Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139352e302f32342d3234203d3e203532343930.roa
File:                     3138362e39362e3139352e302f32342d3234203d3e203532343930.roa (raw, json)
Hash identifier:          f4mPxUh8WRZFo5+6geqINtaDlej7jRZtr2I7yRmWKhk=
Subject key identifier:   21:D5:D0:DA:26:6F:FA:C3:20:AA:84:17:69:43:17:D7:09:08:4D:3B
Certificate issuer:       /CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
Certificate serial:       2058ED3D3FA094635EF21C59807ABC5417D5B04D
Authority key identifier: 61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139352e302f32342d3234203d3e203532343930.roa
Signing time:             Tue 04 Feb 2025 18:49:06 +0000
ROA not before:           Tue 04 Feb 2025 18:44:06 +0000
ROA not after:            Tue 03 Feb 2026 18:49:06 +0000
asID:                     52490
IP address blocks:        186.96.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 04:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:58:ed:3d:3f:a0:94:63:5e:f2:1c:59:80:7a:bc:54:17:d5:b0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
        Validity
            Not Before: Feb  4 18:44:06 2025 GMT
            Not After : Feb  3 18:49:06 2026 GMT
        Subject: CN=21D5D0DA266FFAC320AA8417694317D709084D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:79:c2:b2:7b:2a:a1:57:f6:d5:64:6d:61:
                    41:39:49:4a:b0:65:a3:c1:b4:60:74:59:80:b0:bd:
                    92:57:15:ce:5a:16:b7:3a:80:45:a0:1d:33:11:ad:
                    7f:d0:17:8f:72:ae:98:df:96:86:f7:f0:12:4b:32:
                    51:c6:41:35:90:d4:cc:42:14:ff:76:cd:c7:c8:9f:
                    a8:a6:65:83:29:82:16:71:50:a6:de:11:67:ce:6c:
                    2d:90:6d:18:5b:7f:77:42:b0:d8:bb:6e:ec:73:6d:
                    22:b1:f5:bf:77:7a:9b:d7:e2:6c:4e:a0:fc:55:33:
                    26:a0:89:d5:7c:8f:8e:f5:64:82:a0:9a:55:b7:10:
                    88:ae:f0:76:09:e3:c5:36:f1:c4:d5:b3:4e:3d:6b:
                    c9:86:f2:1b:3d:a5:51:ed:af:c2:cb:9c:2d:25:5f:
                    a1:c4:96:83:d3:ac:05:38:57:b8:ed:b7:7f:e6:96:
                    ec:77:50:db:ae:4b:ef:26:6c:00:1e:b9:6c:e0:f5:
                    d5:b3:9d:16:3b:a2:4f:27:55:58:e8:67:40:10:63:
                    6c:31:54:9e:74:81:fe:45:31:01:9c:1b:e9:c6:9f:
                    cf:e6:a7:dd:32:7a:f3:df:ef:39:e1:c6:53:de:6f:
                    0c:fb:fd:9d:45:92:5f:3e:75:c1:b1:6d:d7:ef:a7:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D5:D0:DA:26:6F:FA:C3:20:AA:84:17:69:43:17:D7:09:08:4D:3B
            X509v3 Authority Key Identifier:
                keyid:61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139352e302f32342d3234203d3e203532343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:6e:60:ce:32:4e:fd:a0:8d:9c:f3:e0:f5:65:5b:8a:8d:2e:
         a7:ce:3c:64:a8:cc:73:5b:23:d3:30:38:b8:b8:92:1e:34:cd:
         6c:a7:8a:a2:0d:78:f5:5f:3f:8f:f5:3a:18:5a:90:35:f5:39:
         ef:e9:07:29:8a:44:30:bb:49:0a:ef:65:da:99:71:99:49:37:
         57:da:b7:58:d7:24:f8:df:3b:69:ab:12:95:7a:43:73:6c:98:
         48:e9:69:9a:16:ae:9c:f3:96:d4:ea:70:76:fa:57:01:8f:74:
         4f:86:4f:8c:56:dd:e1:68:6e:ff:ad:13:a3:8a:e5:dd:95:b3:
         16:75:68:a3:1a:33:5c:4c:3f:b6:51:79:fd:7c:6f:b6:0c:72:
         4f:7b:33:ed:03:59:c0:8b:60:90:4c:3a:6f:29:02:0a:09:77:
         92:be:0e:d7:ee:cc:29:e4:71:14:d4:03:d9:1d:e4:05:69:ea:
         a3:5d:38:f5:68:66:47:e0:10:b2:bc:46:93:cb:d3:63:ca:7a:
         c3:f2:7b:15:85:a4:63:20:fb:55:23:64:db:98:f1:6e:c1:62:
         4a:ee:17:62:af:45:13:6c:2d:9b:15:ef:e7:f9:de:e4:01:e0:
         fa:a6:87:93:d3:81:3c:4c:d1:57:d1:1a:24:35:33:b1:d1:45:
         75:2c:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:01 2025 by rpki-client