Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203237393437.roa
File:                     3138362e3130312e302e302f31362d3234203d3e203237393437.roa (raw, json)
Hash identifier:          JPhbnXkQIe1RlYwdbHN8M4vhTK1IdIqHeIQfb2cFdJI=
Subject key identifier:   E4:EF:58:9A:5C:7A:37:FE:28:F7:94:71:70:CE:7E:FD:90:E8:CF:7C
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       51B0653A0011F7D1E1F613EC25AF30F35A310DFC
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:11:16 +0000
ROA not before:           Tue 04 Feb 2025 18:06:16 +0000
ROA not after:            Tue 03 Feb 2026 18:11:16 +0000
asID:                     27947
IP address blocks:        186.101.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b0:65:3a:00:11:f7:d1:e1:f6:13:ec:25:af:30:f3:5a:31:0d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:16 2025 GMT
            Not After : Feb  3 18:11:16 2026 GMT
        Subject: CN=E4EF589A5C7A37FE28F7947170CE7EFD90E8CF7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5a:2e:6d:a9:0b:55:07:a8:74:12:99:3d:0b:
                    ba:ae:21:b8:32:2d:7f:db:d5:47:f6:35:8a:4d:9a:
                    77:5a:af:6e:ed:da:88:81:46:51:e6:cb:a7:8b:4b:
                    d1:f1:d4:61:be:f1:89:73:7c:90:8b:0c:02:8b:30:
                    1c:f8:32:41:a4:0d:27:bd:62:f7:72:a5:06:13:a2:
                    12:b4:8f:39:36:c4:58:4c:30:64:5c:d7:f4:e8:f3:
                    de:d3:02:0c:6e:3d:50:05:6f:49:22:8a:d6:99:f2:
                    dc:25:b9:2f:18:f4:a3:a7:61:0a:5c:35:63:4a:3d:
                    2f:46:75:cb:af:0b:8b:f6:9e:34:63:4c:7e:60:60:
                    7e:30:38:a8:e5:6b:46:92:6d:d8:55:a1:7f:38:78:
                    e2:83:1a:93:9c:5f:c6:18:c5:be:a8:83:bd:4d:93:
                    23:1f:f1:fc:01:31:80:2d:51:c3:95:ee:2f:ed:9e:
                    55:2c:f9:a7:b8:89:27:fc:f5:42:8f:4f:11:07:3b:
                    46:29:e1:35:94:ed:30:ee:aa:cd:70:02:ed:8f:20:
                    9d:ac:0b:65:04:1e:24:d5:b7:23:cc:ce:37:72:b9:
                    85:34:e1:5d:e1:b8:68:ee:c5:6a:43:c5:e6:3f:e1:
                    49:7a:ee:3c:4e:73:8e:67:b2:0e:f4:e4:f6:c7:a3:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EF:58:9A:5C:7A:37:FE:28:F7:94:71:70:CE:7E:FD:90:E8:CF:7C
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         06:11:b3:72:29:5b:07:e2:a4:bb:be:26:07:a7:92:30:ed:38:
         15:72:a2:2e:7d:5b:d7:2b:30:9e:2a:8a:da:8e:44:51:31:f4:
         a9:47:02:aa:42:3a:33:ce:ca:ce:7a:05:08:69:e5:02:ef:8d:
         66:c0:56:b1:cf:7d:3c:c1:66:97:48:7d:59:08:2e:ed:31:d0:
         4b:e6:c3:bf:59:35:d0:c1:b2:2a:5d:e8:e6:9e:1d:32:f4:1e:
         8f:0c:dc:8a:f7:e2:29:9e:a2:9a:c9:04:07:33:ed:b5:08:67:
         f9:21:09:95:00:e3:db:08:d1:9a:20:b1:62:21:61:76:93:0a:
         ba:d5:2a:06:09:96:d9:e4:a3:62:b7:ef:fd:5d:19:d9:d8:df:
         95:5f:d6:24:f1:07:15:35:c4:01:ea:a6:78:fe:e8:0d:2d:d3:
         6f:25:0a:05:16:f2:18:85:e1:d0:32:1f:f9:de:58:e8:f4:c1:
         28:bb:73:8c:ab:e5:f8:c8:2b:68:aa:48:cf:b8:e1:f5:16:87:
         f9:31:da:2e:48:63:59:5b:d9:a2:3a:6f:95:82:cd:e5:56:3a:
         16:a2:38:d2:0b:d3:52:2f:01:34:f8:cc:16:2c:82:3c:c6:6c:
         28:54:09:c7:9d:87:a8:dc:c2:0c:05:d8:bf:e2:30:60:94:d5:
         f1:89:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:55:46 2025 by rpki-client