Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e31302e302f32332d3234203d3e203634313130.roa
File:                     3138362e3130312e31302e302f32332d3234203d3e203634313130.roa (raw, json)
Hash identifier:          NcfljLyVTXbn5cF12gWpstJ7m4oAU2Zr/0hCrXJ1WfA=
Subject key identifier:   1F:C3:C2:35:07:2F:44:F3:7D:C7:31:22:40:39:87:CF:CA:1D:BC:DA
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       16D40EAB678781AAB9E53D3AB8E69BB7AF56FC40
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e31302e302f32332d3234203d3e203634313130.roa
Signing time:             Tue 04 Feb 2025 18:11:17 +0000
ROA not before:           Tue 04 Feb 2025 18:06:17 +0000
ROA not after:            Tue 03 Feb 2026 18:11:17 +0000
asID:                     64110
IP address blocks:        186.101.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 18:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d4:0e:ab:67:87:81:aa:b9:e5:3d:3a:b8:e6:9b:b7:af:56:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:17 2025 GMT
            Not After : Feb  3 18:11:17 2026 GMT
        Subject: CN=1FC3C235072F44F37DC73122403987CFCA1DBCDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:6f:96:10:d3:53:72:35:22:76:0e:c9:55:
                    af:94:c5:98:e5:64:ed:01:a2:e4:26:b8:38:77:a8:
                    d1:b9:fb:6e:5c:5b:3a:d5:34:36:2e:cb:34:94:1e:
                    0c:fb:13:c2:ac:e1:49:51:a6:9b:c4:b7:08:c9:77:
                    b1:49:49:20:0f:59:24:fa:9a:91:88:ce:c8:38:d4:
                    7f:e8:cf:15:ab:ca:16:8e:be:98:45:03:f0:4f:a6:
                    90:2e:7c:d6:f5:60:3d:da:c0:2a:24:a1:1d:5b:20:
                    bb:00:35:0b:bc:f2:bc:0c:b5:55:8b:9f:cf:da:df:
                    87:76:b9:c3:64:4e:75:a0:55:1a:62:35:4b:bd:26:
                    43:8c:d6:74:11:33:72:69:43:30:76:25:76:79:69:
                    29:ff:d9:7e:db:f0:d2:67:93:cf:1e:6d:0d:45:39:
                    02:1e:df:b2:b2:48:b1:cd:87:0d:3f:62:7e:a8:ea:
                    af:03:d1:fa:14:cc:27:54:dd:2c:e0:c6:46:c0:0e:
                    e9:f9:21:a2:5e:bc:b6:a4:9c:3c:e7:f0:d2:25:e2:
                    b0:fa:99:90:26:14:6a:b0:35:c5:b1:fe:ce:42:b6:
                    b8:f0:62:68:38:12:69:1f:8c:21:33:f5:0d:f2:c9:
                    c4:23:af:68:71:e3:78:1a:2c:ba:36:a6:73:e7:a3:
                    c9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C3:C2:35:07:2F:44:F3:7D:C7:31:22:40:39:87:CF:CA:1D:BC:DA
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e31302e302f32332d3234203d3e203634313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.101.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:ee:17:86:82:b8:ef:64:df:0c:51:3a:53:07:7b:73:44:
         b1:0f:21:2f:36:34:d9:a8:ba:64:00:14:78:c5:0f:68:c2:45:
         c1:12:ec:b9:40:28:5d:2c:65:c9:70:30:c3:fd:a8:62:ee:83:
         29:00:e3:bd:5d:85:81:bb:5e:9a:93:e1:c3:56:54:ea:a9:83:
         a4:be:ed:2a:fd:82:d5:82:29:6d:3c:22:86:85:b5:61:0c:1e:
         85:8a:c5:4d:51:b4:23:d4:d9:01:aa:7f:2c:7f:9b:88:b0:2c:
         db:f0:16:ef:cc:d0:db:7c:60:6b:b4:2b:9d:a3:df:8b:78:4a:
         ce:2b:51:43:89:94:cb:1a:aa:da:d3:14:cc:e5:d1:c5:76:6e:
         a5:a6:44:5e:12:01:8d:8d:20:c2:8d:2e:98:e6:09:14:1f:7e:
         b9:45:bc:ff:52:38:84:70:f2:26:2a:7c:cc:3e:27:82:7d:5d:
         ee:bf:b5:1a:69:41:cc:d9:b4:cc:e8:39:d1:b4:11:68:90:e4:
         45:fa:f0:b1:31:ba:69:a2:b4:ea:52:b1:77:f3:50:13:fd:4d:
         4c:11:32:a6:58:52:83:45:99:b6:2e:ae:05:0d:71:84:df:e6:
         97:75:67:ed:b1:55:c2:2d:1b:ac:35:d1:71:6d:b0:68:d3:30:
         f1:90:2e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:10:27 2025 by rpki-client