Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231362e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3231362e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          dh8IhaLIdWAPUGDMy/+34mw6MJzoeGLhE8BRKQkgCmw=
Subject key identifier:   E8:5C:B5:07:C3:96:95:05:77:CB:53:07:01:A6:0E:EF:F0:F9:5D:AA
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       6605E3BB387397D7EAB09B3A6B4F1B4895D23590
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231362e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 04 Feb 2025 18:34:15 +0000
ROA not before:           Tue 04 Feb 2025 18:29:15 +0000
ROA not after:            Tue 03 Feb 2026 18:34:15 +0000
asID:                     262189
IP address blocks:        186.1.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:05:e3:bb:38:73:97:d7:ea:b0:9b:3a:6b:4f:1b:48:95:d2:35:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Feb  4 18:29:15 2025 GMT
            Not After : Feb  3 18:34:15 2026 GMT
        Subject: CN=E85CB507C396950577CB530701A60EEFF0F95DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:87:1a:b8:11:10:d7:e2:eb:66:55:9f:c3:
                    9e:96:1e:88:be:da:81:dc:b7:05:7f:6c:b2:32:9b:
                    b2:4f:59:72:eb:5c:1f:df:13:ab:c8:78:58:00:fa:
                    e1:0f:67:4a:96:3a:7f:0c:7a:ff:01:fa:4f:1e:a2:
                    80:ad:c8:f7:59:1c:cc:61:ac:6b:fe:32:ee:0f:b3:
                    8d:e0:aa:93:6e:5b:58:6a:05:f5:41:b0:bc:9f:a3:
                    32:6c:7a:f0:82:d6:12:64:da:1c:4a:fb:b9:67:10:
                    19:c0:56:85:b7:78:db:74:7c:19:cc:b5:47:d6:15:
                    81:5a:2a:d8:4f:ab:db:ea:ed:7d:ad:90:7f:36:b3:
                    e2:b9:d2:dc:88:e8:39:02:3e:5e:10:5c:f3:bf:85:
                    34:5b:93:a9:a0:9c:c5:b4:fd:83:00:6a:a7:df:06:
                    3e:73:2c:7b:71:68:6d:1f:a6:1e:46:27:16:44:7f:
                    0a:15:9d:9b:39:91:5f:e6:de:b3:4d:81:5f:fc:0a:
                    39:58:d1:d8:6c:cc:54:ab:3c:b6:34:69:bf:42:5c:
                    2b:83:17:54:76:b8:80:17:9a:09:f2:b9:04:e9:05:
                    fc:22:f7:3c:41:2e:39:de:12:24:c5:b8:7e:53:b3:
                    08:f1:cb:8b:e0:ff:d0:08:72:de:5e:b7:82:b1:22:
                    1c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5C:B5:07:C3:96:95:05:77:CB:53:07:01:A6:0E:EF:F0:F9:5D:AA
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231362e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:97:02:43:c1:d7:de:34:bf:b0:b7:5b:fe:ea:6f:e9:d7:06:
         f2:65:1c:87:12:2f:e5:80:a3:58:13:8c:dc:79:bc:fe:c4:da:
         7e:31:d2:bc:58:7e:83:be:1c:16:39:34:0b:aa:5a:bc:61:7e:
         4c:b7:ed:ea:86:37:e7:f7:65:7a:1f:39:c5:37:89:4b:c3:2d:
         b2:db:4b:fd:c2:fc:1c:3d:30:f6:aa:54:3c:3a:81:09:d4:39:
         05:4f:c4:47:cc:ed:06:d9:31:2a:76:95:8b:78:ca:d5:21:6b:
         d7:1d:90:44:27:c1:72:96:c4:99:65:72:81:55:84:1f:89:e9:
         f4:9b:94:a3:32:f7:98:10:57:84:33:a8:ba:90:36:33:2a:2d:
         b5:48:d5:cf:3b:c5:82:51:9f:d6:73:ba:dd:f5:5f:67:d9:a8:
         e7:d2:bc:15:4e:72:3f:84:e2:0f:39:01:6a:3f:c4:a5:4b:17:
         b6:b0:a9:3e:4d:54:22:68:b5:75:c8:de:54:bf:d3:3f:89:1f:
         34:56:40:be:6c:2f:42:a5:c7:16:02:74:9d:2e:b3:31:c5:76:
         42:6e:11:a3:2f:ba:d7:ac:47:5f:09:fb:09:19:6f:ed:b0:bf:
         1d:9f:99:7b:d8:09:21:34:65:26:f8:db:8c:ed:f2:8e:45:37:
         d6:e9:c5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:48 2025 by rpki-client