Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3230392e302f32342d3234203d3e20323632313637.roa
File:                     3138362e3134382e3230392e302f32342d3234203d3e20323632313637.roa (raw, json)
Hash identifier:          CQ0wBpn+i6+D1TveEMXwnWwCOwSTKttntwGBXiOydl8=
Subject key identifier:   E1:05:66:30:53:BB:6F:CE:F0:FB:F7:58:D7:8C:B0:55:D2:B1:5A:6E
Certificate issuer:       /CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
Certificate serial:       06A0B7F991FE29BDC015FBAFC2272BAAF3C00047
Authority key identifier: 2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3230392e302f32342d3234203d3e20323632313637.roa
Signing time:             Tue 04 Feb 2025 18:31:31 +0000
ROA not before:           Tue 04 Feb 2025 18:26:31 +0000
ROA not after:            Tue 03 Feb 2026 18:31:31 +0000
asID:                     262167
IP address blocks:        186.148.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a0:b7:f9:91:fe:29:bd:c0:15:fb:af:c2:27:2b:aa:f3:c0:00:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
        Validity
            Not Before: Feb  4 18:26:31 2025 GMT
            Not After : Feb  3 18:31:31 2026 GMT
        Subject: CN=E105663053BB6FCEF0FBF758D78CB055D2B15A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1f:e4:c7:37:4f:90:94:70:3c:be:89:92:88:
                    45:b0:75:69:e8:7f:6e:bd:f9:d5:88:84:90:be:7c:
                    86:6b:1d:d8:bf:b6:a7:79:38:5e:08:9e:14:ca:4c:
                    f2:08:85:8a:96:57:27:07:a4:e9:86:4b:92:bc:1f:
                    af:47:67:55:6f:21:66:c9:2e:0c:e0:9d:c4:97:dc:
                    01:ba:5f:20:3c:02:69:25:1d:9c:12:fa:f6:ce:ce:
                    cf:6a:da:84:ea:eb:3a:5b:fa:44:73:f5:e1:41:87:
                    24:b6:98:e2:ec:8d:b0:41:ba:3c:7a:95:3d:17:ba:
                    5a:37:89:4c:a2:f4:44:fd:ee:1e:96:fb:c1:59:9d:
                    6e:5d:f7:57:43:11:13:85:3e:35:85:17:b8:fa:f8:
                    69:a7:f6:10:21:3b:1a:7e:4c:e2:c2:64:b0:cf:a9:
                    9f:29:67:d4:e6:55:16:61:e5:3a:3a:d2:87:3d:63:
                    01:d6:c9:64:fc:52:ab:b4:75:60:52:8e:c9:5a:7c:
                    be:c0:23:94:c0:12:b7:ab:ee:6f:c4:ac:39:9d:c8:
                    1f:97:af:16:65:cc:67:cf:1b:03:77:fc:a0:46:c7:
                    5b:28:bd:86:79:9f:8c:03:87:90:3b:e3:8e:82:4d:
                    01:43:11:d9:6d:bd:e9:43:f4:01:fc:03:d8:5a:0e:
                    b6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:05:66:30:53:BB:6F:CE:F0:FB:F7:58:D7:8C:B0:55:D2:B1:5A:6E
            X509v3 Authority Key Identifier:
                keyid:2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3230392e302f32342d3234203d3e20323632313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:9a:7e:72:e1:4a:6d:48:50:c8:3c:c8:7d:86:45:cd:ec:38:
         44:e4:77:92:91:fb:53:35:09:21:c7:5e:f3:99:fc:5c:6b:32:
         4f:43:96:43:69:3e:67:57:41:53:fc:a2:ac:dc:29:c1:74:6c:
         d1:ac:b9:35:dd:3b:13:53:49:74:9e:b8:76:b7:f7:01:f6:ea:
         d2:de:05:92:01:ee:5c:e0:d2:87:00:cd:af:bd:f3:70:83:5c:
         d5:c8:9d:20:41:c6:06:c7:72:18:9a:4e:45:88:26:a5:75:1b:
         8b:32:2c:46:70:89:be:1b:01:90:ea:4e:ee:be:9c:8e:12:15:
         12:42:fc:d8:26:af:ea:57:5b:16:71:b5:87:71:5a:79:18:62:
         5e:37:7f:64:c6:69:ee:e8:b4:8d:d5:2c:3f:87:3d:13:72:60:
         03:9c:c2:49:3c:63:00:c3:c5:3a:0c:14:42:c7:3b:e7:2a:0f:
         ce:2f:ee:f5:fb:9e:1e:aa:f7:61:d0:d2:f6:98:9b:c5:db:0c:
         ae:01:88:fb:8a:5b:f5:3f:c5:71:09:09:e4:c6:12:d1:61:5c:
         6c:05:18:ad:54:c5:09:c2:bd:bb:c2:0b:4a:2a:cc:1d:f6:95:
         6d:61:8b:ad:56:80:3d:a7:63:a6:d6:58:39:05:76:32:69:50:
         45:79:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:17 2025 by rpki-client