Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3232342e302f32302d3234203d3e203139343232.roa
File:                     3138362e382e3232342e302f32302d3234203d3e203139343232.roa (raw, json)
Hash identifier:          Yyrz3dFybYrF0qP22GtoUM+R6YWO5ehDSMc5siT+Ybc=
Subject key identifier:   90:9D:3A:AB:97:75:DC:4F:8C:21:08:B8:2D:34:D8:4E:47:11:9B:48
Certificate issuer:       /CN=88041F15365A423BC08F92BC69A5F909644042C2
Certificate serial:       777E146A54CF145AEB24CBDCCCD8CE5FC5FB9988
Authority key identifier: 88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3232342e302f32302d3234203d3e203139343232.roa
Signing time:             Wed 08 Jan 2025 07:45:02 +0000
ROA not before:           Wed 08 Jan 2025 07:40:02 +0000
ROA not after:            Wed 07 Jan 2026 07:45:02 +0000
asID:                     19422
IP address blocks:        186.8.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7e:14:6a:54:cf:14:5a:eb:24:cb:dc:cc:d8:ce:5f:c5:fb:99:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88041F15365A423BC08F92BC69A5F909644042C2
        Validity
            Not Before: Jan  8 07:40:02 2025 GMT
            Not After : Jan  7 07:45:02 2026 GMT
        Subject: CN=909D3AAB9775DC4F8C2108B82D34D84E47119B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:f4:8e:30:1b:38:ef:dd:25:64:56:d9:de:
                    b2:40:aa:14:78:a5:ab:88:58:d0:f7:72:63:d8:06:
                    e6:f2:bd:54:02:cf:44:81:81:e2:ee:56:01:93:43:
                    31:f9:75:17:37:12:80:b1:58:e2:02:e9:4c:ea:f2:
                    3e:b5:66:d9:08:d7:40:82:e0:e7:34:28:ab:78:11:
                    ba:b5:0e:eb:e0:b5:8d:b8:cb:da:9a:f7:c8:ab:66:
                    6f:17:4c:47:99:98:f5:29:d7:19:51:05:26:3f:cb:
                    36:dd:e8:70:f2:4a:4f:b4:ad:6d:55:45:76:d0:50:
                    fe:98:f3:dd:21:bf:ed:17:01:20:da:fd:40:6a:3d:
                    3b:f1:23:be:ae:8c:9f:6d:9c:e5:26:0a:9d:dd:77:
                    81:3e:77:34:b6:a9:b3:16:81:a7:d1:7f:07:f3:21:
                    99:72:35:e2:2a:88:48:7a:49:8f:de:ec:01:24:21:
                    5b:23:7d:73:2c:ca:39:df:ac:c0:14:42:8b:0e:3c:
                    12:f8:34:f8:af:da:5a:25:40:6a:36:0f:06:f3:8c:
                    da:a3:e0:ca:95:51:5d:39:83:e3:08:ff:f5:44:cc:
                    8a:a1:2b:d2:2c:aa:47:d8:f7:3f:8f:91:79:bd:d8:
                    cf:0d:f5:6c:4d:e1:ed:85:41:0d:71:24:9e:d4:82:
                    85:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9D:3A:AB:97:75:DC:4F:8C:21:08:B8:2D:34:D8:4E:47:11:9B:48
            X509v3 Authority Key Identifier:
                keyid:88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3232342e302f32302d3234203d3e203139343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.8.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:3c:e4:b6:10:32:67:63:48:c3:36:e1:39:2f:97:d1:2f:ee:
         5f:e3:02:56:b7:4f:e8:c1:17:7f:29:c6:fe:e0:63:fc:b9:a1:
         a5:ca:89:5a:87:d4:0c:df:eb:7c:aa:b5:a7:95:bd:bf:90:b6:
         a1:58:4f:2a:16:5c:bc:7d:ce:94:99:a1:80:cd:b4:99:c6:17:
         b1:24:59:fc:55:2a:78:5d:24:f1:0d:99:41:ce:f1:80:ba:90:
         ef:b1:07:43:87:71:7d:04:ea:9a:06:8d:ef:5c:91:5e:fb:21:
         ff:73:c5:e3:f2:9c:3d:2e:45:d0:c1:5e:99:26:eb:3b:d3:0d:
         33:9c:a2:5e:62:36:5f:1f:25:04:17:9d:06:56:10:9c:0f:f3:
         df:2e:41:3c:76:a5:51:54:8c:15:af:59:2b:f1:3f:f4:29:c5:
         42:4a:49:ce:23:65:3a:3a:38:d6:e0:37:99:72:0f:c1:b9:e7:
         65:a0:25:38:57:cf:f1:16:f3:fb:87:25:36:dc:31:9f:72:e7:
         95:0c:00:b6:bf:bb:67:87:39:af:a7:d9:4f:e6:e4:57:42:3d:
         be:b2:33:65:df:3e:05:71:3c:bf:4a:fa:2d:f8:52:a7:04:d0:
         1c:fc:1c:26:b2:07:a8:5f:65:d0:b2:a0:eb:46:69:55:b5:2c:
         94:52:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:13:31 2025 by rpki-client