Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3138362e32372e3132382e302f31372d3234203d3e203130323939.roa
File:                     3138362e32372e3132382e302f31372d3234203d3e203130323939.roa (raw, json)
Hash identifier:          +8K/2aXYG1uuw9J6vKl4enSvswldpSrQAOGoq66GI6c=
Subject key identifier:   65:85:DF:7A:98:3A:4F:C4:18:3B:07:1B:1D:98:0D:53:CD:67:08:A0
Certificate issuer:       /CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Certificate serial:       6495492C836F198B4A8724D27DB72C0E8491E4B8
Authority key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3138362e32372e3132382e302f31372d3234203d3e203130323939.roa
Signing time:             Tue 04 Feb 2025 18:03:13 +0000
ROA not before:           Tue 04 Feb 2025 17:58:13 +0000
ROA not after:            Tue 03 Feb 2026 18:03:13 +0000
asID:                     10299
IP address blocks:        186.27.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:95:49:2c:83:6f:19:8b:4a:87:24:d2:7d:b7:2c:0e:84:91:e4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
        Validity
            Not Before: Feb  4 17:58:13 2025 GMT
            Not After : Feb  3 18:03:13 2026 GMT
        Subject: CN=6585DF7A983A4FC4183B071B1D980D53CD6708A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:68:26:87:c4:d8:7a:f9:84:92:e5:1a:79:18:
                    13:3a:31:78:67:5e:b4:de:18:ba:01:e6:52:e2:c4:
                    81:cd:5d:92:a2:d1:53:08:bb:a0:ee:5f:8b:a5:d4:
                    4d:4c:cb:c3:fd:40:c2:87:ae:0e:21:aa:bb:86:77:
                    ca:6c:5b:0b:a9:f7:97:27:31:3f:f6:dd:75:20:ce:
                    45:7a:c2:e5:a6:7f:e4:d5:ba:32:d9:22:ab:12:3a:
                    86:f1:15:0f:cf:58:aa:ce:87:80:69:26:6b:c2:9a:
                    43:50:d4:8a:4c:97:d2:30:e5:3b:02:74:02:b2:2c:
                    a6:c4:a8:2e:e7:84:18:b0:19:d1:16:1e:4b:69:13:
                    10:49:99:f2:8d:83:ce:92:51:7b:0d:00:82:c5:be:
                    c9:64:b3:60:44:d5:18:80:c0:df:8c:a5:e4:45:5a:
                    7a:6b:6e:29:db:ba:2d:7c:ad:9a:ab:b8:0d:a7:93:
                    2d:55:3b:9a:61:5c:52:9a:28:f2:12:2a:0a:88:6d:
                    93:06:af:68:ec:72:32:6a:4b:53:1d:a5:8a:1f:2c:
                    97:d1:3c:a2:b3:93:d6:77:a5:c4:8d:e6:4e:d4:32:
                    ad:3a:59:20:44:66:ef:a5:3c:db:d2:bd:1b:5e:11:
                    8d:d0:9e:e9:92:6a:94:9c:97:0d:bc:cb:e0:72:6d:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:85:DF:7A:98:3A:4F:C4:18:3B:07:1B:1D:98:0D:53:CD:67:08:A0
            X509v3 Authority Key Identifier:
                keyid:9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3138362e32372e3132382e302f31372d3234203d3e203130323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.27.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:bc:54:dd:14:0c:d8:05:bd:d6:11:b8:8b:09:60:fc:09:
         40:ac:37:6d:d0:21:57:cf:25:ea:33:c1:2d:59:4f:0a:ec:3c:
         b7:37:77:b4:6a:0f:22:7e:ad:f0:7a:d4:41:8b:9d:c3:e0:45:
         1e:24:67:68:af:a6:c4:6b:de:9c:6d:5d:e4:75:22:54:35:bc:
         d7:e5:7e:89:09:60:c2:1d:6e:9c:11:cc:0d:1c:fa:2f:b5:1a:
         95:25:f1:63:7c:a1:4d:b8:0d:28:09:4b:a0:15:96:93:d8:67:
         11:19:fc:b8:ac:9b:93:d7:77:49:8b:ef:4b:13:3c:dc:6b:c6:
         1d:f0:e7:3b:77:35:3f:9e:c0:44:31:3b:ff:6c:0b:ae:70:df:
         62:99:ea:42:29:a6:bb:ae:72:50:95:87:2e:93:1b:70:70:de:
         86:9c:33:51:f9:af:7f:63:8c:a9:61:8e:b3:a6:2c:89:cb:63:
         d6:94:9a:fe:37:9a:b0:2f:31:ff:f5:42:9f:cc:c2:3f:61:be:
         27:8b:94:c1:ba:1b:a4:9a:43:54:93:a1:b2:2f:f6:a0:b2:97:
         2c:fb:c9:4c:46:f7:29:35:b6:0c:d3:db:ee:09:2b:ee:13:17:
         97:c8:fc:5e:6d:8b:2b:c1:bd:88:5f:36:24:d1:2a:b0:59:aa:
         3e:91:e3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:12:31 2025 by rpki-client