Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e3132382e302f31372d3234203d3e203532323537.roa
File:                     3138362e332e3132382e302f31372d3234203d3e203532323537.roa (raw, json)
Hash identifier:          PShlWkwLdyVHpgdmr8dzbJmYaOKk8Dmq95nZOauH1g4=
Subject key identifier:   37:3D:66:71:2A:33:C3:78:54:77:9D:5C:14:99:41:B5:7E:34:14:AF
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       42472689A49BC84AD7A16FBF8BBAC0698BE13271
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e3132382e302f31372d3234203d3e203532323537.roa
Signing time:             Tue 04 Feb 2025 18:11:12 +0000
ROA not before:           Tue 04 Feb 2025 18:06:12 +0000
ROA not after:            Tue 03 Feb 2026 18:11:12 +0000
asID:                     52257
IP address blocks:        186.3.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:47:26:89:a4:9b:c8:4a:d7:a1:6f:bf:8b:ba:c0:69:8b:e1:32:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:12 2025 GMT
            Not After : Feb  3 18:11:12 2026 GMT
        Subject: CN=373D66712A33C37854779D5C149941B57E3414AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:eb:07:0c:39:b1:94:78:f0:1a:2b:07:a2:
                    09:bd:71:a6:e7:ec:0f:7d:dd:fb:96:d1:13:bb:5f:
                    b3:22:93:c2:a7:17:f3:33:e8:a9:5d:57:a1:89:e3:
                    dc:42:f3:91:3a:c9:c1:71:9e:0f:3c:1e:92:38:67:
                    9f:f9:75:1c:2b:fd:2b:b0:cf:63:8e:a7:d5:12:22:
                    99:ee:2c:51:25:21:51:3e:47:92:73:ad:84:97:cb:
                    f1:a7:4f:f6:c5:3e:e9:31:3f:6f:09:1c:85:4b:f6:
                    25:a7:e2:2a:bd:b9:0f:76:3e:74:45:db:c9:a3:36:
                    05:53:48:95:9f:5c:fb:df:14:b0:ee:57:42:c2:65:
                    eb:66:3b:6c:8b:28:ee:2f:0d:65:dc:b2:be:90:62:
                    da:43:35:09:b5:05:38:48:ce:b6:20:19:d0:e4:08:
                    3e:51:41:77:34:de:e8:8f:87:f1:66:a2:b6:ce:b0:
                    86:ab:cb:d4:3d:9f:03:ee:73:69:78:5b:dd:e6:bc:
                    0a:5b:c0:69:dd:1f:88:c7:bf:4a:68:7d:59:f5:07:
                    1b:61:71:59:ff:47:1f:6b:99:63:c7:79:8d:1f:36:
                    bd:6e:32:13:15:72:2d:43:f8:2c:5e:e3:b4:6d:cd:
                    c8:2e:0a:eb:9b:7a:8d:50:0d:93:0f:0a:87:29:bc:
                    d1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3D:66:71:2A:33:C3:78:54:77:9D:5C:14:99:41:B5:7E:34:14:AF
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e3132382e302f31372d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.3.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0d:e7:ca:9b:99:16:91:fc:3a:62:23:78:a8:27:bb:9d:c1:cd:
         b6:3c:7d:30:04:25:0c:cd:6f:58:22:1b:49:0d:9c:da:7b:08:
         c7:55:c1:4c:53:18:a3:03:4f:d5:0f:55:0c:9a:ad:65:77:39:
         93:21:73:00:7b:2d:55:54:03:44:0f:da:7c:45:1e:85:1b:56:
         b0:1d:ce:3e:2f:3b:9c:48:ff:38:33:a7:8c:ba:7c:f2:80:50:
         a2:4f:57:16:62:58:31:45:cb:e1:f6:c4:8c:2f:28:3c:44:43:
         82:d4:27:41:44:a1:4a:1f:a0:67:11:28:e3:8d:06:72:a6:58:
         be:18:af:cc:c6:28:52:a1:c3:33:04:ed:15:4f:5e:5a:43:9f:
         30:c2:a8:1f:6f:25:41:37:26:43:34:28:83:0b:38:38:a4:d3:
         02:5b:33:c5:9e:c3:f0:4c:c1:6c:3a:20:91:69:5a:e3:70:94:
         76:a1:19:18:84:1b:2f:1a:5e:3c:3f:a7:5a:8e:4a:97:41:15:
         d9:63:3a:1c:33:2b:9a:a1:a2:ef:47:67:b7:43:c1:a4:c8:e2:
         99:dc:52:d8:16:98:26:06:71:7c:92:54:81:6e:b5:b2:80:24:
         a0:d5:10:45:e5:a3:29:a6:08:41:ff:1a:f2:85:48:8b:07:08:
         40:97:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:35 2025 by rpki-client