Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31382d3234203d3e2037343138.roa
File:                     3138362e34312e302e302f31382d3234203d3e2037343138.roa (raw, json)
Hash identifier:          x9tZknNuC4+czSt7Z/FjOAULhQ9MDp/UM+ZUGcNWzIw=
Subject key identifier:   C0:E9:31:0B:B1:8B:61:3D:F8:4A:6C:8C:8E:13:4E:48:D9:92:24:7F
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       321635667EC404A495D7EEB8EEDB4A8FDAFBBB64
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31382d3234203d3e2037343138.roa
Signing time:             Wed 14 May 2025 17:18:47 +0000
ROA not before:           Wed 14 May 2025 17:13:47 +0000
ROA not after:            Wed 13 May 2026 17:18:47 +0000
asID:                     7418
IP address blocks:        186.41.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:16:35:66:7e:c4:04:a4:95:d7:ee:b8:ee:db:4a:8f:da:fb:bb:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: May 14 17:13:47 2025 GMT
            Not After : May 13 17:18:47 2026 GMT
        Subject: CN=C0E9310BB18B613DF84A6C8C8E134E48D992247F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:4f:ed:84:0a:42:16:3d:17:f7:fc:42:64:
                    01:34:b1:df:e9:68:4c:7b:6a:d2:f8:10:10:f1:45:
                    3b:01:33:8b:a4:4e:2b:7d:3a:7c:b2:87:87:c9:61:
                    7c:2b:96:e9:ac:21:0c:32:8b:88:28:14:17:b1:84:
                    1b:14:75:20:ad:24:1a:9c:85:22:b7:20:43:91:55:
                    ef:16:90:3b:e3:b3:6f:07:9f:b7:fd:ed:f3:34:fb:
                    6a:61:2e:94:3b:a4:9c:6d:f6:af:49:91:ba:61:f9:
                    31:f2:69:fd:fe:92:fc:97:16:cd:ee:6e:c4:90:e0:
                    9c:57:59:f5:0d:6c:50:5a:5e:92:57:4b:6c:fb:c5:
                    bf:57:fe:76:3c:07:ab:bd:4f:b2:c6:07:66:95:82:
                    58:00:c0:53:35:99:74:0b:f1:5e:7b:cc:f4:3c:80:
                    cd:5d:85:92:f7:87:93:73:f6:ca:b1:b5:1e:fd:0b:
                    26:23:74:15:8f:2c:0c:d0:34:c7:bc:e4:bf:b6:bb:
                    22:0a:97:d8:e2:df:11:93:7e:dc:5f:76:1d:9a:2f:
                    63:d7:f1:30:c8:02:19:a8:6d:1c:67:d2:a0:65:95:
                    d4:93:a9:83:34:b6:79:be:c5:82:42:3c:c7:d2:4e:
                    12:16:bf:01:e6:ed:07:bc:81:ee:8b:47:83:c8:df:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E9:31:0B:B1:8B:61:3D:F8:4A:6C:8C:8E:13:4E:48:D9:92:24:7F
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31382d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.41.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         81:a1:12:0e:8e:7c:06:92:8f:a6:dd:a8:96:21:cb:cf:34:8d:
         b6:b1:99:a3:57:1f:36:cb:ee:7b:38:77:4f:d8:55:d3:24:a1:
         79:92:10:07:d5:b6:4a:16:a2:7c:bb:11:02:fd:44:92:e7:c8:
         22:91:2c:e5:60:46:e7:5f:89:a3:ef:a6:30:ab:c0:ea:2c:55:
         95:02:d3:68:e0:5a:43:a7:ea:56:a5:3e:df:33:fd:bf:21:34:
         33:93:ce:4c:1d:88:ea:87:e9:67:92:b7:d1:95:04:c5:86:1a:
         44:4a:12:76:e9:04:47:cb:ff:cf:c6:a8:b7:3f:19:23:63:49:
         b0:46:61:c8:c1:ca:09:42:b9:04:da:c5:12:a5:32:49:ec:99:
         87:70:53:8b:a4:52:06:eb:7f:43:8f:83:26:f7:1f:1a:45:4f:
         bd:ab:0a:f5:49:3e:9c:a3:15:69:9e:e8:94:30:42:0c:2d:e4:
         1e:ac:5c:3c:dc:fb:8f:ed:c6:a0:48:d3:88:0a:9e:2d:84:8e:
         83:ec:0f:8f:77:ef:ff:f3:d4:b2:7f:99:77:1e:49:b7:77:29:
         66:33:8a:4b:ef:38:89:19:19:36:64:f2:cc:c9:07:59:be:cd:
         65:e3:6d:a9:ab:3a:0e:35:8b:92:b9:ac:1e:87:11:cc:8d:3f:
         0a:8e:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:34:12 2025 by rpki-client