Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/3138362e3231392e34382e302f32322d3234203d3e20323730303731.roa
File:                     3138362e3231392e34382e302f32322d3234203d3e20323730303731.roa (raw, json)
Hash identifier:          R7Ctd+suN7X0UXMSc6ZUAFfYRkSNlEWX/fpSfczNYgA=
Subject key identifier:   D6:1E:52:BD:5F:40:4D:67:B3:08:DE:B1:31:45:7F:8F:F8:BB:48:3D
Certificate issuer:       /CN=B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD
Certificate serial:       565CA98FCC794D9DD3C169D5CB64A894B6539ACD
Authority key identifier: B6:4A:BC:9E:C2:FC:C9:8F:57:7C:88:A6:0C:99:C3:5E:D7:96:3F:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/3138362e3231392e34382e302f32322d3234203d3e20323730303731.roa
Signing time:             Tue 04 Feb 2025 18:34:48 +0000
ROA not before:           Tue 04 Feb 2025 18:29:48 +0000
ROA not after:            Tue 03 Feb 2026 18:34:48 +0000
asID:                     270071
IP address blocks:        186.219.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5c:a9:8f:cc:79:4d:9d:d3:c1:69:d5:cb:64:a8:94:b6:53:9a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD
        Validity
            Not Before: Feb  4 18:29:48 2025 GMT
            Not After : Feb  3 18:34:48 2026 GMT
        Subject: CN=D61E52BD5F404D67B308DEB131457F8FF8BB483D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:c3:42:c6:08:16:24:30:d6:82:48:c5:3a:
                    a2:70:4d:38:69:a4:ca:ce:36:cb:e7:34:0d:a4:22:
                    76:79:7b:71:a5:c1:95:00:41:21:d1:84:6d:bb:2e:
                    84:8a:fb:2c:2d:ad:08:b6:bd:f3:99:11:65:84:be:
                    85:b4:38:a8:e3:7a:ff:95:f2:b1:be:db:75:cc:47:
                    65:c4:30:4f:29:11:d1:53:76:c5:08:46:15:6a:08:
                    09:f7:d6:4a:03:86:d6:55:01:24:ef:f8:68:90:a0:
                    20:63:11:04:82:93:60:15:7d:af:24:dd:36:03:03:
                    07:e1:3f:ee:f6:8d:37:68:ca:c0:85:09:e1:99:6b:
                    e8:65:3a:a6:5d:09:13:f2:7b:0c:0f:6a:e6:e3:27:
                    72:1c:23:0f:30:2f:f6:54:bd:49:8a:c9:a7:43:43:
                    d4:1d:32:55:a4:df:76:6c:d2:57:50:90:bf:f5:d4:
                    1e:4c:a2:1c:c7:5e:57:03:80:35:92:bb:24:97:91:
                    1f:0d:20:a4:0a:d4:d6:6d:4c:90:75:98:b2:1f:48:
                    99:8e:05:fe:af:86:d4:bb:0e:04:03:46:6a:bd:53:
                    e5:11:ec:42:56:fb:6a:48:88:69:d5:12:83:14:60:
                    b4:08:0b:56:56:40:0f:75:d7:62:11:c0:59:72:33:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1E:52:BD:5F:40:4D:67:B3:08:DE:B1:31:45:7F:8F:F8:BB:48:3D
            X509v3 Authority Key Identifier:
                keyid:B6:4A:BC:9E:C2:FC:C9:8F:57:7C:88:A6:0C:99:C3:5E:D7:96:3F:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/3138362e3231392e34382e302f32322d3234203d3e20323730303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:17:d4:68:1c:ba:81:1d:a4:4b:fe:4a:a4:34:63:d6:e0:
         ad:a7:73:82:53:ba:5b:87:c9:4e:4f:88:6a:7f:93:e6:39:5c:
         e2:db:81:e9:0b:1b:9f:ed:3a:84:89:ff:e9:2b:d9:a5:47:73:
         be:ad:f6:58:1c:fe:89:07:82:f2:24:ae:98:dc:cf:5d:04:52:
         08:a4:cf:05:bc:09:06:9d:a1:a5:ba:4f:b3:8d:c6:c4:c8:42:
         28:58:a0:90:04:b6:47:74:58:18:ac:d7:a1:9b:fd:83:b2:5c:
         70:aa:2c:29:36:37:d7:16:73:43:af:f4:af:2e:b0:d1:c7:4b:
         da:24:40:8b:29:e2:73:27:38:a8:bf:38:87:fb:21:1a:0b:ed:
         50:d4:d8:89:97:c0:d9:ba:04:23:39:37:42:e2:99:83:17:70:
         b0:b0:21:81:0e:c3:ce:9f:2c:72:a0:60:9d:fb:35:9e:94:99:
         af:ca:e0:c6:0e:d3:7d:d1:a2:a5:44:95:a3:f2:68:78:cc:9c:
         69:51:78:85:a9:30:d9:08:92:9c:27:5b:ea:fe:78:74:79:6e:
         57:47:cb:a3:14:73:e9:1a:f8:29:6c:d7:fe:b0:4e:bd:ff:57:
         98:e9:40:f7:f9:6b:f5:9a:f2:94:9b:90:10:ca:ad:50:70:bd:
         48:64:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:23:25 2025 by rpki-client