Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3134382e362e302f32342d3234203d3e203631353037.roa
File:                     3138362e3134382e362e302f32342d3234203d3e203631353037.roa (raw, json)
Hash identifier:          oZ7DMRm9AYKpl75xm0VPdw0Fp1mcx9m1PZf5XrbjZcI=
Subject key identifier:   90:87:C4:BA:C4:63:8B:9A:A7:1B:4C:C1:64:CE:8D:71:FC:19:C6:C6
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       045BADF12C58FB595846F83EA8778FC281017264
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3134382e362e302f32342d3234203d3e203631353037.roa
Signing time:             Wed 22 Jan 2025 20:05:00 +0000
ROA not before:           Wed 22 Jan 2025 20:00:00 +0000
ROA not after:            Wed 21 Jan 2026 20:05:00 +0000
asID:                     61507
IP address blocks:        186.148.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5b:ad:f1:2c:58:fb:59:58:46:f8:3e:a8:77:8f:c2:81:01:72:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan 22 20:00:00 2025 GMT
            Not After : Jan 21 20:05:00 2026 GMT
        Subject: CN=9087C4BAC4638B9AA71B4CC164CE8D71FC19C6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:2b:47:58:9a:4f:79:bf:a1:3c:13:e6:ed:
                    4f:24:ef:07:4f:f5:a1:f4:6c:0f:a8:d7:55:7e:14:
                    03:40:33:c1:3f:25:c0:35:1b:c8:0a:26:95:52:3f:
                    91:4b:7e:aa:66:cd:0c:2e:b8:78:6a:ae:92:03:71:
                    72:60:25:f6:9a:f2:39:ac:9e:4d:1b:fe:20:7e:a9:
                    e3:c3:40:d6:80:66:29:bf:18:5d:b9:3a:ac:b7:b7:
                    02:62:58:60:c7:83:14:7c:08:fd:f7:49:42:2c:77:
                    66:be:c2:d1:4a:c6:58:a9:49:2b:29:f1:ea:40:fa:
                    a1:7b:19:83:00:48:0a:3c:ac:3e:dd:40:8c:41:c6:
                    1e:74:47:47:73:6c:69:60:bb:45:37:6a:df:45:8d:
                    4c:90:8e:bd:8d:e0:03:ad:67:07:2c:b3:75:d9:80:
                    56:28:17:23:68:97:f6:6c:57:aa:75:46:e5:3d:4a:
                    74:1d:0b:a4:ba:3a:e3:45:22:66:92:13:17:db:49:
                    78:6b:24:51:28:e9:29:56:b7:27:42:35:5c:00:c4:
                    16:f0:88:35:3d:0d:88:1a:11:4c:94:9a:ca:29:7e:
                    ae:99:db:33:60:e7:c6:a9:be:8b:5d:2f:2f:25:d3:
                    6f:17:04:c5:ec:9f:32:be:c7:2a:3f:37:23:09:72:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:87:C4:BA:C4:63:8B:9A:A7:1B:4C:C1:64:CE:8D:71:FC:19:C6:C6
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3134382e362e302f32342d3234203d3e203631353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:1e:ff:06:c4:87:a8:3a:38:db:f4:2e:2c:6d:f9:85:ff:cf:
         72:21:57:ce:89:4d:94:58:dd:d9:76:53:35:2e:51:5c:90:42:
         d7:f6:99:c6:57:09:ca:e8:60:8f:e0:a1:29:e1:10:18:7a:40:
         b2:e7:b5:f7:55:1f:a6:f3:d2:82:f2:3d:7e:f1:7b:41:d7:7c:
         d9:0b:d6:1d:e0:b0:55:69:9a:d3:1b:1b:b1:50:8e:75:e4:cd:
         8e:09:d0:c1:6d:a6:33:a6:93:00:80:2f:f6:57:1b:41:a6:31:
         1f:37:70:eb:d1:cb:fc:c3:3c:15:91:58:20:34:38:32:8f:42:
         8b:30:50:cd:5f:b5:c0:c3:dc:dc:46:fb:6c:30:a7:5c:ff:28:
         1a:4c:50:19:ff:0e:94:8e:8f:cb:51:8b:00:f3:e3:57:6c:ce:
         4f:6d:55:7d:fb:af:9a:27:44:f7:61:4b:1b:56:af:cc:c3:b9:
         24:e7:85:53:15:12:86:e8:56:2a:72:c2:c4:58:c6:d3:2a:e6:
         3d:8c:30:b6:c5:de:dd:68:97:5a:4b:7c:ff:87:9f:81:c3:bc:
         00:07:0d:a2:cd:72:03:13:d1:a5:43:c7:c7:c0:48:77:10:c5:
         23:b9:96:a2:ba:47:6f:9b:a0:01:eb:82:d9:74:ce:44:8d:b6:
         c0:49:f7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:39 2025 by rpki-client