Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139382e302f32342d3234203d3e203532343930.roa
File:                     3138362e39362e3139382e302f32342d3234203d3e203532343930.roa (raw, json)
Hash identifier:          CJkSQjipqrRlGEczALrI1EQvCbCRd2ThuFfxRa5A3pM=
Subject key identifier:   70:95:AC:5B:2B:37:D4:32:53:98:02:9E:A1:85:EB:41:3E:83:42:A8
Certificate issuer:       /CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
Certificate serial:       259BD255E72E31D2EDFEEB8E3EF830F00436D9DF
Authority key identifier: 61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139382e302f32342d3234203d3e203532343930.roa
Signing time:             Tue 04 Feb 2025 18:49:04 +0000
ROA not before:           Tue 04 Feb 2025 18:44:04 +0000
ROA not after:            Tue 03 Feb 2026 18:49:04 +0000
asID:                     52490
IP address blocks:        186.96.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 04:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9b:d2:55:e7:2e:31:d2:ed:fe:eb:8e:3e:f8:30:f0:04:36:d9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
        Validity
            Not Before: Feb  4 18:44:04 2025 GMT
            Not After : Feb  3 18:49:04 2026 GMT
        Subject: CN=7095AC5B2B37D4325398029EA185EB413E8342A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:f4:d8:2c:26:71:95:fd:f3:27:af:ec:25:
                    c9:92:2b:46:10:d2:5b:76:4e:51:0c:79:55:3f:b1:
                    d0:44:2a:45:4b:c4:a9:30:bc:e8:5f:9c:c1:8c:13:
                    25:be:5e:f5:25:d3:ca:18:1b:f9:a9:1f:c6:ee:ff:
                    bd:10:ab:3d:90:6e:0d:05:cc:f6:a5:02:37:38:7e:
                    91:1f:5e:9f:50:a3:a3:fd:8c:a1:cd:7d:69:7c:c2:
                    9f:39:df:35:a5:20:d9:04:bd:54:44:43:c5:56:ee:
                    8a:e4:ce:8b:f8:60:88:8a:a9:f9:ef:fb:4b:5c:a1:
                    24:97:71:d8:24:67:cf:dd:9b:02:73:43:6a:94:dc:
                    e7:f2:6a:41:13:8f:75:3e:2f:a7:52:0b:cb:6d:2a:
                    4f:ee:f6:51:6c:ce:f1:dc:af:82:f7:6e:1a:f0:01:
                    52:87:16:d2:cc:bd:a1:26:ed:12:80:6c:d5:9d:07:
                    e4:fa:f5:82:d1:72:e7:25:21:93:e6:d1:07:87:b6:
                    4b:f5:1b:f0:ae:60:04:85:38:01:5b:fd:5f:e9:92:
                    07:48:29:4f:cf:92:dc:a3:06:6b:84:d3:d6:40:46:
                    d0:99:2b:fb:cd:3f:19:7d:0c:14:22:29:70:dd:0a:
                    f9:ee:6e:35:d6:74:ab:0b:db:6e:cd:80:cd:cf:ec:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:95:AC:5B:2B:37:D4:32:53:98:02:9E:A1:85:EB:41:3E:83:42:A8
            X509v3 Authority Key Identifier:
                keyid:61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139382e302f32342d3234203d3e203532343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:cb:72:e9:e6:9c:7c:84:73:09:41:9b:87:0f:d2:35:4c:17:
         53:0d:40:a2:e6:b9:ba:21:ba:58:bb:ec:60:bf:aa:30:ba:6b:
         0b:80:50:88:b3:80:4b:16:f5:1c:9c:35:26:c8:65:a5:7c:db:
         84:e5:1b:53:86:ec:24:bd:3d:a9:9a:71:23:2c:c6:7c:9c:ff:
         af:59:8e:62:16:e5:81:81:2d:f0:78:7b:12:eb:6b:f0:f7:e2:
         7c:32:3c:89:74:d6:4f:51:59:78:41:5e:f3:d1:85:a4:99:52:
         52:40:5d:92:a4:f5:6c:94:b4:43:cf:ae:86:bf:bb:2f:47:a2:
         53:0b:aa:6a:f3:45:a5:c2:ee:f6:59:a8:2f:a2:05:bc:61:3a:
         5a:d9:e9:e5:bd:57:f8:66:f5:84:e4:ce:8a:35:bc:c1:d9:09:
         a7:27:0a:b5:cf:ad:32:ce:fc:ea:ae:ba:89:05:c6:3f:3a:6e:
         2a:c3:34:84:08:e2:0d:59:cb:6b:03:4a:00:a5:93:8e:26:a5:
         c0:91:8d:80:07:c8:be:15:0d:ca:96:c8:33:49:d3:6c:6d:1b:
         8c:69:da:e1:fd:b4:5d:a9:a5:ba:74:f5:1b:1f:e3:c0:bb:5c:
         e4:4b:ca:87:67:14:7c:06:97:27:a8:49:cc:87:28:b5:cf:82:
         ab:ef:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:00 2025 by rpki-client