Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230312e3138362e302e302f31362d3234203d3e203134313137.roa
File:                     3230312e3138362e302e302f31362d3234203d3e203134313137.roa (raw, json)
Hash identifier:          +jNjaK3EsK8/t2QXnIwDMvwU4d3S3ieDajjr7hS/NK0=
Subject key identifier:   42:22:3E:AF:2D:5A:07:8B:31:26:F4:1F:41:8D:D4:57:F7:9A:6B:B3
Certificate issuer:       /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial:       4438C11CFCD3D6A0AFB22F78FCB9EC8A7AE9EAD0
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230312e3138362e302e302f31362d3234203d3e203134313137.roa
Signing time:             Tue 01 Jul 2025 19:15:02 +0000
ROA not before:           Tue 01 Jul 2025 19:10:02 +0000
ROA not after:            Tue 30 Jun 2026 19:15:02 +0000
asID:                     14117
IP address blocks:        201.186.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:38:c1:1c:fc:d3:d6:a0:af:b2:2f:78:fc:b9:ec:8a:7a:e9:ea:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
        Validity
            Not Before: Jul  1 19:10:02 2025 GMT
            Not After : Jun 30 19:15:02 2026 GMT
        Subject: CN=42223EAF2D5A078B3126F41F418DD457F79A6BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c6:db:f8:39:11:da:d0:03:e5:8c:97:2a:b1:
                    ba:25:7d:27:e5:2e:51:7e:03:29:e9:14:0b:9d:72:
                    bf:68:c9:4a:e2:b7:d6:e4:d7:da:11:82:78:c2:47:
                    6b:10:8f:a8:26:2c:01:b6:e9:b9:de:4b:96:33:52:
                    61:be:b9:0c:54:0e:40:79:58:ba:46:6a:7c:53:da:
                    a1:74:a1:60:97:e2:8d:50:1d:7a:b3:fd:92:8e:ae:
                    af:43:10:91:76:5b:c7:5d:37:7e:7e:84:c6:13:0e:
                    a5:d5:cd:31:de:db:6d:61:61:ba:1b:fb:46:fb:e9:
                    d8:19:d2:bc:53:51:4a:55:fc:ad:6f:3d:cf:93:b7:
                    79:7c:9f:e8:f3:e2:b9:ad:94:5e:b6:20:45:18:7f:
                    b5:59:6e:c7:0e:32:3c:90:d4:c0:c9:66:0d:77:16:
                    be:a1:dc:13:23:62:e4:57:ba:c8:46:61:c1:7c:64:
                    a0:7f:d9:32:5f:f8:c9:21:e8:42:e8:08:e1:86:6a:
                    7b:93:69:a2:dc:1d:e2:2d:d4:99:fc:55:7a:0d:a0:
                    57:02:03:26:71:86:57:46:a4:66:38:93:44:de:09:
                    55:7a:b8:37:18:7b:b0:8b:7d:7c:d8:c1:d8:0d:4b:
                    46:cb:86:e2:f7:e2:df:94:41:92:b4:a2:d5:35:6b:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:22:3E:AF:2D:5A:07:8B:31:26:F4:1F:41:8D:D4:57:F7:9A:6B:B3
            X509v3 Authority Key Identifier:
                keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230312e3138362e302e302f31362d3234203d3e203134313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.186.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9d:40:96:ab:b5:52:9f:7d:0d:2e:18:d2:8a:49:45:4e:52:2e:
         fd:b3:05:5b:81:a4:10:90:38:02:11:95:18:f9:32:1c:53:73:
         50:54:df:4f:3d:ed:48:4e:e0:c1:56:79:5e:9a:eb:b1:fc:18:
         93:69:dc:30:ab:95:7f:21:91:5c:1f:bb:11:6d:bb:c2:3e:c7:
         65:77:b9:dd:ab:65:6c:0a:21:8f:72:b0:3d:67:d6:4b:21:cc:
         5c:75:7b:dc:d1:ce:2f:93:cb:bd:ad:f0:10:87:cb:67:37:4c:
         44:87:15:29:00:0a:b9:64:9b:a3:cf:74:4d:89:3a:81:a5:d0:
         e3:3e:74:7b:b7:20:f8:29:56:98:1c:c0:84:8d:c2:d5:4d:c7:
         6c:e3:ef:29:3a:a4:d5:89:fb:36:e5:0a:14:f3:89:23:17:84:
         07:88:5e:da:57:10:dc:d7:5c:27:b1:5d:38:06:3e:7a:30:f0:
         5a:71:35:dc:ad:e2:e4:67:c0:b4:d0:4c:34:b8:4c:ec:d7:38:
         25:cb:5d:b6:33:ac:a5:c2:04:a0:74:19:97:5c:fa:db:84:28:
         d4:c5:c5:c1:cc:5e:47:c3:74:f6:92:5a:e3:92:3a:a4:78:d1:
         a9:35:bd:32:0e:e2:53:2e:5b:c3:27:76:c2:53:5a:48:b7:9e:
         55:29:8e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:05:34 2025 by rpki-client