:bd:79:55:
                    0b:8e:0f:e0:21:56:6e:c1:cb:77:85:67:ca:92:ca:
                    b7:ea:1e:b7:89:0a:b7:44:b1:d5:b4:1c:db:22:c5:
                    57:95:3f:57:80:d8:be:e9:46:c5:cd:a2:0b:28:09:
                    19:8c:a8:2c:e9:9f:f4:f7:76:d5:ed:27:c3:c5:22:
                    13:d4:05:a2:ee:f9:21:74:0f:62:7b:9d:1b:b8:4e:
                    a5:5b:8b:99:1c:3e:5d:3b:44:e0:d1:dd:29:29:19:
                    85:c0:ac:f2:55:b6:58:47:cd:12:5e:ea:12:26:d8:
                    0d:a8:07:88:dd:28:7f:91:ac:06:24:c6:a5:96:61:
                    2e:ef:e5:34:9a:fd:3f:aa:25:27:45:29:47:7d:75:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E8:53:C7:A9:B9:82:FC:B0:42:99:49:56:89:83:DD:E1:D5:A5:B9
            X509v3 Authority Key Identifier:
                keyid:63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3136302e302f31392d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:ac:fd:18:52:71:43:68:f7:a1:88:c6:9f:c3:2c:b6:74:cb:
         ae:80:0c:c4:95:3a:1f:d0:5d:43:ec:a0:b7:04:d6:a2:fa:df:
         87:d4:fc:5d:18:5b:0d:7e:81:24:b9:66:7c:3b:e9:34:aa:b0:
         c7:25:a1:0f:36:ff:4e:dc:1e:3c:57:71:4f:af:55:05:bf:86:
         c7:44:09:c3:80:98:6c:d4:b8:c1:ee:e1:27:02:60:83:fb:d7:
         5b:f7:b3:7b:3f:85:91:07:f0:4a:4d:5a:47:53:ee:1e:d0:fa:
         69:a5:54:af:b2:57:14:64:f3:64:5f:0a:01:5f:fb:23:f3:d9:
         e6:6a:10:b6:eb:17:85:2b:c0:d2:0c:0d:a8:7c:e3:9e:41:6a:
         cf:6f:f0:67:ea:17:3f:4f:e3:00:d4:e8:aa:b6:68:11:ab:a6:
         34:a7:67:bc:db:24:75:87:72:81:c0:8a:95:78:57:dd:91:40:
         08:27:01:3f:cc:f1:97:21:5b:b4:27:be:14:cf:e6:1a:2c:fd:
         f2:ee:1b:b2:6b:89:54:14:b3:d5:06:ad:01:e8:82:df:65:8e:
         b2:1f:1d:ca:26:66:4c:1e:4d:e0:6f:50:c7:ff:32:f0:c6:2a:
         7e:68:b2:98:48:73:9c:86:8a:28:5c:c1:84:89:af:3f:31:74:
         38:09:f7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:05 2025 by rpki-client