Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e362e302f32342d3234203d3e20323634363638.roa
File:                     3138362e332e362e302f32342d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          BjUVDARwrIJZZ3H0mjZH/a0RQOT/J2x+//bFte4VdM4=
Subject key identifier:   0F:9B:D3:85:C7:73:1D:30:0C:5C:A0:25:DA:E8:F1:90:4B:27:42:65
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       1E8D06F067ACFD5C59FB6F23F930AD2F2509ADA2
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e362e302f32342d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:11:14 +0000
ROA not before:           Tue 04 Feb 2025 18:06:14 +0000
ROA not after:            Tue 03 Feb 2026 18:11:14 +0000
asID:                     264668
IP address blocks:        186.3.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 18:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8d:06:f0:67:ac:fd:5c:59:fb:6f:23:f9:30:ad:2f:25:09:ad:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:14 2025 GMT
            Not After : Feb  3 18:11:14 2026 GMT
        Subject: CN=0F9BD385C7731D300C5CA025DAE8F1904B274265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:54:f6:ba:48:8e:ba:12:48:bb:52:43:8e:63:
                    be:32:ac:6e:63:23:ef:6d:9e:f4:a6:c5:c4:3c:13:
                    6c:53:51:1a:85:36:ae:68:6b:40:b4:59:15:7c:02:
                    77:a4:3c:5e:d6:bd:c4:61:55:7e:34:58:b0:45:e1:
                    8a:ce:eb:da:e8:9e:57:e1:59:ee:2a:2f:1f:db:a7:
                    82:2c:2f:da:c2:fe:28:df:25:83:b6:08:4f:54:cb:
                    46:b0:96:65:fb:53:d2:c4:e3:54:e0:8f:dc:da:7c:
                    e1:98:d6:f2:91:22:e4:36:01:4c:32:00:dd:ea:85:
                    08:45:9a:a5:30:24:78:6f:31:23:59:9c:67:cd:48:
                    2b:4d:7e:3e:d8:f2:19:d0:5a:df:40:74:07:75:2d:
                    fa:14:48:45:17:d8:7e:93:40:e6:5e:09:31:e5:60:
                    60:44:3a:c8:f9:1b:da:ee:64:33:55:02:f0:3d:6d:
                    23:ac:42:68:6e:19:18:59:36:73:31:92:27:13:d2:
                    8a:4e:7a:d0:96:c4:bc:5b:2e:4b:ab:d9:45:df:86:
                    50:67:df:ba:c8:3e:98:00:24:3f:7b:3e:7e:3c:bf:
                    e5:c1:0a:06:c5:c2:7f:f0:9c:f2:a6:61:e7:4a:98:
                    5c:d9:29:13:f6:4d:9c:e6:bf:2d:10:b2:de:e9:5c:
                    39:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9B:D3:85:C7:73:1D:30:0C:5C:A0:25:DA:E8:F1:90:4B:27:42:65
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e362e302f32342d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.3.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c3:f3:6d:ec:0d:64:69:3d:7f:18:2c:ad:82:3c:7b:94:65:
         64:5f:65:7b:f8:cc:37:7e:a6:57:0f:8c:05:ca:fe:51:92:3f:
         59:f6:61:d2:8d:4b:5b:f1:0a:f2:c1:4e:17:93:fb:11:bc:51:
         78:bd:6a:d7:cf:58:46:46:d3:6a:b4:06:36:c2:7a:2b:a3:28:
         34:3a:3d:e9:8e:53:b5:df:8b:9f:d8:95:97:02:62:c4:93:99:
         7f:f5:1a:92:97:41:c5:f6:54:18:7a:81:0e:15:c6:ef:9b:d4:
         62:3b:ed:09:70:ab:26:90:9e:36:fa:32:91:0f:d3:97:71:2f:
         eb:ea:df:0d:8d:1b:37:71:16:92:c1:3e:3f:e4:fd:20:0f:e5:
         8f:09:28:cd:da:de:4d:35:41:ae:c6:e4:b7:5b:51:98:03:19:
         f3:e2:c0:c5:c5:53:f4:90:1b:c1:ce:33:78:2e:97:5c:63:8f:
         33:1a:9b:16:1d:da:e7:56:d0:54:1a:c1:af:dc:22:d8:ab:b3:
         ec:a9:31:e8:38:e0:66:4d:a4:01:4d:e3:95:d7:9c:0f:e8:76:
         b0:25:79:65:36:a1:43:4b:a4:91:be:0f:b3:dd:55:90:7e:3d:
         b0:da:42:2a:52:8b:e0:c5:a7:ef:a2:a6:9a:a9:5c:11:9d:42:
         ef:05:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:44:08 2025 by rpki-client