Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3136382e302f32312d3234203d3e2033383136.roa
File:                     3138362e3138332e3136382e302f32312d3234203d3e2033383136.roa (raw, json)
Hash identifier:          RXjMmkTEcdA2DbORB5smhJeSWO9WPbCncg6pmDMfNU8=
Subject key identifier:   B1:F5:EF:5F:00:AF:4E:38:77:6F:F2:C3:D0:2A:7A:2C:95:95:A7:6F
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       25B8E0B4B55C3FED3E9B272C863564AC2C99B261
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3136382e302f32312d3234203d3e2033383136.roa
Signing time:             Thu 29 May 2025 18:20:24 +0000
ROA not before:           Thu 29 May 2025 18:15:24 +0000
ROA not after:            Thu 28 May 2026 18:20:24 +0000
asID:                     3816
IP address blocks:        186.183.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b8:e0:b4:b5:5c:3f:ed:3e:9b:27:2c:86:35:64:ac:2c:99:b2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: May 29 18:15:24 2025 GMT
            Not After : May 28 18:20:24 2026 GMT
        Subject: CN=B1F5EF5F00AF4E38776FF2C3D02A7A2C9595A76F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:c3:a3:82:5e:cc:37:d3:31:b3:d2:26:ce:
                    cc:75:be:ba:82:a6:18:17:17:be:9e:75:e7:da:41:
                    a5:ea:42:29:1a:51:12:cc:0b:8c:ca:f4:4e:94:3b:
                    7b:3f:1a:62:02:6d:f7:b4:10:3f:02:b5:aa:08:07:
                    4a:03:4d:bb:63:81:32:2b:8c:5b:dd:ee:55:cb:ca:
                    8b:ff:bc:10:27:0f:6f:a6:69:47:3d:ea:c5:59:fb:
                    ad:36:f6:2e:1d:a5:f9:bf:a2:04:32:84:3f:12:e8:
                    64:2c:d0:65:91:84:ee:34:98:98:0f:ea:17:ba:80:
                    5e:8c:9d:80:fa:ec:81:3d:75:60:80:01:9c:c0:6e:
                    bb:21:26:03:d7:0e:f4:b0:bd:b7:ae:db:d5:8a:03:
                    f6:9d:9e:39:4d:56:ec:eb:89:00:23:18:9f:ca:45:
                    ac:fd:2d:ce:89:9f:0e:63:b0:cc:20:da:d5:d4:0a:
                    5b:80:67:ae:06:47:48:ee:f2:d9:a0:1c:85:4a:be:
                    05:ed:cb:d9:72:c5:f8:0f:4a:86:9e:e5:da:3a:da:
                    21:7e:fb:41:a4:62:94:74:5f:28:fc:09:55:da:a1:
                    b4:75:58:80:0c:a2:e4:3a:d7:cc:d3:6f:71:9a:25:
                    04:18:3d:5d:84:f5:99:3d:18:25:e6:47:da:29:59:
                    33:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F5:EF:5F:00:AF:4E:38:77:6F:F2:C3:D0:2A:7A:2C:95:95:A7:6F
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3136382e302f32312d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:c2:33:f1:1e:22:63:49:8a:a8:14:fa:ce:41:41:42:01:e1:
         d2:3e:97:64:f6:9f:8b:9b:7e:f7:11:ce:da:7a:bc:96:d9:2d:
         19:7c:7f:20:a7:16:d7:d1:bd:d9:1b:69:7c:4d:fd:9f:b2:80:
         7d:69:f5:96:d0:91:81:9f:ee:08:aa:a1:1e:2c:47:46:2e:3f:
         ed:b1:b4:3f:25:96:a4:87:f4:36:94:d5:32:b5:45:6c:0f:5f:
         e7:7c:72:63:10:01:ab:c4:96:98:e0:da:de:4c:df:6a:73:e5:
         74:85:02:92:5e:4b:ee:5e:5c:6a:d1:1c:fd:6b:4b:c3:74:f9:
         24:73:88:e4:50:5e:7d:b7:dd:44:67:30:17:53:70:3f:ff:f1:
         40:6b:7c:6e:f1:71:e4:64:a0:31:bd:65:80:7f:87:3b:33:0f:
         cb:39:26:a6:94:d5:6b:52:99:b9:2c:ec:aa:2f:05:8e:cd:dc:
         ae:51:81:e6:a9:de:5c:71:b6:78:87:1f:80:9f:47:d7:2d:23:
         04:7e:3e:f7:f3:90:58:4e:56:19:87:a5:b8:fa:9c:e3:a4:49:
         b5:c2:22:06:be:4d:a5:21:99:f0:24:09:a2:87:ef:d1:a2:35:
         e3:54:e5:b7:d9:b0:93:a4:12:8c:fe:f3:6b:1d:f7:7d:f7:e3:
         52:51:a7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:21:40 2025 by rpki-client