Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3231302e302f32342d3234203d3e20323632313637.roa
File:                     3138362e3134382e3231302e302f32342d3234203d3e20323632313637.roa (raw, json)
Hash identifier:          oU+x32YObQYQh76q7q9tnUj0a/IicmBvtzjwKuifQvE=
Subject key identifier:   7B:68:ED:06:1F:4E:A7:EF:83:8D:0E:10:E1:56:DD:9B:69:F3:6D:B6
Certificate issuer:       /CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
Certificate serial:       16F1A548F1DA879E989D176607292AA690A4831D
Authority key identifier: 2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3231302e302f32342d3234203d3e20323632313637.roa
Signing time:             Tue 04 Feb 2025 18:31:31 +0000
ROA not before:           Tue 04 Feb 2025 18:26:31 +0000
ROA not after:            Tue 03 Feb 2026 18:31:31 +0000
asID:                     262167
IP address blocks:        186.148.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f1:a5:48:f1:da:87:9e:98:9d:17:66:07:29:2a:a6:90:a4:83:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
        Validity
            Not Before: Feb  4 18:26:31 2025 GMT
            Not After : Feb  3 18:31:31 2026 GMT
        Subject: CN=7B68ED061F4EA7EF838D0E10E156DD9B69F36DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:15:a4:e5:4d:01:24:6d:1b:9e:20:4c:1b:6f:
                    38:d7:ac:a8:3b:89:ec:42:8a:fd:62:cd:c0:ea:f0:
                    9b:7e:f3:a8:d6:e4:30:da:5a:eb:38:be:f1:f7:92:
                    59:3b:d9:18:2a:9b:68:91:28:70:14:fe:c5:c5:9a:
                    05:84:92:f3:67:9f:c0:3e:79:71:05:85:fe:9a:ec:
                    9f:03:de:33:19:12:06:c9:a1:25:17:af:2f:45:72:
                    e3:82:08:34:03:c9:3e:ff:a0:a3:29:94:ec:4e:36:
                    79:50:f7:7b:04:24:9e:0e:90:72:42:20:0a:80:dd:
                    93:35:09:95:b4:e3:0f:e8:25:c1:50:41:50:fa:78:
                    f1:5d:8e:6d:ae:f6:48:f5:41:78:00:0e:36:1a:dd:
                    08:69:eb:41:b8:80:75:5a:31:f0:ed:5d:18:db:c6:
                    97:84:15:e8:f7:5e:3c:1c:dc:38:71:f4:f9:bd:66:
                    48:af:43:49:09:c4:f1:6c:c9:74:f1:9e:4e:37:c0:
                    4a:b2:fb:41:f8:03:ae:71:ad:c6:d4:5b:e1:0d:92:
                    8d:df:a2:bc:07:0a:ef:da:af:9e:6a:03:21:bb:5c:
                    84:08:c1:84:b1:a3:7a:c1:e0:50:d9:5a:30:00:82:
                    85:ac:08:ff:b8:fe:ff:d3:61:b0:dd:7f:77:50:26:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:68:ED:06:1F:4E:A7:EF:83:8D:0E:10:E1:56:DD:9B:69:F3:6D:B6
            X509v3 Authority Key Identifier:
                keyid:2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3231302e302f32342d3234203d3e20323632313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:66:07:c0:50:d8:bc:f7:c0:e9:09:d4:22:c0:55:06:cb:d0:
         c5:cf:94:65:be:b8:96:21:4e:11:e9:8e:3d:a9:ee:5a:cf:3e:
         06:c1:d1:cc:58:f0:d2:c5:5f:51:e7:fe:66:e8:6c:38:4d:df:
         16:71:e6:06:1d:af:61:29:1a:50:b0:f5:07:10:01:fc:e5:3d:
         aa:3e:3e:14:6b:8f:50:79:2f:29:f6:d5:a7:c5:c1:ad:36:05:
         cc:83:10:c8:35:19:e7:7c:53:f9:de:c1:6a:18:07:59:7b:e3:
         5d:65:7a:7c:82:26:50:66:cd:4e:bc:c0:9e:ef:91:5f:92:fd:
         ef:76:0d:11:4e:e6:5b:ee:35:2f:78:aa:18:a0:24:ef:d9:81:
         ad:81:90:a3:66:a5:6d:fc:8b:b8:57:76:3a:06:7b:62:f0:57:
         0d:67:c4:bb:08:da:b7:bd:4a:1c:55:1f:3b:72:cf:4a:37:f6:
         9b:72:e8:d0:78:65:8f:78:0e:af:80:82:65:65:10:cd:33:5e:
         c9:2d:a0:df:0c:cb:ca:73:31:ea:98:3e:70:3e:40:b5:58:05:
         be:72:3a:52:aa:3d:dd:5e:36:94:aa:30:7a:1f:a5:8b:e6:c8:
         3d:2a:83:52:93:e8:cf:d8:20:84:b8:7a:5c:fd:6a:c5:c5:b5:
         00:23:16:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:32 2025 by rpki-client