Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139372e302f32342d3234203d3e203532343930.roa
File:                     3138362e39362e3139372e302f32342d3234203d3e203532343930.roa (raw, json)
Hash identifier:          1spPx1HaduXq6V2BxdFfswLFbiqLYYF/Q8AUf+ejO+M=
Subject key identifier:   79:B0:81:63:71:F6:3A:27:E2:28:BD:5C:77:AA:6A:59:87:76:E9:D4
Certificate issuer:       /CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
Certificate serial:       2EF58BED34D8815F04D844A413B47B21A34523A0
Authority key identifier: 61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139372e302f32342d3234203d3e203532343930.roa
Signing time:             Tue 04 Feb 2025 18:49:06 +0000
ROA not before:           Tue 04 Feb 2025 18:44:06 +0000
ROA not after:            Tue 03 Feb 2026 18:49:06 +0000
asID:                     52490
IP address blocks:        186.96.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 04:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f5:8b:ed:34:d8:81:5f:04:d8:44:a4:13:b4:7b:21:a3:45:23:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
        Validity
            Not Before: Feb  4 18:44:06 2025 GMT
            Not After : Feb  3 18:49:06 2026 GMT
        Subject: CN=79B0816371F63A27E228BD5C77AA6A598776E9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:ae:e0:67:b5:fb:8e:f5:e6:84:cb:b8:2c:
                    70:2f:16:a1:06:c3:b1:29:7c:9d:cb:71:1e:1e:65:
                    31:c8:d6:60:7d:37:ca:f2:ba:2a:48:41:7d:21:d2:
                    65:0f:14:79:c4:f2:da:a8:e9:f6:ba:11:f4:34:24:
                    6e:9a:19:96:80:98:4e:9a:24:c8:e8:cb:36:b9:7f:
                    3b:5d:d7:c9:cb:4e:8d:57:c1:c5:3a:a1:09:48:99:
                    12:94:65:c9:bd:37:fb:3c:2a:24:0d:17:84:8f:de:
                    11:33:13:4f:04:b2:41:2c:f7:d7:cc:54:fd:83:5d:
                    76:73:07:53:d4:df:af:c9:e2:a4:a2:ef:7e:96:42:
                    e8:55:0c:b0:ca:d1:2b:b5:cd:8d:5c:2b:d0:67:ae:
                    ca:ca:45:c6:91:46:e2:92:fc:01:b9:6d:b7:9c:96:
                    67:ee:5b:cd:97:e2:82:ae:e5:5e:be:c4:f6:a8:42:
                    04:7a:64:37:3e:ee:3b:94:9c:0e:96:77:63:22:48:
                    b8:37:f1:87:f8:06:0e:c9:f3:d0:e0:94:0b:a4:0a:
                    c5:b0:0c:2a:e4:f4:5f:bb:3e:d9:0b:7f:40:fe:f5:
                    04:3c:35:cc:a4:78:38:3e:15:ce:c3:1a:79:a5:38:
                    1c:48:9a:0b:a6:20:e1:74:5b:7c:f7:a5:68:eb:7a:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B0:81:63:71:F6:3A:27:E2:28:BD:5C:77:AA:6A:59:87:76:E9:D4
            X509v3 Authority Key Identifier:
                keyid:61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139372e302f32342d3234203d3e203532343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ba:4e:6c:5d:5d:44:0a:26:df:7b:c7:cf:60:f8:2f:19:40:
         b6:45:0d:a1:e2:d5:91:96:44:9b:a5:97:31:84:0e:74:63:b8:
         e5:32:0a:f3:2a:73:4c:61:f0:10:77:91:a3:5f:98:ed:75:56:
         72:31:65:94:49:a6:68:48:19:30:e3:ba:11:8c:53:fc:24:a7:
         19:db:b6:fc:18:a7:f5:74:71:ae:e3:36:60:3c:4f:ae:0f:a2:
         12:45:8d:10:08:98:b2:01:af:80:72:64:00:e8:79:54:86:43:
         84:93:33:3b:f9:b4:3a:13:87:46:00:ac:00:e5:39:12:10:03:
         fc:24:df:67:07:ac:53:b6:d0:ca:03:f8:3c:27:b9:4b:32:fa:
         9d:8d:47:4f:79:2a:ed:04:c1:c1:64:1e:f3:d2:58:b2:d2:99:
         e2:a9:99:7c:fb:e2:de:39:24:d3:ea:0d:76:99:b9:e5:f7:ce:
         aa:fd:58:97:1a:a1:6d:92:9b:7d:18:38:54:84:c9:49:6b:13:
         4d:f2:e9:0a:2d:40:5d:9c:44:67:54:ff:ec:a5:35:e9:dd:44:
         f6:06:1f:3a:3c:77:38:c2:8b:21:5d:08:17:8a:fe:1d:5f:a6:
         f9:cd:42:99:3d:da:bc:5e:0f:63:d2:84:1f:0f:31:2b:89:f3:
         59:5f:82:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:51:40 2025 by rpki-client