Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3230362e302f32342d3234203d3e20323635373235.roa
File:                     3138362e302e3230362e302f32342d3234203d3e20323635373235.roa (raw, json)
Hash identifier:          R0i1vxAlAhUqD65WbzHO46P4kN27YeVqigJ05bwaS2M=
Subject key identifier:   E2:46:E3:3B:5A:E8:A5:37:3E:10:C1:CD:A8:C9:AB:99:E0:E9:23:1A
Certificate issuer:       /CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
Certificate serial:       96FA2C9ACEF90949E9672689BEA4EEDFFB8B40
Authority key identifier: EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3230362e302f32342d3234203d3e20323635373235.roa
Signing time:             Mon 09 Jun 2025 13:05:00 +0000
ROA not before:           Mon 09 Jun 2025 13:00:00 +0000
ROA not after:            Mon 08 Jun 2026 13:05:00 +0000
asID:                     265725
IP address blocks:        186.0.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 14:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            96:fa:2c:9a:ce:f9:09:49:e9:67:26:89:be:a4:ee:df:fb:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
        Validity
            Not Before: Jun  9 13:00:00 2025 GMT
            Not After : Jun  8 13:05:00 2026 GMT
        Subject: CN=E246E33B5AE8A5373E10C1CDA8C9AB99E0E9231A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:f6:b2:9d:ca:51:3b:aa:43:9d:e2:c2:0b:
                    8c:a8:d5:af:5d:1e:b4:27:87:e9:a0:a6:d4:d6:66:
                    07:13:63:50:68:40:9c:61:a8:5c:f5:59:e9:68:ca:
                    41:22:a0:cc:1b:ea:72:21:81:af:20:36:3d:11:5a:
                    c4:8a:52:20:c8:85:04:d0:b5:a0:7a:10:dd:36:a3:
                    01:d6:30:ec:5a:bb:c5:67:74:3a:fd:a0:28:61:0d:
                    d9:12:4e:5d:81:8b:0b:aa:82:50:1d:5b:5b:7d:23:
                    6b:e6:d6:c8:fb:33:9a:a8:9a:5f:ca:b6:ef:ce:bb:
                    40:3a:89:f4:2b:a6:53:ac:f0:c8:5b:a2:4a:12:53:
                    ac:7e:13:43:8f:e2:a7:5c:7d:47:ab:21:0d:d1:90:
                    26:cf:0f:ed:61:b5:7d:7c:01:4b:bd:45:9b:82:f0:
                    52:2d:b3:65:7b:fb:3d:3a:14:0e:bd:dc:f0:c4:35:
                    21:be:92:81:ed:5c:01:d6:f2:08:f7:0f:f1:d6:47:
                    32:a7:f9:a7:14:20:75:bd:16:d3:20:f6:55:28:11:
                    ca:34:6f:fb:97:99:ec:1f:1e:35:c8:6b:d0:07:99:
                    fb:18:4c:bd:f1:e7:ad:f3:68:1a:7d:89:03:d8:ba:
                    83:a3:21:78:14:90:c4:89:55:1a:eb:18:fc:e1:a6:
                    1d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:46:E3:3B:5A:E8:A5:37:3E:10:C1:CD:A8:C9:AB:99:E0:E9:23:1A
            X509v3 Authority Key Identifier:
                keyid:EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3230362e302f32342d3234203d3e20323635373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:4d:11:b1:ae:79:08:df:85:ac:19:9c:11:aa:bd:a6:1e:22:
         cf:e3:4f:ef:2b:13:cf:00:b4:04:8d:ce:0e:5f:89:5c:93:d4:
         30:46:bf:f6:7b:75:c1:b5:42:75:be:1e:cf:9c:04:a1:cd:66:
         ac:d1:45:22:d0:1f:fc:7d:7f:41:19:28:5b:4c:a7:0f:20:64:
         6a:95:07:59:97:b3:79:cb:57:fc:ef:15:92:21:c3:d1:f3:55:
         18:54:22:69:b1:d8:88:ad:54:f6:02:84:0c:89:c4:59:63:26:
         3b:83:68:9f:e9:49:6f:04:de:10:38:fc:d4:91:a8:88:cf:69:
         06:d8:ef:d8:74:ce:0f:1b:da:a6:d5:9e:fe:13:fe:04:ec:e4:
         b5:d8:72:5a:84:eb:86:56:d1:a3:38:cc:fd:ff:a9:5a:a5:d6:
         8d:bc:93:5c:2b:b8:4f:fa:dc:77:70:fb:16:70:08:29:d2:ad:
         94:c8:41:0c:fe:45:14:86:c2:4a:c6:9d:0d:41:0c:14:72:32:
         16:53:7d:3d:e4:df:1b:0d:6d:ae:8e:d8:4a:92:45:fb:84:69:
         a5:ee:1c:5b:01:66:2c:88:b9:28:fc:a6:18:d1:f6:b8:ce:b5:
         b2:b4:7f:b9:c1:9e:6c:68:1b:96:0f:f5:fe:4d:22:70:ec:22:
         36:4c:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:48:21 2025 by rpki-client