Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/3138362e3139342e35362e302f32312d3234203d3e20323732383531.roa
File:                     3138362e3139342e35362e302f32312d3234203d3e20323732383531.roa (raw, json)
Hash identifier:          YQ18OzF1Buj9s6QiuiSkcMedIPj0Ejd1Z6UFuSbjviQ=
Subject key identifier:   A1:F9:65:3F:EB:D8:48:91:55:56:7D:75:DB:35:DA:6C:9F:8B:F7:30
Certificate issuer:       /CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
Certificate serial:       3219771FE1126AEEA837B9580A78D143359A0859
Authority key identifier: 1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/3138362e3139342e35362e302f32312d3234203d3e20323732383531.roa
Signing time:             Fri 09 May 2025 14:20:00 +0000
ROA not before:           Fri 09 May 2025 14:15:00 +0000
ROA not after:            Fri 08 May 2026 14:20:00 +0000
asID:                     272851
IP address blocks:        186.194.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 May 2025 17:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:19:77:1f:e1:12:6a:ee:a8:37:b9:58:0a:78:d1:43:35:9a:08:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
        Validity
            Not Before: May  9 14:15:00 2025 GMT
            Not After : May  8 14:20:00 2026 GMT
        Subject: CN=A1F9653FEBD8489155567D75DB35DA6C9F8BF730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:97:59:1d:74:9e:aa:05:d4:51:ab:8a:48:
                    c2:33:08:bb:a4:03:05:15:ec:1a:36:44:a2:4c:ba:
                    a6:d5:ad:3b:bb:67:68:61:7a:e4:3c:f4:3c:bb:f0:
                    b8:e9:74:f4:c2:1c:27:3f:ac:3a:02:2a:93:01:62:
                    13:34:05:af:79:6c:db:43:e3:f1:aa:ab:5e:fc:f4:
                    74:99:dc:11:5e:e7:66:44:93:be:25:e2:c2:88:65:
                    66:ea:16:af:36:04:d4:d5:93:3d:ff:00:45:85:8b:
                    64:ff:f9:09:e9:17:3b:b6:f6:a7:49:8a:10:02:32:
                    6f:08:5d:77:ac:c5:1b:2b:25:1e:bd:a2:54:5f:ec:
                    56:4a:43:d7:2c:fc:3f:a9:bb:7d:06:83:04:66:ab:
                    6e:e5:c8:cc:3b:c5:17:5f:f1:b2:92:2e:c3:51:ba:
                    8c:91:e7:31:dc:4d:79:39:78:61:3d:95:5a:30:b5:
                    63:f7:54:bd:f0:b2:a0:ee:ad:9b:66:08:5e:db:83:
                    4e:67:14:b4:cd:7d:99:8a:a1:00:3d:a2:b7:8b:fa:
                    49:a2:57:c1:71:7a:13:62:b2:e3:a7:91:99:80:0c:
                    6e:ba:0e:e5:f8:45:e2:ac:f4:6a:49:ff:29:8f:54:
                    f6:9a:23:bc:e4:b6:a9:8f:25:ec:a9:12:f7:fc:03:
                    2e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F9:65:3F:EB:D8:48:91:55:56:7D:75:DB:35:DA:6C:9F:8B:F7:30
            X509v3 Authority Key Identifier:
                keyid:1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/3138362e3139342e35362e302f32312d3234203d3e20323732383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:e1:ae:e4:02:e5:d3:c0:e0:eb:e7:bf:83:30:54:d7:ce:14:
         cc:eb:cf:11:4e:e5:a9:dc:f0:8b:ec:8a:f5:b8:a5:c4:d0:6b:
         6a:ed:84:cf:e5:80:3e:19:b7:62:f3:f4:ba:d6:82:71:db:98:
         82:6e:6e:2a:82:fa:32:1a:07:0e:25:8f:ea:23:b5:23:84:17:
         9f:15:a1:bd:f2:c6:83:cc:5e:0e:68:4a:44:8e:9b:45:57:e2:
         c6:68:8a:af:95:c2:62:fc:14:54:4b:ac:c9:be:aa:9c:7e:ee:
         b0:58:4c:56:dc:6f:d7:25:4e:a7:16:68:8a:c2:6d:ea:72:4e:
         29:42:3b:53:0f:ae:89:69:1b:46:d1:f9:e4:c1:1b:23:67:4c:
         35:bf:3e:c9:f0:ba:8f:09:13:ca:db:ef:a8:ab:1d:c5:d0:65:
         a3:dc:b0:1e:ed:4c:37:60:fd:73:44:40:61:78:b3:5d:7f:cf:
         b7:83:ae:4c:9e:ff:1e:49:c9:be:8c:91:e9:b0:ee:64:90:7e:
         21:95:87:1a:4c:5c:b4:89:61:e2:75:0b:79:19:d5:03:5a:cb:
         04:74:57:bb:e6:ef:06:7f:ed:38:1e:4a:58:57:ac:b2:a4:48:
         ef:cc:2f:0c:b7:d7:6d:f6:43:a8:b8:e7:ed:7a:b8:27:35:01:
         89:6e:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 11:59:07 2025 by rpki-client