Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e3135312e39342e302f32342d3332203d3e203134373534.roa
File:                     3138362e3135312e39342e302f32342d3332203d3e203134373534.roa (raw, json)
Hash identifier:          afeKtiDcTfG0PiZYGhmRzy1+LO/P6DhfYbe1KOjNOMQ=
Subject key identifier:   05:26:CF:E9:6C:23:DF:26:2A:F8:75:18:06:18:E0:AB:A4:AF:30:53
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       1B13AFEE7D593C66E7BEC503B4BEB84832614BC1
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e3135312e39342e302f32342d3332203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:25:57 +0000
ROA not before:           Tue 04 Feb 2025 18:20:57 +0000
ROA not after:            Tue 03 Feb 2026 18:25:57 +0000
asID:                     14754
IP address blocks:        186.151.94.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:13:af:ee:7d:59:3c:66:e7:be:c5:03:b4:be:b8:48:32:61:4b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Feb  4 18:20:57 2025 GMT
            Not After : Feb  3 18:25:57 2026 GMT
        Subject: CN=0526CFE96C23DF262AF875180618E0ABA4AF3053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:2e:1d:bd:a0:ad:12:65:78:8e:88:95:8f:
                    1d:96:a9:97:ca:df:e4:de:80:9f:c6:0c:e7:ed:ff:
                    4d:78:53:65:33:3f:8f:74:a0:e2:ed:df:07:56:e7:
                    3b:9e:38:30:56:5e:bd:37:62:1b:fd:88:5d:c2:2b:
                    9d:d3:37:e6:a9:4f:67:2e:0f:fb:b1:af:6e:5f:8c:
                    0d:aa:5e:1c:6d:6e:fb:fe:ff:32:4e:63:5a:32:7b:
                    de:08:7e:e6:14:ac:02:12:5e:b8:4e:8d:2d:1a:36:
                    47:49:97:50:a0:6d:80:5d:07:b8:06:88:4f:5b:79:
                    e1:51:aa:82:1f:2a:59:18:4b:13:62:03:28:b9:e9:
                    37:e6:26:7d:74:ac:01:eb:99:d0:32:8e:7c:7f:bd:
                    f1:1a:2d:7e:3e:73:1e:e9:b2:d1:d1:53:50:15:2e:
                    56:b1:37:14:4e:9d:7e:fc:9c:38:b6:13:d3:7c:b7:
                    0b:b5:56:4b:f1:00:eb:9c:a3:35:72:29:0d:b8:61:
                    14:e2:03:97:33:0a:58:b6:7d:7a:33:90:50:78:bb:
                    09:29:28:24:0e:fa:7b:8d:34:4b:95:49:97:32:c7:
                    db:d8:8b:88:e4:1b:16:8e:97:32:82:03:bc:9e:20:
                    10:00:b9:cf:42:e2:00:39:61:92:c0:2d:cb:de:8f:
                    e1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:26:CF:E9:6C:23:DF:26:2A:F8:75:18:06:18:E0:AB:A4:AF:30:53
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e3135312e39342e302f32342d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:3f:d0:97:a9:45:bf:24:b7:08:e7:c1:a5:ec:99:9f:88:23:
         09:00:41:a3:0f:a1:c2:a7:a4:24:04:fb:72:07:88:a3:0d:75:
         26:06:c9:87:a6:f0:fb:8c:30:ea:f5:65:9a:a4:55:e8:56:9c:
         51:ef:71:cf:df:46:4f:ad:73:73:a3:fb:74:83:01:62:e0:67:
         fc:be:93:99:b0:55:c8:c3:b2:6b:e3:88:22:b7:6c:a6:67:9b:
         e5:18:92:15:7b:c2:ea:70:a2:2c:56:d8:12:8f:5e:f8:b0:c8:
         d4:3e:25:df:8b:20:cb:d6:80:bb:97:3e:49:ec:58:bf:c8:59:
         aa:b2:bb:fc:3b:f9:00:53:73:4c:eb:00:06:c3:00:42:0e:10:
         d7:27:8f:43:ff:36:7d:92:03:45:5b:0c:8f:c2:fc:74:ad:52:
         41:46:f7:ae:eb:c6:e5:9f:34:68:7e:24:66:0c:df:40:3a:a3:
         8b:66:9f:0f:bf:7a:d4:85:44:2e:d0:c0:dc:9b:ca:a0:60:c0:
         7f:04:93:5d:fa:3b:9f:1a:5f:2f:12:33:69:c8:9d:fc:64:47:
         12:8b:f2:b7:c6:85:dd:b1:bb:6a:2e:a9:5b:4e:0d:30:f0:ec:
         b8:fa:74:e9:91:b4:bd:33:ef:15:21:e3:5e:97:ec:68:3b:26:
         c3:ac:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:49 2025 by rpki-client