Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e203131333932.roa
File:                     3138362e302e3135322e302f32322d3234203d3e203131333932.roa (raw, json)
Hash identifier:          4BVHQHQ654pki4SqE7CRMY6rfA2Z7iQfJPz/dhZ4vvE=
Subject key identifier:   C2:D2:9E:C2:24:A4:61:EE:C6:E9:47:0E:5C:7A:AE:C8:3F:E0:EA:E8
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       6ED56589B3BA2A9EA23B5AE2D1BE8F413A7C2048
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e203131333932.roa
Signing time:             Tue 04 Feb 2025 18:08:56 +0000
ROA not before:           Tue 04 Feb 2025 18:03:56 +0000
ROA not after:            Tue 03 Feb 2026 18:08:56 +0000
asID:                     11392
IP address blocks:        186.0.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d5:65:89:b3:ba:2a:9e:a2:3b:5a:e2:d1:be:8f:41:3a:7c:20:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Feb  4 18:03:56 2025 GMT
            Not After : Feb  3 18:08:56 2026 GMT
        Subject: CN=C2D29EC224A461EEC6E9470E5C7AAEC83FE0EAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:ff:3f:74:f2:cd:16:5c:bb:88:66:d7:46:
                    ab:d2:e9:5b:24:0d:cb:86:72:ed:da:41:a8:94:3d:
                    7b:76:de:13:40:17:5f:c0:96:2b:64:9f:d7:c4:3d:
                    78:ad:33:88:a2:aa:3f:02:c1:22:b1:d5:6c:82:3e:
                    3e:37:8f:52:60:bd:28:15:1e:cd:77:af:a2:32:09:
                    dd:d2:1a:8e:85:af:ca:69:0a:98:f4:d1:3f:76:d6:
                    34:f2:77:a0:21:0e:09:60:80:49:89:5c:e7:2e:8e:
                    a7:18:d3:9d:bd:58:a2:5b:33:a7:6d:e0:1b:b8:8c:
                    68:57:8d:13:fb:77:0b:14:3b:40:e1:f0:8f:3e:1e:
                    88:f7:5a:66:81:57:aa:37:6e:2f:d1:a5:b3:fe:7a:
                    31:4a:67:18:86:82:13:c6:96:90:94:3e:c7:5c:06:
                    49:9e:be:f2:aa:26:33:54:62:4d:08:99:bb:a2:14:
                    5c:95:26:25:a5:ff:6c:7f:8a:63:31:7e:8d:39:cd:
                    2d:b8:ef:a2:82:94:c9:67:e1:de:56:3f:17:ab:57:
                    3b:45:69:2c:26:0c:d9:94:a4:13:7d:14:37:e6:62:
                    a5:33:2a:37:26:06:35:39:58:65:41:cb:71:0f:1f:
                    7c:9b:b0:e0:89:97:91:d3:2d:85:58:e7:0e:a2:81:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D2:9E:C2:24:A4:61:EE:C6:E9:47:0E:5C:7A:AE:C8:3F:E0:EA:E8
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e203131333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:43:f6:21:f1:06:53:8c:ec:1c:13:50:54:1d:a6:9a:20:26:
         6e:dc:78:1b:82:05:7a:fa:8d:ef:13:8c:fd:50:b0:c8:48:96:
         08:b4:f3:2f:1c:d5:14:88:8f:7a:43:39:3d:ba:98:73:45:c5:
         ad:d8:53:f2:d5:1e:7f:56:3d:ab:39:1e:24:81:af:f5:a0:bc:
         24:c4:d3:3d:f8:90:4b:41:c9:04:68:ec:55:ec:cd:e9:c2:4b:
         5d:1e:6d:f1:bc:c6:8d:a2:c1:32:5d:02:05:dd:e9:1f:c7:6a:
         82:af:b3:d5:5e:2b:9b:c0:54:2f:40:df:3c:4c:59:86:ad:e1:
         31:34:6d:4c:7d:fe:98:4c:99:6d:f4:91:9c:62:4a:6d:99:6d:
         44:6f:a0:0c:01:6c:32:5b:c1:0e:5b:37:4c:8a:03:db:de:c3:
         b8:2d:5d:57:f2:e2:ca:f2:1c:96:fb:b7:15:69:cc:fb:28:67:
         5a:69:19:b8:48:30:9a:fe:a3:9c:fe:5c:10:6a:d8:8d:a7:5a:
         5f:b1:dd:e4:fc:f3:b5:f5:ab:97:80:85:82:66:7f:f4:63:7e:
         20:96:79:09:b0:fa:ec:19:00:f0:70:60:0b:56:52:e2:16:ce:
         30:6b:28:dc:65:8a:e8:db:65:66:b2:f7:a3:c9:78:22:61:a4:
         28:00:cb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:32 2025 by rpki-client