Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e3132382e302f31372d3234203d3e203238313138.roa
File:                     3138362e3132302e3132382e302f31372d3234203d3e203238313138.roa (raw, json)
Hash identifier:          4I32bJ+sHYPAMe4B+4hmmOa0dTNVg0GgfgW66+XE21Q=
Subject key identifier:   7C:82:95:06:C2:DC:18:E2:2C:08:7A:A5:21:DC:A8:D8:E9:3C:C1:4A
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       757DC4EEDA65BD318EB98C921F080A40DEC34C86
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e3132382e302f31372d3234203d3e203238313138.roa
Signing time:             Tue 04 Feb 2025 18:46:59 +0000
ROA not before:           Tue 04 Feb 2025 18:41:59 +0000
ROA not after:            Tue 03 Feb 2026 18:46:59 +0000
asID:                     28118
IP address blocks:        186.120.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7d:c4:ee:da:65:bd:31:8e:b9:8c:92:1f:08:0a:40:de:c3:4c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:41:59 2025 GMT
            Not After : Feb  3 18:46:59 2026 GMT
        Subject: CN=7C829506C2DC18E22C087AA521DCA8D8E93CC14A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f3:64:f3:16:22:aa:ca:78:df:9c:1d:68:e5:
                    96:74:e5:0b:13:a9:5b:7e:c6:4e:e9:fa:40:9b:96:
                    9c:e9:01:a2:2c:dc:b6:ef:68:93:4f:45:31:f1:e2:
                    bd:c8:32:3c:e2:89:43:e2:61:b9:b8:ea:c5:24:7f:
                    49:a2:79:32:36:8d:7b:d1:21:7b:52:1b:40:b4:3f:
                    19:29:48:31:1e:dd:74:f1:31:f0:dc:53:c4:ac:ce:
                    2b:92:2f:5f:02:be:be:3d:3a:a2:d3:e4:93:ec:bb:
                    61:c1:af:66:1c:69:56:ab:ea:85:cd:37:87:0a:41:
                    bd:84:bb:37:51:b4:05:7a:2d:f3:27:90:21:1f:59:
                    93:03:3d:a5:fd:ca:94:77:a3:f2:21:53:32:08:23:
                    45:e3:3f:a7:0c:3b:fd:6c:1f:5d:f1:57:d5:ec:c2:
                    6f:b7:89:84:31:3f:35:66:04:5e:a4:7b:fb:14:32:
                    ce:87:fa:62:50:a6:10:c8:25:ef:b5:b5:f0:29:57:
                    92:fb:3e:df:e2:02:5a:82:16:84:7f:4a:42:17:64:
                    51:18:7d:8c:92:b2:2c:80:3d:6a:c9:82:57:b2:49:
                    16:c3:e9:73:0d:18:39:c8:48:de:b2:f7:e0:70:67:
                    94:91:fb:10:92:e5:e6:2f:36:da:69:3f:00:d8:37:
                    8e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:82:95:06:C2:DC:18:E2:2C:08:7A:A5:21:DC:A8:D8:E9:3C:C1:4A
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e3132382e302f31372d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.120.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ba:34:74:0b:d3:24:35:b0:23:bb:50:cc:04:43:74:b3:ae:f1:
         eb:ba:9b:40:90:35:2b:5e:81:af:7a:f6:09:e9:9f:35:49:24:
