Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3232342e31362f32382d3238203d3e20323734313139.roa
File:                     3138362e302e3232342e31362f32382d3238203d3e20323734313139.roa (raw, json)
Hash identifier:          Q3EQn3Bs9OxTpFvLAvfxDLcdRWzYJhGCo94nAazXAHE=
Subject key identifier:   91:BA:3D:32:F5:AB:94:A4:64:F8:8D:E8:D2:59:F1:15:15:3E:EB:00
Certificate issuer:       /CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
Certificate serial:       1317205C0F9D37AA8AAC45EA3A4892B6AB77E432
Authority key identifier: EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3232342e31362f32382d3238203d3e20323734313139.roa
Signing time:             Sun 18 May 2025 12:15:00 +0000
ROA not before:           Sun 18 May 2025 12:10:00 +0000
ROA not after:            Sun 17 May 2026 12:15:00 +0000
asID:                     274119
IP address blocks:        186.0.224.16/28 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 04:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:17:20:5c:0f:9d:37:aa:8a:ac:45:ea:3a:48:92:b6:ab:77:e4:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
        Validity
            Not Before: May 18 12:10:00 2025 GMT
            Not After : May 17 12:15:00 2026 GMT
        Subject: CN=91BA3D32F5AB94A464F88DE8D259F115153EEB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:f8:65:68:8d:73:47:7b:46:60:32:46:6d:
                    53:6e:00:a1:42:1a:fa:97:d2:9d:09:e1:ed:3d:0b:
                    6a:a1:bd:f6:cb:43:77:31:15:6f:94:20:8f:bc:90:
                    4d:2a:65:13:e2:a1:1e:13:01:76:ba:e2:15:10:34:
                    de:4e:46:c4:73:a1:b4:5e:9b:57:c8:e5:48:50:9d:
                    93:69:74:e6:10:4e:8a:97:54:60:5e:30:42:6f:cf:
                    19:52:3e:4c:8d:75:10:d6:b9:9c:d1:78:5f:c7:8a:
                    cf:3c:1c:58:92:bf:6e:c8:a9:60:93:4c:f8:ac:db:
                    4b:4b:da:9a:20:8e:c1:8f:70:1e:28:5b:8b:c1:8c:
                    6f:36:dd:60:14:83:55:b9:2f:49:2a:8c:4a:ee:7a:
                    d2:9e:a4:d4:b0:4f:aa:b2:b0:8f:db:31:11:b5:77:
                    d7:c2:9e:e6:cc:de:1e:e9:80:cc:d1:ed:d7:0d:ca:
                    16:a0:20:ff:aa:6c:e6:29:54:33:06:97:fd:6a:7f:
                    7e:ff:e2:50:e8:fd:6c:78:0b:19:80:0f:e3:93:9f:
                    3b:e6:70:cd:ef:b0:b9:69:78:1b:cd:7c:f9:42:ef:
                    3e:f5:b0:c0:88:04:90:3f:d8:d5:f9:08:68:2c:d6:
                    ea:11:5a:9e:af:2b:df:44:dc:66:84:4a:73:95:0a:
                    39:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BA:3D:32:F5:AB:94:A4:64:F8:8D:E8:D2:59:F1:15:15:3E:EB:00
            X509v3 Authority Key Identifier:
                keyid:EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3232342e31362f32382d3238203d3e20323734313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.224.16/28

    Signature Algorithm: sha256WithRSAEncryption
         5f:e1:a6:9a:39:eb:3b:87:51:bf:44:81:ef:df:1f:f3:55:2d:
         5d:d3:9e:45:5c:74:2d:ae:8c:17:79:11:29:c6:a9:0b:c1:a3:
         ce:c1:61:84:c9:c9:fb:1e:d7:c0:75:88:78:2c:5f:f4:48:0c:
         a7:da:c4:88:d6:9c:ea:f8:42:37:98:02:12:a4:2f:af:b2:08:
         bd:c6:43:9b:c7:ce:fe:f7:88:0f:b0:31:43:31:14:b4:fe:ba:
         ee:8d:58:ab:32:97:eb:32:03:df:4f:27:f0:aa:96:be:2e:f3:
         fc:89:be:c2:df:36:bb:7e:ba:8a:54:61:36:d0:89:db:00:80:
         08:bd:32:bf:e3:16:9f:31:a2:03:7c:21:ce:95:ca:af:3c:72:
         c2:74:9c:21:fb:5b:b8:53:0a:85:55:16:ee:61:d5:86:25:21:
         ff:14:c7:69:47:d8:eb:12:14:28:97:71:b9:bd:5b:c9:de:9a:
         9c:b5:1e:d1:af:e6:1d:af:99:14:f6:48:fc:5b:ed:a3:0b:29:
         da:06:02:a6:f9:a6:cb:39:87:06:3b:88:e9:b8:c9:e3:e3:6a:
         7e:c1:b8:85:0f:44:13:cf:5f:73:93:3f:0c:c6:32:a5:49:78:
         d5:56:64:70:bd:51:57:97:ba:92:39:e9:cf:22:48:88:3c:80:
         21:ae:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:35:45 2025 by rpki-client