Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3234352e302f32342d3234203d3e20323634373031.roa
File:                     3138362e302e3234352e302f32342d3234203d3e20323634373031.roa (raw, json)
Hash identifier:          +y+4nUDmfNe2RRdEKUM9Eedu5WOy0zpcC53dDVaVHqc=
Subject key identifier:   B7:36:8A:F9:76:6A:DB:F5:AC:64:D5:64:D1:37:22:9B:88:E5:B5:7C
Certificate issuer:       /CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
Certificate serial:       48C7707270C4F39D56522C83CDEE95D811F3E77C
Authority key identifier: EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3234352e302f32342d3234203d3e20323634373031.roa
Signing time:             Tue 04 Feb 2025 20:00:06 +0000
ROA not before:           Tue 04 Feb 2025 19:55:06 +0000
ROA not after:            Tue 03 Feb 2026 20:00:06 +0000
asID:                     264701
IP address blocks:        186.0.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c7:70:72:70:c4:f3:9d:56:52:2c:83:cd:ee:95:d8:11:f3:e7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
        Validity
            Not Before: Feb  4 19:55:06 2025 GMT
            Not After : Feb  3 20:00:06 2026 GMT
        Subject: CN=B7368AF9766ADBF5AC64D564D137229B88E5B57C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:55:8a:8f:25:4e:8a:b0:e8:d4:b8:72:f6:e9:
                    c5:83:41:3d:d8:e8:d8:e5:4e:e8:20:4f:c1:ba:d7:
                    21:5c:f5:ec:4f:65:3d:ec:49:2d:2a:43:a4:79:59:
                    f5:1c:6c:3b:cd:f4:70:b2:2a:6a:6e:94:df:d4:fc:
                    38:25:45:6a:cc:6e:52:91:86:7a:e2:0d:dc:a2:60:
                    70:df:1d:40:b1:72:65:3b:76:bf:f4:bd:ca:56:14:
                    6d:c1:eb:94:8c:a4:9d:ce:ee:5f:86:ff:8b:76:38:
                    48:64:34:d7:37:1e:91:4e:b9:79:13:31:54:18:61:
                    dd:b2:77:44:66:d0:52:d3:4b:b1:6b:58:b9:7d:97:
                    b9:88:b2:6b:80:9f:32:b2:df:e3:9e:59:bc:7d:ab:
                    5e:50:02:18:66:62:ae:34:37:74:c1:fc:bf:50:81:
                    d3:8b:49:12:18:21:a0:14:fd:d3:52:60:69:20:81:
                    96:c2:2d:bc:48:01:f8:db:42:26:3a:55:38:82:f5:
                    d3:a3:42:fa:c1:5c:21:78:74:21:4e:2a:d6:85:68:
                    73:82:bc:75:a6:69:14:c1:2c:54:3d:4a:2c:39:76:
                    5c:0d:b8:e9:b6:57:2f:fe:25:5e:d4:5d:ca:98:9f:
                    89:eb:5b:f5:ed:b6:b0:d6:8b:5a:c4:2a:81:73:64:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:36:8A:F9:76:6A:DB:F5:AC:64:D5:64:D1:37:22:9B:88:E5:B5:7C
            X509v3 Authority Key Identifier:
                keyid:EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3234352e302f32342d3234203d3e20323634373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:93:6d:1e:fa:38:91:e6:3d:2d:e0:95:e9:50:01:96:fc:80:
         3b:9b:e8:71:a4:64:3a:bc:d1:15:f3:7a:75:0a:45:3c:2c:a4:
         95:1b:c8:8e:49:59:44:f5:e6:67:af:05:4c:fe:3b:a0:73:90:
         b7:d3:e9:ec:35:8e:fa:bf:1d:f9:83:d6:c6:92:65:59:cd:58:
         fc:1f:c4:fb:86:da:59:5c:19:03:d4:78:83:c5:e4:8d:38:8a:
         1d:71:a4:ea:07:da:33:af:ee:36:e4:74:d7:b2:c0:c1:9f:4e:
         7d:f1:ad:97:28:00:ef:1b:fb:aa:5d:8a:14:64:95:06:ea:69:
         dd:9e:98:e0:28:bd:68:91:d3:13:6f:87:62:4c:52:8d:e4:e8:
         d8:d4:5b:f4:6b:1d:a2:5a:f1:9d:7a:77:0b:d5:d7:1b:2c:f0:
         66:7c:c2:4d:f7:4f:c8:35:bb:c3:e1:1a:14:ab:9b:b4:6a:a5:
         b0:aa:25:07:16:ab:fa:69:af:e0:3c:b2:ec:95:5d:4c:03:1f:
         e6:5e:c2:31:02:c4:8a:16:05:89:9a:75:8f:25:80:7e:1a:4a:
         8a:bd:7d:a8:04:8c:93:e5:35:2b:82:ea:ef:c9:bb:0f:90:2d:
         80:38:a8:db:31:06:a2:05:f7:f2:cd:74:4f:83:35:83:00:a7:
         16:8a:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:18 2025 by rpki-client