Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3138362e3138382e302e302f31372d3234203d3e203231383236.roa
File:                     3138362e3138382e302e302f31372d3234203d3e203231383236.roa (raw, json)
Hash identifier:          6j3NvSYFcdank4KFxZUioM6VCx6QK7KYnKK6dNJlYiE=
Subject key identifier:   47:09:E8:9C:E1:F2:44:41:2B:27:D4:9E:A8:C8:BA:E4:C6:97:E3:8C
Certificate issuer:       /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial:       07098036858098F650E84CFEF77706E5D86E4C56
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3138362e3138382e302e302f31372d3234203d3e203231383236.roa
Signing time:             Tue 04 Feb 2025 18:44:33 +0000
ROA not before:           Tue 04 Feb 2025 18:39:33 +0000
ROA not after:            Tue 03 Feb 2026 18:44:33 +0000
asID:                     21826
IP address blocks:        186.188.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:09:80:36:85:80:98:f6:50:e8:4c:fe:f7:77:06:e5:d8:6e:4c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
        Validity
            Not Before: Feb  4 18:39:33 2025 GMT
            Not After : Feb  3 18:44:33 2026 GMT
        Subject: CN=4709E89CE1F244412B27D49EA8C8BAE4C697E38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:b4:dc:78:ab:df:e4:54:63:9b:1a:3d:69:
                    97:d9:10:78:eb:1f:af:bf:18:f7:52:fa:88:24:b1:
                    45:b8:2e:5d:c5:8a:6c:61:33:67:67:91:83:24:0d:
                    e3:b6:0c:01:a7:78:db:19:be:db:45:db:f1:40:01:
                    56:69:a9:78:5c:f0:8c:8a:d9:6f:e6:f4:51:a6:39:
                    dc:77:c2:77:ff:90:49:aa:15:ad:96:29:b5:37:f3:
                    25:00:16:e6:38:e0:28:78:d2:47:27:af:83:8e:a7:
                    0a:cd:9a:05:a9:ea:ec:8e:05:b3:ff:fe:2a:1c:e9:
                    f6:19:5c:71:92:de:00:5a:f4:26:e4:f0:0f:e2:0d:
                    61:55:7c:f7:78:43:f0:47:dd:d5:83:41:45:bf:77:
                    84:da:8b:7b:82:ba:e4:a2:d8:9c:e7:c8:2d:b0:f2:
                    6f:2a:22:c6:3f:28:e6:5f:92:18:cf:37:eb:c0:17:
                    3c:b9:4b:de:c2:6c:f5:15:54:e6:11:19:33:3a:a0:
                    00:65:72:d3:2f:09:a1:14:72:6b:bd:d8:f2:ce:e8:
                    64:97:c4:f8:5a:91:12:5c:ba:4b:4e:63:9a:20:a1:
                    40:aa:02:eb:1b:7f:78:bc:51:ff:48:2a:d4:60:82:
                    d0:2f:fb:ef:9a:ff:cd:3b:29:f3:ed:f1:bb:43:ac:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:09:E8:9C:E1:F2:44:41:2B:27:D4:9E:A8:C8:BA:E4:C6:97:E3:8C
            X509v3 Authority Key Identifier:
                keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3138362e3138382e302e302f31372d3234203d3e203231383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.188.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b1:46:fe:4f:30:9b:3f:a1:41:87:09:08:e1:64:af:bd:79:33:
         c8:75:ed:0f:92:b2:ad:8c:97:43:f3:cb:6c:b5:57:09:df:1a:
         46:e3:a3:ad:b7:20:29:2b:4b:5c:3e:77:1b:89:6c:50:f8:cf:
         8d:58:be:38:70:70:94:66:b7:da:af:ec:8b:8c:2d:22:02:b5:
         cb:1c:67:3f:2d:2d:dd:0c:cb:24:fa:57:7f:2b:3e:3b:29:29:
         bc:ee:12:19:60:51:bf:d7:ca:c9:c1:f0:77:2e:b9:50:85:13:
         50:f5:fe:09:e1:03:82:63:f1:ee:24:85:ce:7c:bf:d3:5d:0e:
         68:cc:fe:8f:e2:80:2e:d3:23:2c:80:2d:1f:aa:bc:83:ca:d0:
         7d:d2:62:00:82:fd:43:69:51:8f:49:fd:62:5a:e8:2b:f8:e4:
         bd:86:e7:ef:4c:78:51:02:3b:ed:16:f8:9a:9c:8d:6b:83:35:
         33:b0:8f:36:de:b7:65:f5:3c:db:cd:81:df:38:16:7e:ff:4f:
         4b:28:30:63:4f:70:66:79:99:06:a4:77:c9:8f:c6:30:0b:4c:
         17:bb:18:c0:d4:87:54:ae:6e:f6:2d:66:60:b6:78:1f:d2:df:
         c8:9a:1c:c5:6d:5b:91:38:f1:ab:53:38:84:b7:a2:2d:0f:11:
         9c:09:da:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:19 2025 by rpki-client