Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3138372e3132302e3137322e302f32322d3234203d3e20323635363238.roa
File:                     3138372e3132302e3137322e302f32322d3234203d3e20323635363238.roa (raw, json)
Hash identifier:          FIVqV+rTwXtb4UbCvtpP0s/9cdKOharFRnPmt+NY3F0=
Subject key identifier:   23:80:16:8C:1D:56:D9:73:78:DB:66:C9:BB:52:FF:99:60:BB:90:B3
Certificate issuer:       /CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
Certificate serial:       3249E372ABB58FCF9909ED071A4916D69AA86E7F
Authority key identifier: 51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3138372e3132302e3137322e302f32322d3234203d3e20323635363238.roa
Signing time:             Mon 19 May 2025 23:19:44 +0000
ROA not before:           Mon 19 May 2025 23:14:44 +0000
ROA not after:            Mon 18 May 2026 23:19:44 +0000
asID:                     265628
IP address blocks:        187.120.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:49:e3:72:ab:b5:8f:cf:99:09:ed:07:1a:49:16:d6:9a:a8:6e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
        Validity
            Not Before: May 19 23:14:44 2025 GMT
            Not After : May 18 23:19:44 2026 GMT
        Subject: CN=2380168C1D56D97378DB66C9BB52FF9960BB90B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:d0:00:c7:b6:33:be:59:75:a6:74:8b:a3:
                    87:67:9c:28:5a:7c:05:bf:07:84:36:92:06:b6:65:
                    f3:fb:bf:8e:4d:46:66:8d:90:2d:04:c3:11:08:df:
                    ad:04:22:aa:60:06:4d:70:98:f5:a7:7f:58:2f:a2:
                    51:ee:1f:d4:9c:ca:ee:52:41:05:9c:4d:90:40:0f:
                    9b:20:9d:9a:10:29:07:ea:bd:40:f7:00:1e:4b:25:
                    c2:a7:70:25:08:f0:94:8d:e0:a7:78:33:a1:d3:fd:
                    37:c5:c8:43:aa:49:6e:50:b8:07:86:bc:c9:35:4c:
                    82:8b:6b:90:2c:11:44:48:eb:99:5e:37:d0:61:f2:
                    3e:4d:64:f4:e8:45:19:90:44:bd:5d:84:eb:29:eb:
                    18:7b:33:5c:46:fb:d7:02:b0:ab:0b:1e:ba:50:ef:
                    ae:b7:d5:88:dc:9b:4e:6f:53:f6:66:a3:f8:09:1c:
                    b5:01:7e:f4:82:76:fd:ec:b5:c1:f8:ae:cc:9b:93:
                    7b:6c:db:f6:5f:b7:ca:96:b3:c2:87:93:17:84:a6:
                    2d:47:74:d6:dd:31:8e:94:66:d2:81:7b:26:a6:77:
                    25:49:a9:bf:8f:34:6b:c6:17:a4:4a:db:16:5b:b2:
                    ec:6f:b9:5c:ff:6f:3a:51:47:03:d7:88:c5:34:2d:
                    35:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:80:16:8C:1D:56:D9:73:78:DB:66:C9:BB:52:FF:99:60:BB:90:B3
            X509v3 Authority Key Identifier:
                keyid:51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3138372e3132302e3137322e302f32322d3234203d3e20323635363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dc:3c:41:62:19:4c:06:a4:84:86:b6:1f:c7:74:9d:7c:78:11:
         82:da:c3:50:54:06:4a:43:c2:a3:ed:59:b4:89:49:26:29:ca:
         2c:16:18:0b:89:b4:06:e5:ac:dc:7e:7f:3e:10:76:69:90:ba:
         29:2d:39:01:be:0f:a7:d5:a6:a9:92:4f:8b:87:63:78:3e:56:
         49:8b:40:45:95:2a:f0:9f:f1:f5:8d:35:0c:c2:53:cf:04:5a:
         5d:2e:38:9e:5c:16:6d:07:1f:cb:64:13:35:d8:8a:9f:11:a7:
         38:b5:0c:fb:40:42:b6:66:72:02:65:ff:c9:4a:64:05:76:a6:
         fd:72:49:d3:7f:af:a6:24:d9:f1:5d:31:c4:6d:eb:c8:3f:d9:
         9f:8f:fd:da:1a:fa:02:db:74:ff:86:20:9e:1f:8e:a9:73:c0:
         e4:7c:5a:42:7a:60:b6:e5:78:a2:78:4d:db:40:c6:24:e5:51:
         4b:63:76:d3:a0:6b:44:6a:06:38:57:6d:97:9f:ac:f0:65:21:
         d2:4b:45:b9:98:11:f6:dd:15:b3:26:11:ae:fc:6e:99:dd:ce:
         c9:ee:6f:95:d4:84:51:c2:a3:dc:f4:fa:9e:90:e5:36:5f:61:
         c7:2f:6c:3e:ab:d9:1e:36:42:05:46:42:72:a6:e4:a3:f8:47:
         dc:1a:a9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:05:44 2025 by rpki-client