Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3138362e36372e302e302f31362d3234203d3e2036343731.roa
File:                     3138362e36372e302e302f31362d3234203d3e2036343731.roa (raw, json)
Hash identifier:          9j0gH762XrVsZlfITqkLhLxJcFtXAPrrruwIUtphqRE=
Subject key identifier:   DB:C4:D7:F4:C8:07:B2:56:44:85:75:82:E2:B4:1F:DA:0E:62:D0:EC
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       2D44E189DB410895E7C92D66C918AE215C6C4931
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3138362e36372e302e302f31362d3234203d3e2036343731.roa
Signing time:             Tue 04 Feb 2025 19:56:33 +0000
ROA not before:           Tue 04 Feb 2025 19:51:33 +0000
ROA not after:            Tue 03 Feb 2026 19:56:33 +0000
asID:                     6471
IP address blocks:        186.67.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:44:e1:89:db:41:08:95:e7:c9:2d:66:c9:18:ae:21:5c:6c:49:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Feb  4 19:51:33 2025 GMT
            Not After : Feb  3 19:56:33 2026 GMT
        Subject: CN=DBC4D7F4C807B25644857582E2B41FDA0E62D0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:29:35:2e:98:42:ce:db:90:70:46:95:92:
                    0f:ec:6d:ce:0a:c7:78:3e:6a:da:a3:03:bc:11:94:
                    f7:d3:de:48:09:e8:c3:df:68:be:14:a2:c2:84:00:
                    39:6c:21:a3:32:29:6c:7e:b7:5d:6f:2b:35:d7:8f:
                    7d:2f:db:f6:fc:ad:03:31:54:35:a2:03:51:d9:7b:
                    69:77:0c:8b:9a:63:61:f6:bc:1a:34:c3:2c:b8:85:
                    50:28:b5:06:68:ee:07:76:a0:bb:b8:dc:a9:fa:9d:
                    94:e0:34:d0:3f:8c:e7:24:b2:67:45:b2:dd:6c:b3:
                    c8:88:5c:b7:6b:3e:ed:a6:1a:23:de:cc:86:2e:6b:
                    71:83:6c:c9:7b:e8:81:32:55:e5:f7:ab:70:6e:85:
                    d1:ab:47:b1:74:31:11:34:be:11:49:6d:ac:8d:52:
                    21:f2:96:f7:bf:2d:c2:88:0a:1a:75:0a:d7:41:f6:
                    80:99:27:b8:40:e6:69:14:89:cc:52:e1:68:ed:4f:
                    3a:db:bb:33:9a:6f:ae:cd:da:bd:c1:75:25:08:22:
                    53:7f:e1:aa:b0:64:43:23:76:e2:b8:6a:6f:c1:36:
                    ef:b9:a5:c9:b7:99:e9:5e:3c:94:a4:c4:ea:f1:2e:
                    2c:b4:cf:a8:81:ef:93:b8:20:95:38:13:3b:fd:94:
                    99:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C4:D7:F4:C8:07:B2:56:44:85:75:82:E2:B4:1F:DA:0E:62:D0:EC
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3138362e36372e302e302f31362d3234203d3e2036343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.67.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         98:c7:5b:5a:97:c3:e7:f2:88:3c:28:4a:51:ce:bb:10:81:3e:
         39:5f:59:60:a8:9c:be:4c:ca:4e:89:00:20:23:b9:83:8b:07:
         cf:04:2c:49:56:6d:47:bd:9d:bd:29:f1:ca:c0:0a:70:5e:5f:
         5e:e8:53:57:da:df:23:d0:68:49:ca:d7:5d:3d:12:86:b7:9b:
         7d:e3:6d:6f:a0:86:db:28:97:9f:59:3b:d4:56:72:c0:5a:27:
         95:0c:04:d8:15:e0:05:d9:75:e6:be:3d:3e:00:9f:4e:6a:b9:
         fd:ad:5f:cd:d2:bf:3d:8f:1b:f7:e2:d6:05:ae:30:6a:96:85:
         00:72:f5:07:7c:2b:a5:45:43:a4:ab:d6:15:4d:7a:41:dc:92:
         bf:3c:37:4c:7a:14:bd:bb:a7:93:ec:54:52:c5:50:33:72:42:
         9b:77:f4:a5:2c:7d:16:d1:75:3b:31:78:18:47:bd:13:ad:7a:
         47:f9:31:41:f6:f7:07:d7:27:34:b7:08:12:af:19:92:35:b8:
         ed:36:95:70:9b:c7:43:15:26:a2:74:bc:ab:03:85:0f:51:3d:
         c6:07:1a:c0:88:7e:81:fc:e6:be:3d:5a:c4:1f:b6:72:67:18:
         0f:04:6c:a4:d8:24:c8:78:2d:eb:0e:ed:95:9c:9e:b7:3f:b1:
         03:11:5a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:38:56 2025 by rpki-client