Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131362e302f32322d3232203d3e20323632323138.roa
File:                     3138362e3135392e3131362e302f32322d3232203d3e20323632323138.roa (raw, json)
Hash identifier:          c0FoWTDKidu/QxWZz4yFheWSmjWhIGJF0lWydeGDyb0=
Subject key identifier:   37:58:5C:C1:F6:1E:15:30:BF:9D:60:C9:E9:28:5E:D3:A8:B6:8B:65
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       12C6D55A56C5A0DE60AA7847DE94938CF7FF5558
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131362e302f32322d3232203d3e20323632323138.roa
Signing time:             Tue 04 Feb 2025 18:53:20 +0000
ROA not before:           Tue 04 Feb 2025 18:48:20 +0000
ROA not after:            Tue 03 Feb 2026 18:53:20 +0000
asID:                     262218
IP address blocks:        186.159.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c6:d5:5a:56:c5:a0:de:60:aa:78:47:de:94:93:8c:f7:ff:55:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Feb  4 18:48:20 2025 GMT
            Not After : Feb  3 18:53:20 2026 GMT
        Subject: CN=37585CC1F61E1530BF9D60C9E9285ED3A8B68B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:f0:1f:47:ad:cf:92:77:ce:14:c0:cc:31:
                    ff:15:07:2f:b5:b6:96:f7:58:8a:ab:3b:cf:64:31:
                    4e:0d:9b:b6:dc:f6:91:f3:09:f5:ea:e9:0d:84:15:
                    b0:b3:63:0d:51:52:e6:f4:ad:b9:3b:75:02:96:5a:
                    2f:69:b1:76:24:4b:eb:bb:30:b0:8c:29:f5:2d:f4:
                    42:51:00:a6:32:40:52:8a:d1:cd:99:55:b6:fc:81:
                    4e:13:05:2e:ef:cf:39:b8:f0:24:30:fb:e9:29:41:
                    24:4e:14:b4:ef:ea:23:51:d9:b5:7a:33:f9:11:a1:
                    1c:0d:1a:87:59:d4:2e:19:98:72:37:3d:cc:9a:a4:
                    3c:d1:bf:e6:08:10:9c:3b:be:8d:33:76:35:0b:f2:
                    c0:e8:bf:d0:3a:bd:a9:49:4d:40:ff:48:f0:07:da:
                    f3:3f:2c:29:aa:f3:40:68:18:4a:b0:ef:c5:30:7f:
                    be:ed:2f:4f:53:f9:47:10:56:1c:aa:10:71:a7:1f:
                    4a:b0:35:87:b7:e5:8a:66:fc:4e:c1:b0:47:41:57:
                    e5:4d:e1:b9:39:64:ab:9e:91:a5:f8:7e:4d:c3:87:
                    6f:90:49:00:71:f0:9c:a2:e0:72:39:eb:6d:fd:b7:
                    fb:45:a4:21:b9:bc:e8:b6:79:1d:73:1a:b3:6d:be:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:58:5C:C1:F6:1E:15:30:BF:9D:60:C9:E9:28:5E:D3:A8:B6:8B:65
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131362e302f32322d3232203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:a2:34:f6:16:72:82:81:b0:7d:70:77:5c:38:c1:08:09:e0:
         2b:2f:d1:3a:28:74:d9:21:d0:10:81:a1:10:4f:15:df:45:68:
         da:94:de:c4:39:2c:2a:b3:c4:94:d8:d5:77:dd:da:d8:9b:80:
         17:0e:4a:df:f3:d0:e8:29:c5:93:4c:fc:c9:d4:14:44:2d:42:
         44:63:b2:44:d2:54:4f:33:c3:27:b6:e4:0f:4d:31:22:b7:92:
         a8:63:21:ec:6d:93:c0:24:60:c4:ec:2a:15:18:29:8b:f6:92:
         b2:25:6f:eb:08:ec:da:35:f4:13:45:15:bb:1f:83:b7:47:23:
         33:91:26:99:85:99:da:d1:01:e2:a9:9a:be:87:a9:07:a6:06:
         14:cc:a8:c3:3a:e2:fe:cb:45:16:9b:fd:d0:7b:33:a3:0a:6a:
         c3:50:0d:e7:75:4f:f1:3d:c3:5e:aa:0c:09:ef:19:28:82:01:
         30:83:3d:c0:4a:5a:84:d0:37:d1:e9:6c:8b:55:4f:6a:47:79:
         3e:02:bb:ff:75:0d:63:08:11:57:01:5a:e5:d7:53:2d:97:74:
         00:54:72:77:ed:fa:26:b3:3d:2c:12:67:e0:36:fd:80:d8:08:
         81:e7:22:d7:72:9c:7d:73:49:2f:4d:2c:95:94:bc:86:39:2d:
         ba:ef:15:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:18 2025 by rpki-client