Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3138362e37362e302e302f31352d3234203d3e203134373534.roa
File:                     3138362e37362e302e302f31352d3234203d3e203134373534.roa (raw, json)
Hash identifier:          JmsUY4Y6+YRa61wi2PSTJT3x29aXXQL3D5W8GQPRm0I=
Subject key identifier:   B7:1C:9C:FD:CD:C5:92:B0:A4:29:CC:32:99:A1:F0:E0:02:7C:C2:8C
Certificate issuer:       /CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
Certificate serial:       868F524E8FC4BAB27476BDF9A9793A911E25F9
Authority key identifier: 51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3138362e37362e302e302f31352d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:14:35 +0000
ROA not before:           Tue 04 Feb 2025 18:09:35 +0000
ROA not after:            Tue 03 Feb 2026 18:14:35 +0000
asID:                     14754
IP address blocks:        186.76.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 10:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            86:8f:52:4e:8f:c4:ba:b2:74:76:bd:f9:a9:79:3a:91:1e:25:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
        Validity
            Not Before: Feb  4 18:09:35 2025 GMT
            Not After : Feb  3 18:14:35 2026 GMT
        Subject: CN=B71C9CFDCDC592B0A429CC3299A1F0E0027CC28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:64:88:2f:2f:95:16:3a:cb:e3:7d:19:3d:
                    c8:74:45:ef:68:4a:59:42:82:95:65:a3:c4:64:60:
                    a5:e8:92:e9:26:1a:0d:09:03:7a:ad:6e:4c:f2:30:
                    9e:96:cb:09:6c:33:bb:b0:05:23:cd:0d:88:3c:31:
                    a9:42:00:0c:7d:c5:0f:e4:8f:d5:40:48:38:1d:dd:
                    75:4a:06:9a:df:ad:5e:02:f9:c5:3a:36:a6:08:bc:
                    06:b7:92:42:80:ef:50:93:b0:61:0b:80:b2:c7:4e:
                    70:09:1b:76:0e:9d:93:80:1c:73:cf:15:32:38:8a:
                    7a:18:6e:d8:8b:b9:f4:d0:64:c0:13:7a:37:bc:0a:
                    e2:b9:e6:9c:ed:04:9b:ca:1a:9c:ed:d1:e5:91:ec:
                    d9:ff:f8:49:f9:45:0d:91:27:40:a4:31:c5:b8:9e:
                    4b:18:6c:b7:8d:d9:4b:04:6f:4a:e4:82:df:66:69:
                    88:57:76:2c:ab:79:2a:e0:1e:0b:15:84:d3:66:d3:
                    46:45:16:d3:bc:35:70:5b:1d:53:b0:74:0d:b5:8e:
                    52:50:9b:4d:29:22:c7:bb:97:5d:00:47:b9:3e:fb:
                    5e:c0:c3:4f:68:5d:4f:2b:26:ed:dc:80:4c:05:3b:
                    bf:3e:ae:be:d0:e9:2d:fc:01:4c:f9:4a:8b:07:3a:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1C:9C:FD:CD:C5:92:B0:A4:29:CC:32:99:A1:F0:E0:02:7C:C2:8C
            X509v3 Authority Key Identifier:
                keyid:51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3138362e37362e302e302f31352d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.76.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4a:0c:46:e5:14:1e:70:b6:d9:82:9d:d1:a9:d5:db:ba:ae:cd:
         9e:35:40:8c:0a:fc:b0:95:84:ea:82:33:ec:53:5b:a8:1f:69:
         e0:1b:87:d6:20:46:58:75:25:e1:5c:2b:c5:4f:ed:be:1b:44:
         06:7c:72:26:90:af:aa:5f:e2:53:17:29:f3:3c:d4:1a:e4:0c:
         b1:20:fa:47:a6:0c:df:0b:bd:d2:44:ff:a8:db:1a:d5:7a:c1:
         4f:4f:ec:30:2f:70:ba:3f:ed:f2:0c:6e:c2:03:5e:32:a6:b3:
         ab:37:5e:74:06:a1:ec:b5:19:30:10:1f:3c:7d:8b:02:c9:d2:
         91:40:74:b9:e8:09:03:98:4f:28:b8:31:53:b6:0f:0e:3b:8e:
         e9:e2:d7:85:92:2c:28:5b:12:15:e2:04:17:d4:1d:47:de:a5:
         0d:0b:83:2a:d4:93:36:7c:a8:df:a2:86:2e:af:52:e5:74:5a:
         e3:6c:c9:7e:ee:b0:7f:e2:75:a6:00:47:c9:26:f8:e2:ee:63:
         65:ae:f9:e5:3a:f7:90:15:56:1b:8e:e5:ba:ab:9b:b8:60:c5:
         4e:45:fd:20:b2:19:aa:f9:72:60:55:99:21:db:5f:23:db:71:
         d1:36:0c:c6:63:04:28:94:bd:dc:a7:20:ea:dd:3b:e0:85:0a:
         58:32:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:36:08 2025 by rpki-client