         fc:f2:6f:6e:70:cd:6d:f4:4e:42:e5:02:7a:d6:7a:17:77:39:
         2f:12:59:65:7b:f1:fa:f7:c3:c9:53:0b:ae:a2:74:a6:99:6d:
         79:31:b7:34:e1:68:8a:26:3f:9a:24:29:2d:0d:a6:3e:20:51:
         51:eb:55:de:6d:eb:9f:02:91:b4:32:de:9c:4d:bb:a1:b3:42:
         aa:56:4a:4e:6c:4c:69:7d:f1:d0:ad:bd:1e:6d:51:39:17:72:
         a6:9c:ff:0f:d5:d4:97:27:e6:55:dc:b6:93:38:7a:bc:84:94:
         b4:3d:9a:8a:d2:4d:60:68:fc:b6:8b:1a:ce:21:6e:5e:22:33:
         1f:2b:32:9b:70:99:00:62:5c:6c:4e:02:12:42:6c:6b:2d:15:
         73:31:75:32:86:5c:5d:55:ca:36:a4:4f:da:e4:55:f9:57:b7:
         ec:26:3a:c7:dd:6c:61:1d:59:aa:12:a7:e8:d8:12:51:d2:5b:
         87:a0:22:30:c8:cf:ea:16:2b:d6:b7:7d:f2:4b:bc:89:ce:17:
         ce:62:60:a3:e5:98:69:d6:13:35:e9:87:02:3b:cf:30:f8:52:
         3e:a7:dd:c2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdX3E7tplvTGOuYySHwgKQN7DTIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2MTJFNUNCNzFERDQ3QzAyMTlGNDA0N0Y0NEFGNDMy
NjBBRTY5QjAeFw0yNTAyMDQxODQxNTlaFw0yNjAyMDMxODQ2NTlaMDMxMTAvBgNV
BAMTKDdDODI5NTA2QzJEQzE4RTIyQzA4N0FBNTIxRENBOEQ4RTkzQ0MxNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk82TzFiKqynjfnB1o5ZZ05QsT
qVt+xk7p+kCblpzpAaIs3LbvaJNPRTHx4r3IMjziiUPiYbm46sUkf0mieTI2jXvR
IXtSG0C0PxkpSDEe3XTxMfDcU8SsziuSL18Cvr49OqLT5JPsu2HBr2YcaVar6oXN
N4cKQb2EuzdRtAV6LfMnkCEfWZMDPaX9ypR3o/IhUzIII0XjP6cMO/1sH13xV9Xs
wm+3iYQxPzVmBF6ke/sUMs6H+mJQphDIJe+1tfApV5L7Pt/iAlqCFoR/SkIXZFEY
fYySsiyAPWrJgleySRbD6XMNGDnISN6y9+BwZ5SR+xCS5eYvNtppPwDYN443AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfIKVBsLcGOIsCHqlIdyo2Ok8wUowHwYDVR0j
BBgwFoAUCWEuXLcd1HwCGfQEf0SvQyYK5pswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMEU3QTkxMzZGMURBRDI2NEUwNEI2NzM2QkZBRkE3MjNC
QkYzNEQ2MTVCRjcxMkU5ODkxNkYxREVEQzg2MDM1LzAvMDk2MTJFNUNCNzFERDQ3
QzAyMTlGNDA0N0Y0NEFGNDMyNjBBRTY5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTYxMkU1Q0I3MURENDdDMDIx
OUY0MDQ3RjQ0QUY0MzI2MEFFNjlCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzBFN0E5MTM2RjFEQUQyNjRFMDRCNjczNkJGQUZBNzIzQkJGMzRENjE1
QkY3MTJFOTg5MTZGMURFREM4NjAzNS8wLzMxMzgzNjJlMzEzMjMwMmUzMTMyMzgy
ZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjM4MzEzMTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHuniA
MA0GCSqGSIb3DQEBCwUAA4IBAQC6NHQL0yQ1sCO7UMwEQ3SzrvHruptAkDUrXoGv
evYJ6Z81SST88m9ucM1t9E5C5QJ61noXdzkvEllle/H698PJUwuuonSmmW15Mbc0
4WiKJj+aJCktDaY+IFFR61XebeufApG0Mt6cTbuhs0KqVkpObExpffHQrb0ebVE5
F3KmnP8P1dSXJ+ZV3LaTOHq8hJS0PZqK0k1gaPy2ixrOIW5eIjMfKzKbcJkAYlxs
TgISQmxrLRVzMXUyhlxdVco2pE/a5FX5V7fsJjrH3WxhHVmqEqfo2BJR0luHoCIw
yM/qFivWt33yS7yJzhfOYmCj5Zhp1hM16YcCO88w+FI+p93C
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:50 2025 by rpki-client