Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3138362e352e3137362e302f32302d3234203d3e203237393731.roa
File:                     3138362e352e3137362e302f32302d3234203d3e203237393731.roa (raw, json)
Hash identifier:          UbPTkurP8SAwKL6J+Jegkc1qpY91St2nuB8R5NsyWzA=
Subject key identifier:   F8:03:CC:E7:CD:6F:36:82:4A:CF:77:44:F4:8D:62:98:23:97:9C:DD
Certificate issuer:       /CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
Certificate serial:       6D64C13A30BF70417D62E84ACCD367F29380743D
Authority key identifier: 18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3138362e352e3137362e302f32302d3234203d3e203237393731.roa
Signing time:             Tue 04 Feb 2025 18:06:22 +0000
ROA not before:           Tue 04 Feb 2025 18:01:22 +0000
ROA not after:            Tue 03 Feb 2026 18:06:22 +0000
asID:                     27971
IP address blocks:        186.5.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:64:c1:3a:30:bf:70:41:7d:62:e8:4a:cc:d3:67:f2:93:80:74:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
        Validity
            Not Before: Feb  4 18:01:22 2025 GMT
            Not After : Feb  3 18:06:22 2026 GMT
        Subject: CN=F803CCE7CD6F36824ACF7744F48D629823979CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:7d:49:ec:ec:c0:f2:56:d1:3b:71:72:75:
                    02:48:96:d2:81:5c:ea:5e:03:f5:bb:2b:c0:f0:e6:
                    80:9f:e1:d5:f8:3e:19:d3:56:b6:84:9b:50:30:76:
                    f2:3c:86:3c:7b:0d:a0:ce:c1:e1:e6:aa:21:f0:3f:
                    19:35:95:68:c5:4d:c4:1f:a5:a6:83:d1:0d:39:d8:
                    3c:cb:96:ed:34:90:6c:b5:1a:8e:3f:0f:53:ed:25:
                    fe:51:6b:3f:0f:84:ac:5f:03:46:dc:c8:57:6d:0c:
                    8c:92:65:69:f3:e8:e4:af:92:41:7e:bd:40:a0:ba:
                    eb:03:7e:eb:be:6e:a1:60:bc:ea:c9:95:59:13:11:
                    60:b8:d7:a5:25:e9:cd:c4:38:06:2e:a4:c8:b0:6e:
                    16:ec:62:f3:83:15:da:0b:9c:5b:6c:ef:27:44:45:
                    b2:5c:04:00:a1:7a:c1:f8:f5:a2:5d:22:c2:53:11:
                    82:34:8b:78:3a:4d:d8:71:b9:23:43:46:85:a9:44:
                    4e:30:e1:91:0c:8e:a7:a1:dd:b6:4e:31:a9:88:74:
                    9f:d6:e8:dc:4a:fd:68:db:1a:75:56:cb:69:6f:b4:
                    11:35:f6:09:94:1e:32:57:d9:f4:43:01:06:f5:ca:
                    4b:96:f6:b1:93:7a:70:71:d2:05:90:ea:65:ab:7f:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:03:CC:E7:CD:6F:36:82:4A:CF:77:44:F4:8D:62:98:23:97:9C:DD
            X509v3 Authority Key Identifier:
                keyid:18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3138362e352e3137362e302f32302d3234203d3e203237393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:2c:e4:1e:a1:04:72:50:5b:a7:88:1a:27:9c:c0:56:7b:82:
         b8:12:0f:e4:9a:b1:d4:f4:b2:21:1f:6d:97:e0:ef:93:92:ec:
         20:b3:4d:4a:c8:b2:85:70:ea:36:82:b9:84:00:6f:53:a5:60:
         03:82:db:81:3e:fd:c5:80:8e:26:c4:8c:1b:2b:5f:3d:09:30:
         9c:66:12:b3:a0:ce:03:de:53:fc:97:31:51:6b:d6:51:a9:87:
         14:30:e8:15:f7:dc:6d:e8:f6:fa:de:16:1d:76:4e:64:4c:17:
         cb:00:fa:d1:67:97:73:2d:71:f3:fb:42:fe:bd:4f:4e:2e:cb:
         61:63:dc:db:6b:5e:85:0e:43:77:0f:4c:79:87:48:88:34:91:
         95:1b:be:2e:0d:10:13:16:84:8c:29:df:7f:cb:5d:53:3f:78:
         14:05:79:54:2a:bf:c8:aa:5a:54:58:4f:17:f2:2e:98:4f:b1:
         76:27:e2:03:e7:57:4f:87:5b:ae:5b:f1:f7:bb:ab:18:f4:a5:
         f1:87:36:b0:61:d1:18:16:fc:f7:4c:ca:ac:26:d8:7c:3f:de:
         79:f9:15:d4:fd:6f:cf:f4:e1:00:49:a9:d6:7e:d7:dd:f0:7f:
         21:37:44:44:26:b7:b0:36:0a:80:05:7a:75:ad:b0:53:73:f2:
         a6:5b:a0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:49:31 2025 by rpki-client