Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e3135312e39362e302f32302d3332203d3e203134373534.roa
File:                     3138362e3135312e39362e302f32302d3332203d3e203134373534.roa (raw, json)
Hash identifier:          n+8mdX+0IBD+HS743fiFAXbKUKVM3ZuNkxdm8JF1MzU=
Subject key identifier:   38:79:EB:F5:85:1B:13:AB:EA:BB:8D:0C:76:14:A5:34:A1:3A:5E:34
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       21C765E51309D03BF666AFAD8B581E09D6CA5FFA
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e3135312e39362e302f32302d3332203d3e203134373534.roa
Signing time:             Mon 17 Feb 2025 15:10:01 +0000
ROA not before:           Mon 17 Feb 2025 15:05:01 +0000
ROA not after:            Mon 16 Feb 2026 15:10:01 +0000
asID:                     14754
IP address blocks:        186.151.96.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c7:65:e5:13:09:d0:3b:f6:66:af:ad:8b:58:1e:09:d6:ca:5f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Feb 17 15:05:01 2025 GMT
            Not After : Feb 16 15:10:01 2026 GMT
        Subject: CN=3879EBF5851B13ABEABB8D0C7614A534A13A5E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:d0:61:c3:6a:8c:ea:7b:17:67:11:02:9b:
                    10:05:a9:90:ec:1b:9a:1d:94:2c:7f:b1:e0:39:3b:
                    66:84:88:ed:9f:f7:b3:60:94:37:36:63:14:d5:93:
                    bc:d6:71:a7:a8:11:31:5a:92:57:a7:6d:aa:a2:bf:
                    71:7f:8e:1f:3d:82:fb:ce:00:07:b2:a4:42:24:92:
                    48:5f:4b:f4:de:b9:08:48:de:6a:83:4b:21:88:04:
                    03:03:bb:10:81:9d:2e:af:38:fa:55:3d:67:ce:a8:
                    9c:e7:50:78:e6:69:00:4e:64:73:93:cd:e2:8c:33:
                    48:7e:a0:cc:c7:29:5c:45:18:bc:2d:e9:fa:4a:06:
                    ac:19:03:74:27:1b:d0:af:c6:77:2c:26:0c:b0:2a:
                    6d:73:60:cd:ee:03:34:a7:40:b5:ee:f8:9e:db:ae:
                    fb:1c:1b:c1:eb:51:05:42:e6:26:0a:24:e4:e5:e9:
                    e2:78:2d:e7:ec:77:09:4e:c0:1d:08:97:55:52:93:
                    80:8c:16:60:22:ee:6c:67:1e:1a:49:2d:76:7a:2d:
                    d1:51:1e:b3:18:9c:b6:b3:ba:40:1e:bd:fc:1f:eb:
                    af:65:e3:84:69:ea:6a:d2:2b:05:27:dd:3c:7f:6a:
                    45:79:8d:34:63:6a:ae:3c:f9:7e:0c:cb:d7:b0:fd:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:79:EB:F5:85:1B:13:AB:EA:BB:8D:0C:76:14:A5:34:A1:3A:5E:34
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e3135312e39362e302f32302d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:e6:0e:ab:1a:5a:28:24:54:45:47:4f:8c:4f:1c:27:6e:39:
         eb:60:78:23:c3:a6:10:19:1a:9c:80:5d:91:6b:e4:5b:53:a3:
         dd:3d:38:4c:dd:ff:84:c6:b5:ab:e9:bb:b9:67:bf:67:2c:72:
         e2:ae:f5:e3:be:e0:6d:18:b3:83:b8:f9:9a:26:2b:45:d5:a3:
         02:ec:3f:c8:7b:d0:e5:15:96:63:58:bf:d6:70:0b:b2:45:d7:
         de:d8:7f:30:b4:b2:44:08:61:80:c0:05:b7:29:6b:b8:cc:29:
         ff:e8:de:fb:2d:61:2e:d3:f9:9b:62:f9:69:6f:93:73:d0:8d:
         57:5b:24:ad:78:ed:b0:91:56:a6:d4:ce:9c:63:71:6c:90:90:
         56:52:22:bb:b1:20:7e:3a:66:04:28:d3:d7:40:9f:e4:d3:48:
         24:03:3a:69:bb:05:bd:75:bb:9a:6d:9e:97:9e:93:75:5b:76:
         22:05:5c:31:07:3a:ba:32:90:83:97:64:77:2c:94:25:54:ba:
         03:52:83:36:fe:2f:4a:f8:bd:1c:c6:f4:ba:4a:88:19:1e:4c:
         51:3a:6f:67:5d:3f:e9:24:f6:6c:e6:0e:81:19:b1:5b:6d:50:
         dd:1a:cc:b2:cc:3b:81:29:0a:5d:78:5d:27:75:00:6e:28:d0:
         d0:b6:ab:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:14 2025 by rpki-client