Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e322e3232342e302f32302d3234203d3e203233323031.roa
File:                     3138362e322e3232342e302f32302d3234203d3e203233323031.roa (raw, json)
Hash identifier:          tF+WfDqGQyWKVc5QmIIwTA6TEw5b00APaV38fSDdt/M=
Subject key identifier:   91:AB:57:7D:F3:63:2D:26:64:B6:9C:90:12:D8:B8:1A:EB:86:7A:01
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       7A85B8AC3151EC48997BB2BE6A106FF3E46A2A3E
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e322e3232342e302f32302d3234203d3e203233323031.roa
Signing time:             Tue 04 Feb 2025 18:40:28 +0000
ROA not before:           Tue 04 Feb 2025 18:35:28 +0000
ROA not after:            Tue 03 Feb 2026 18:40:28 +0000
asID:                     23201
IP address blocks:        186.2.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:85:b8:ac:31:51:ec:48:99:7b:b2:be:6a:10:6f:f3:e4:6a:2a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Feb  4 18:35:28 2025 GMT
            Not After : Feb  3 18:40:28 2026 GMT
        Subject: CN=91AB577DF3632D2664B69C9012D8B81AEB867A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:78:ab:2e:f6:03:e7:1d:14:f4:e5:71:d7:
                    fc:a6:99:b2:17:d3:c9:3f:86:44:f7:59:ee:d6:e0:
                    4d:fb:ea:0c:be:6b:ec:29:e4:5f:f0:5b:d3:23:e1:
                    b6:5c:09:00:56:6e:bd:c6:6d:33:1c:78:a5:fa:ab:
                    76:07:b8:ea:74:b6:ac:74:fd:e6:f1:5b:4a:98:64:
                    2d:65:8b:7d:dc:27:c5:15:65:e0:ff:09:67:7c:95:
                    32:05:30:2e:09:b2:23:4f:f1:e4:bf:8a:0a:f0:75:
                    c7:16:95:4f:1a:5c:f1:80:de:42:2c:3c:83:38:20:
                    b7:48:96:60:84:64:55:16:d7:2c:f2:b0:91:4f:fd:
                    35:30:92:82:d9:85:85:0a:e9:45:69:70:00:bb:15:
                    35:c5:1b:a9:38:27:c8:f7:ee:5b:bf:6a:29:ad:6e:
                    33:75:a5:7d:b8:94:75:d2:c3:ae:c6:86:20:fb:45:
                    d2:35:2c:89:90:61:40:d3:54:d1:8a:0a:23:f3:c7:
                    0c:c3:db:6b:65:56:ce:37:2a:ed:02:0e:70:c2:0f:
                    b4:6e:9a:72:6d:8a:ab:ea:66:07:bf:ea:a3:71:f2:
                    fb:39:46:92:8e:7f:69:c4:22:e3:e6:4c:00:27:a5:
                    50:85:f5:cf:05:5f:22:21:7d:b9:14:75:0d:74:08:
                    e4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AB:57:7D:F3:63:2D:26:64:B6:9C:90:12:D8:B8:1A:EB:86:7A:01
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e322e3232342e302f32302d3234203d3e203233323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:54:96:56:ae:59:c9:80:70:d3:8c:70:dd:17:58:f0:06:cc:
         c5:6f:a5:b8:cc:2c:78:07:d7:5b:57:ef:31:c3:a3:02:53:51:
         af:8b:e7:ca:bc:8e:0a:92:d1:4f:a9:da:97:4e:f1:81:d1:51:
         d3:02:90:46:88:cc:cb:2f:d6:91:4c:30:ea:50:ba:b9:d6:65:
         e8:cc:e6:d9:af:de:7f:16:36:1f:68:31:53:f7:39:24:83:33:
         43:b8:66:d3:f5:b5:61:fa:f4:f5:d9:17:5d:20:7b:0c:10:51:
         f0:1d:0e:f1:43:16:0c:25:fc:47:e1:51:db:2a:f4:d1:ed:d5:
         94:5a:ba:f2:ed:68:8e:f2:20:8b:4e:db:59:25:44:03:b6:ad:
         0b:fc:ce:48:50:37:2d:34:35:01:e9:b8:76:35:d5:10:d3:e0:
         0b:72:10:33:0b:8e:c9:b3:d5:61:1d:3f:80:1a:4e:d0:08:96:
         dc:d8:14:c4:0a:4c:ca:05:51:d4:8a:22:06:ef:15:21:06:65:
         a2:82:6f:ea:50:c4:69:2b:36:fe:ec:3c:70:ed:8b:88:47:e7:
         4b:cf:10:f6:84:fa:39:47:20:5f:11:83:6e:33:79:22:49:39:
         c4:92:e6:cd:a8:cc:ab:fb:a5:ab:84:7a:08:bc:83:e0:f2:f7:
         23:16:9a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:09 2025 by rpki-client