Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e31302e302f32342d3234203d3e20323634363638.roa
File:                     3138362e3130312e31302e302f32342d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          YxSgHpw9No9cxEdmOMLwx4cdOixMzcGD26yiVlR/HC8=
Subject key identifier:   E7:6E:E3:6F:B3:55:14:C3:A4:CF:5D:FB:FF:F7:D1:AC:DC:41:00:5B
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5C77D9758AA81C83280E2BD22388C735C2DDBF5B
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e31302e302f32342d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:11:21 +0000
ROA not before:           Tue 04 Feb 2025 18:06:21 +0000
ROA not after:            Tue 03 Feb 2026 18:11:21 +0000
asID:                     264668
IP address blocks:        186.101.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:77:d9:75:8a:a8:1c:83:28:0e:2b:d2:23:88:c7:35:c2:dd:bf:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:21 2025 GMT
            Not After : Feb  3 18:11:21 2026 GMT
        Subject: CN=E76EE36FB35514C3A4CF5DFBFFF7D1ACDC41005B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c5:25:ba:b1:52:78:6a:e2:09:a6:58:54:a1:
                    0e:62:de:52:cc:2c:73:e8:a5:ab:08:b6:e0:71:b7:
                    c1:41:ae:db:71:58:73:62:06:78:8e:61:07:df:80:
                    90:bf:6a:bc:c1:e5:69:11:08:2f:29:d4:49:58:db:
                    ac:14:1b:da:eb:f1:ff:7d:dd:9f:a0:df:70:d7:6f:
                    11:95:f3:c4:69:12:5a:d8:cb:54:58:77:59:54:64:
                    f8:d3:c6:7a:64:c4:3a:89:6b:65:b2:6a:2e:b6:04:
                    54:b4:23:17:82:b8:da:3b:d8:f3:d6:ba:4e:05:9c:
                    a3:9e:24:ae:2d:0d:23:67:34:74:f1:b4:d0:d9:f1:
                    d8:ff:63:7c:17:05:5c:0d:47:5e:e3:59:9c:fc:3c:
                    b8:1e:3b:c5:a2:9f:ca:f4:5b:1e:96:0e:d0:b5:49:
                    7e:ff:f6:5a:39:4d:01:8d:d9:dc:ba:51:71:71:32:
                    82:f1:6a:96:a4:b7:f6:b5:ea:51:1a:b1:fc:00:3c:
                    52:c9:90:af:4c:bc:86:e4:53:cb:bc:61:77:d2:d5:
                    58:23:af:9f:89:79:d3:ea:a7:36:ea:8e:52:96:2e:
                    52:f6:e2:a9:65:56:58:36:25:61:e0:39:63:10:55:
                    ae:36:67:f8:cc:da:19:8c:f3:4c:df:2e:b9:ae:e9:
                    b0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6E:E3:6F:B3:55:14:C3:A4:CF:5D:FB:FF:F7:D1:AC:DC:41:00:5B
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e31302e302f32342d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.101.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:18:62:ba:40:5c:c4:ae:4b:98:50:cb:97:2d:c8:9a:8b:91:
         68:35:7f:63:ff:5d:71:1e:27:50:12:4b:ec:aa:02:df:30:8b:
         dc:06:0a:02:bf:81:e6:bb:f9:5a:b1:14:5d:a6:f1:aa:5e:22:
         3d:ec:dd:93:98:10:6c:48:3b:25:a3:b0:d4:02:85:f1:d2:6c:
         5a:15:80:c3:78:00:24:36:e1:a9:c1:e3:70:82:60:9f:17:dc:
         f1:33:4f:27:58:12:28:fb:ca:b9:21:36:09:7b:51:4a:0c:13:
         b3:2c:93:bf:97:58:c9:2f:d2:cf:57:4f:c1:33:f0:b8:cb:05:
         b3:1d:96:2b:2c:d5:3a:c2:fb:07:28:0e:31:36:99:8e:5c:7d:
         18:a8:bf:ab:7c:54:a3:f5:a9:a8:06:42:d6:18:41:f6:3f:f7:
         18:17:03:8a:85:c2:e2:f3:25:ae:41:30:89:d7:1c:1f:d1:83:
         ab:b4:75:bb:24:33:b7:5d:b5:6a:44:28:62:21:06:4c:51:86:
         a3:4f:fa:fe:4e:ab:02:ae:6b:82:3c:55:37:f8:18:51:49:fe:
         f0:45:2d:aa:20:b3:c2:17:83:63:38:a7:fd:32:59:1d:fe:29:
         ab:31:9f:4d:f0:2c:97:7b:c4:d9:1b:95:23:06:f6:c8:c2:d5:
         8e:03:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:50 2025 by rpki-client