Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34302e302e302f31372d3234203d3e2037343138.roa
File:                     3138362e34302e302e302f31372d3234203d3e2037343138.roa (raw, json)
Hash identifier:          rLfM8RJd3bq+WS/bUeK0O7YXPyYopYp4g9IkCakxYRw=
Subject key identifier:   CD:7E:13:DF:12:81:6F:BB:EA:5B:F4:EB:D2:40:CF:1E:20:1B:25:2D
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       1F47FC8C0A1DEBAC5DA040EA0FD3EB448776DFCA
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34302e302e302f31372d3234203d3e2037343138.roa
Signing time:             Wed 14 May 2025 18:18:48 +0000
ROA not before:           Wed 14 May 2025 18:13:48 +0000
ROA not after:            Wed 13 May 2026 18:18:48 +0000
asID:                     7418
IP address blocks:        186.40.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 20:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:47:fc:8c:0a:1d:eb:ac:5d:a0:40:ea:0f:d3:eb:44:87:76:df:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: May 14 18:13:48 2025 GMT
            Not After : May 13 18:18:48 2026 GMT
        Subject: CN=CD7E13DF12816FBBEA5BF4EBD240CF1E201B252D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:18:95:d2:b4:d1:65:05:3b:25:1a:ec:e2:
                    b1:81:79:a0:22:16:06:0d:5c:46:c0:8a:78:b7:6b:
                    76:0d:d4:43:66:d8:51:bc:12:ca:43:e8:62:39:a7:
                    5d:b6:30:33:43:98:ca:8f:93:e3:00:3d:24:c1:78:
                    f1:c9:2c:ef:87:dd:24:8b:63:20:f6:02:33:6b:5d:
                    cc:7e:ae:8d:28:b7:21:83:42:b2:d3:5e:85:37:5f:
                    74:76:38:75:4d:48:27:08:75:86:41:96:b3:0e:fa:
                    aa:f8:71:3b:46:7e:b5:46:c4:f6:29:3e:df:9d:8e:
                    59:a0:6d:10:09:b7:57:30:d7:d2:81:aa:e9:cb:20:
                    9f:ae:9c:25:fe:c7:fa:f7:f6:7a:03:fc:82:c9:2d:
                    30:b5:1f:f3:b8:43:d1:f4:20:81:7e:7e:da:eb:4f:
                    78:9b:fb:07:8d:2f:07:e3:78:c9:68:b1:06:cc:4c:
                    f2:95:25:b4:c6:d9:a9:a8:e4:30:f5:b2:b3:7f:61:
                    79:59:38:2b:73:1f:b5:a9:2b:e8:07:42:dd:ff:7e:
                    5e:1a:df:e5:0e:b6:ce:3c:d4:c5:98:3d:b7:d7:61:
                    0d:e6:dc:e7:7f:28:bb:97:39:7e:19:3f:50:12:fb:
                    ec:56:53:d8:87:f5:b6:53:92:e6:8d:fe:09:1b:e0:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7E:13:DF:12:81:6F:BB:EA:5B:F4:EB:D2:40:CF:1E:20:1B:25:2D
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34302e302e302f31372d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.40.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         80:e8:f4:61:1b:d0:68:23:da:04:75:9e:c8:25:2d:a5:ac:33:
         af:bd:a9:72:02:3e:ae:dd:25:36:b5:5c:82:c1:51:31:68:9a:
         fd:0d:2f:4c:62:26:0d:fe:69:89:f4:7c:69:97:6a:af:61:a8:
         13:5d:ee:9f:2a:97:32:35:c3:75:52:a2:0c:22:ed:96:a2:7b:
         b5:a3:7e:6a:98:c8:29:e6:46:c9:2a:ce:8f:03:23:52:ad:15:
         30:20:e8:ed:c4:49:ae:34:ab:75:75:53:ce:d0:2f:93:e4:b7:
         fd:05:7f:cc:66:0c:07:f4:58:cb:d9:f0:b5:c7:0b:41:2e:b5:
         47:54:74:c7:4a:08:3c:7c:82:54:ec:0b:38:45:f9:1c:df:db:
         f0:aa:f4:4c:9a:18:b0:e3:88:26:fb:fc:fc:22:be:92:99:78:
         62:e7:35:54:59:cf:02:d8:43:49:79:f7:37:83:a3:23:35:3e:
         a8:69:a8:17:b9:5e:f8:43:82:1d:f5:21:b4:3e:1f:2b:47:dc:
         00:1d:61:dd:ba:63:ca:b2:91:2b:93:86:29:23:82:c3:fe:ab:
         29:cc:74:68:3b:27:37:82:74:d6:6d:cd:63:bb:ef:e9:47:d6:
         58:15:1c:a4:42:e1:fe:57:7c:32:94:d0:03:82:af:80:b1:3b:
         74:28:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:33:35 2025 by rpki-client