Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e31322e302f32342d3234203d3e203634313130.roa
File:                     3138362e3130312e31322e302f32342d3234203d3e203634313130.roa (raw, json)
Hash identifier:          ofec44twNrISAx3VqRhF8cah5wEiYw/Ke2ftgispGUk=
Subject key identifier:   14:66:86:AF:0F:7C:90:D0:B8:8E:B8:79:53:A3:EC:59:14:15:D2:7F
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       7D9E8ECDA3FBCCC75962082D4124B4BE475E457D
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e31322e302f32342d3234203d3e203634313130.roa
Signing time:             Tue 04 Feb 2025 18:11:23 +0000
ROA not before:           Tue 04 Feb 2025 18:06:23 +0000
ROA not after:            Tue 03 Feb 2026 18:11:23 +0000
asID:                     64110
IP address blocks:        186.101.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9e:8e:cd:a3:fb:cc:c7:59:62:08:2d:41:24:b4:be:47:5e:45:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:23 2025 GMT
            Not After : Feb  3 18:11:23 2026 GMT
        Subject: CN=146686AF0F7C90D0B88EB87953A3EC591415D27F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:37:83:c3:6c:2d:7d:90:6a:f3:af:1f:3b:
                    3a:01:47:4f:b1:11:88:a3:4a:2c:f7:ac:7f:57:3b:
                    5b:74:49:89:dc:98:2e:d9:cd:1d:39:5b:f8:47:3a:
                    7f:05:98:ba:11:24:c3:49:9c:fa:5d:50:83:06:dd:
                    a8:42:1f:0f:b7:79:ba:83:76:e4:2b:01:57:0c:71:
                    91:36:b7:8b:a9:85:ce:4b:0b:1f:eb:3f:98:6a:f0:
                    e7:0d:45:63:00:18:3f:fb:aa:53:6e:fb:b2:02:8f:
                    f5:b0:db:6c:63:0d:07:6a:b1:e5:e1:dd:43:6a:26:
                    fd:2d:28:b3:08:b6:a0:45:a4:fd:d0:0e:4d:04:8d:
                    95:ca:95:e5:9d:36:f4:a2:8b:72:a4:e7:81:0f:28:
                    6b:c4:04:ef:8d:51:88:35:b2:e7:bc:c3:ac:54:1f:
                    5f:38:3d:f0:2b:ee:c7:4b:7b:35:f3:77:b2:89:52:
                    d1:ba:52:11:78:34:f5:fe:5b:d4:66:3a:0e:78:6a:
                    24:f0:22:37:ce:d0:cb:17:40:8f:25:9c:e2:52:b2:
                    b1:06:c8:44:aa:f6:49:76:9e:a2:35:9c:89:f4:a7:
                    7f:11:67:51:66:5d:f2:6b:d9:42:db:7e:44:9a:73:
                    e9:fb:86:fc:35:74:48:66:ff:09:84:9c:8e:6b:96:
                    4c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:66:86:AF:0F:7C:90:D0:B8:8E:B8:79:53:A3:EC:59:14:15:D2:7F
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e31322e302f32342d3234203d3e203634313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.101.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:c1:28:d7:b8:da:74:d7:e7:12:09:6f:de:cd:1e:0d:6c:0d:
         60:41:94:d9:c1:9a:37:d9:a7:2e:7e:b5:a0:1b:d8:a5:b6:cb:
         7a:75:e3:75:e3:87:d2:19:96:9e:e2:3b:9e:36:a6:e1:91:9e:
         ab:ef:91:fd:e2:0c:67:6c:a5:20:6e:82:e0:13:ea:89:39:fb:
         15:0e:15:3f:3b:31:25:53:2a:12:33:6c:0d:59:cb:e3:2d:a1:
         ea:fe:3b:98:c9:7a:ad:73:8c:06:3f:4e:e6:8e:d0:db:f5:fe:
         6e:d2:db:98:a6:4a:c0:f7:b5:bc:cf:5c:98:52:94:e9:29:02:
         35:6a:36:6b:c2:9d:fb:8b:65:83:55:2a:5a:5b:94:98:ac:99:
         27:5c:1a:e4:99:a5:f9:43:44:12:58:57:2c:a1:e0:36:b9:95:
         49:93:89:38:ba:de:62:28:2c:ee:08:35:e3:5c:ba:fd:e0:03:
         11:33:50:16:ca:0c:0f:18:84:6d:77:d6:45:54:09:44:dc:5d:
         2a:74:52:a6:2d:7c:c5:3a:7a:77:41:ed:1d:d5:c9:67:81:62:
         0c:1d:3b:db:f9:06:3b:19:00:f0:7e:68:82:08:2d:bb:a9:0e:
         b9:a6:c0:71:d0:f6:b8:18:a6:9c:1c:2b:56:a7:4c:33:52:3e:
         f7:01:db:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:33:05 2025 by rpki-client