Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3135302e302e302f31362d3234203d3e203238313138.roa
File:                     3138362e3135302e302e302f31362d3234203d3e203238313138.roa (raw, json)
Hash identifier:          foS+0nJiXi0CWZ5VEcBnpOfNpXHfOLC2AGry/NEfpsQ=
Subject key identifier:   20:D6:6A:12:35:58:14:AA:8C:33:88:61:79:23:75:DB:7A:70:E0:18
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       6F000BFF41ECD1A7B972AA0C95B6D9FE93306DE4
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3135302e302e302f31362d3234203d3e203238313138.roa
Signing time:             Tue 04 Feb 2025 18:47:01 +0000
ROA not before:           Tue 04 Feb 2025 18:42:01 +0000
ROA not after:            Tue 03 Feb 2026 18:47:01 +0000
asID:                     28118
IP address blocks:        186.150.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:00:0b:ff:41:ec:d1:a7:b9:72:aa:0c:95:b6:d9:fe:93:30:6d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:42:01 2025 GMT
            Not After : Feb  3 18:47:01 2026 GMT
        Subject: CN=20D66A12355814AA8C338861792375DB7A70E018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:8e:fb:61:2d:15:d5:ae:a4:ff:b9:bf:30:
                    24:e4:07:2b:78:0f:a0:43:af:3d:1d:9e:07:63:8f:
                    77:67:8a:f4:0c:a6:2a:a1:ed:de:e2:23:8c:f0:4e:
                    cb:a5:f3:db:87:4a:43:a5:b7:d9:f6:58:34:bc:bd:
                    61:fa:c3:40:1a:59:69:38:39:23:b7:52:34:69:b8:
                    d8:e6:9d:d6:a7:13:5b:3f:ab:22:d8:1f:eb:ba:46:
                    1d:cf:ed:86:6c:57:cb:4d:ac:22:9b:e7:78:9b:b6:
                    e0:54:5f:bd:f9:e4:12:b9:ae:0f:41:49:0c:7e:33:
                    be:85:be:9d:ff:8c:ff:a0:9e:bf:9a:28:bc:69:b0:
                    84:0b:4b:33:85:a9:ac:2f:dc:7e:a3:75:5a:79:c3:
                    2f:c5:0d:04:87:ff:23:93:52:8a:f8:8f:c7:73:0a:
                    07:b4:18:a0:90:44:26:e6:d8:f9:69:63:9e:7a:18:
                    ed:29:b1:06:d8:51:1d:fc:96:08:61:75:00:ce:92:
                    40:2b:6c:51:5b:c5:74:12:1b:d5:8a:10:6b:a8:14:
                    13:c7:cc:6a:ef:c9:58:ea:f4:fd:c4:60:ee:eb:f1:
                    94:b2:f1:87:7e:68:a4:bf:76:b2:2a:b7:a6:4f:69:
                    22:54:e9:d3:07:31:fe:9c:5d:18:e2:14:0f:11:41:
                    c8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D6:6A:12:35:58:14:AA:8C:33:88:61:79:23:75:DB:7A:70:E0:18
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3135302e302e302f31362d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.150.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:f9:c7:3f:54:b3:fc:a9:94:db:4c:db:16:2b:94:cf:a5:80:
         40:e6:5a:89:46:91:be:48:dc:0d:2e:e5:cb:3d:91:a0:6d:a0:
         2d:bf:24:bc:d9:d3:4a:9a:04:92:8a:27:59:6c:3a:d1:50:11:
         1d:89:89:99:09:e0:00:b5:bb:43:62:a7:c1:d0:67:45:c1:8b:
         82:e6:18:37:c4:9a:3c:b1:e1:c5:7f:3e:4a:cf:c1:ce:34:6f:
         42:29:e7:87:86:e6:1b:6c:25:61:93:ad:ca:d6:25:ad:3b:55:
         14:2e:7b:81:b9:57:6f:e4:b6:4c:ad:32:52:9c:11:15:14:0d:
         63:fd:4c:18:ee:07:36:70:a1:3b:7b:49:70:f3:30:33:6e:79:
         a6:ac:e2:fc:1f:dd:8f:9a:c9:81:80:f5:db:d0:e4:e7:cd:f1:
         53:bd:ac:ed:ff:57:ae:33:6d:55:eb:39:8c:fb:0d:b7:f7:a2:
         c7:ec:e8:be:0e:ed:91:2c:c6:ad:1b:48:2b:c5:de:33:1c:c7:
         a6:0a:29:eb:4c:0e:21:a9:79:0e:ce:14:2d:90:bb:20:6c:cd:
         45:db:8f:a7:96:cd:5f:65:c1:6c:2c:2b:4a:61:83:e2:f0:3b:
         91:d1:7d:7a:6b:88:65:4d:9d:f3:f4:e8:8b:4f:22:6e:dd:7a:
         f1:a0:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:09:00 2025 by rpki-client