Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e32362e3131322e302f32302d3332203d3e203134373534.roa
File:                     3138362e32362e3131322e302f32302d3332203d3e203134373534.roa (raw, json)
Hash identifier:          5BnqQcdYBvh1xFTJZlho0d+ZWI8T/R5+e6ImOM/CWAk=
Subject key identifier:   64:6D:15:13:F7:45:79:86:18:84:26:4E:0B:16:C6:01:75:0B:D0:7A
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       410AD827B7F417B5FA2D132EF005B1BCA2527D2A
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e32362e3131322e302f32302d3332203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:25:56 +0000
ROA not before:           Tue 04 Feb 2025 18:20:56 +0000
ROA not after:            Tue 03 Feb 2026 18:25:56 +0000
asID:                     14754
IP address blocks:        186.26.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0a:d8:27:b7:f4:17:b5:fa:2d:13:2e:f0:05:b1:bc:a2:52:7d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Feb  4 18:20:56 2025 GMT
            Not After : Feb  3 18:25:56 2026 GMT
        Subject: CN=646D1513F74579861884264E0B16C601750BD07A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:26:c5:0a:0c:f9:e6:6a:a0:1e:c1:58:7c:
                    41:79:f4:14:dd:e1:fa:03:3f:a6:51:41:9c:22:ab:
                    e3:b6:06:24:25:bf:a6:42:8b:19:82:42:43:0c:8c:
                    f0:c6:d6:9d:7f:49:9c:68:b8:2f:1e:0b:0a:4b:7e:
                    52:1b:29:34:34:8b:e5:05:bd:54:a9:d7:aa:88:dd:
                    45:7a:4d:c2:d6:6e:28:30:cc:20:4c:48:d0:00:af:
                    72:ba:90:9e:03:e8:ca:3c:aa:63:98:9c:9f:74:8c:
                    5d:1d:fe:97:fb:86:a7:e8:1b:b8:52:65:5d:a3:47:
                    94:bf:20:0d:f5:fb:e6:18:06:c6:4c:44:23:5e:ae:
                    c2:9c:03:f9:8d:41:b4:cf:2b:13:66:a4:2c:89:ef:
                    0e:4f:cc:04:49:4c:7d:f1:2c:6a:d2:ab:c7:47:d1:
                    c4:b4:d6:94:ad:2b:75:64:dd:37:70:ec:fe:f9:39:
                    37:11:e4:57:75:c4:df:c7:7e:1d:7b:92:7f:d3:22:
                    10:0d:4a:c8:c2:5a:e3:d5:40:2e:c4:a9:e0:e3:fe:
                    50:eb:77:d8:4b:e3:0b:6b:6f:0d:f3:3f:2d:98:89:
                    8b:73:70:f5:f8:77:9f:5b:ab:fe:93:91:c9:1b:7d:
                    95:a2:aa:32:4e:19:8c:ab:a0:a6:8a:14:14:d8:5c:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6D:15:13:F7:45:79:86:18:84:26:4E:0B:16:C6:01:75:0B:D0:7A
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e32362e3131322e302f32302d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:e5:55:f6:dd:a1:81:7b:99:99:65:81:96:8f:bc:45:5a:12:
         9a:4d:71:40:34:7f:5a:09:67:80:39:d3:24:4c:47:15:bd:3f:
         e2:2f:56:39:15:cd:b7:d5:cb:a1:bf:85:e7:ce:72:99:28:ea:
         cd:2c:3e:f2:79:53:f1:d4:7f:4d:21:dc:fe:5d:84:71:f4:6b:
         6c:7e:5b:48:c8:fc:08:1e:bf:da:6f:48:77:f4:ab:4c:b9:1e:
         87:93:e0:c8:e3:d0:42:69:b4:4d:b5:91:df:30:39:01:6e:21:
         fe:ac:c5:93:6a:59:b4:5f:52:e2:f7:72:14:d8:50:c5:05:b5:
         e6:c3:55:c6:81:02:b5:29:08:89:86:28:cb:34:ba:f5:84:9b:
         f0:47:26:aa:25:eb:10:03:1c:5a:f4:d1:7e:0e:19:d3:39:22:
         ff:31:d2:27:35:b8:7b:94:d7:34:95:ac:ae:ba:99:b8:04:79:
         2f:58:5c:b0:4b:cf:16:e8:af:24:f8:0c:37:90:a7:1c:64:a3:
         4d:4a:99:11:6c:d3:27:32:ae:f3:72:07:9e:34:dd:0f:1a:24:
         a0:51:dc:3e:8c:cc:8a:99:ed:e7:40:9d:eb:62:72:83:b2:7d:
         f1:0c:8b:cf:f8:5f:14:f2:c4:37:e2:0b:2e:7c:da:d9:63:69:
         72:14:ed:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:38 2025 by rpki-client