Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e3131322e302f32312d3231203d3e2033383136.roa
File:                     3138362e3132312e3131322e302f32312d3231203d3e2033383136.roa (raw, json)
Hash identifier:          e1UTE4WxjPgq2Vh0jp6Aaccr3fVsXOHkoEnBw3Ajg1s=
Subject key identifier:   61:1F:50:9E:C2:21:4E:4E:3A:3D:00:EC:2D:95:8C:12:B3:AE:87:18
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       2874A81705B60B5103ACD2DB4BDD0A6B1B69E9EC
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e3131322e302f32312d3231203d3e2033383136.roa
Signing time:             Tue 29 Apr 2025 18:17:11 +0000
ROA not before:           Tue 29 Apr 2025 18:12:11 +0000
ROA not after:            Tue 28 Apr 2026 18:17:11 +0000
asID:                     3816
IP address blocks:        186.121.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl
                          rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 May 2025 10:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:74:a8:17:05:b6:0b:51:03:ac:d2:db:4b:dd:0a:6b:1b:69:e9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: Apr 29 18:12:11 2025 GMT
            Not After : Apr 28 18:17:11 2026 GMT
        Subject: CN=611F509EC2214E4E3A3D00EC2D958C12B3AE8718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f7:44:3d:d0:f1:bd:9b:5b:87:4c:4d:91:5f:
                    ee:ca:cf:41:de:91:1a:28:8c:f7:37:d3:b2:97:a6:
                    ab:e1:ed:f9:dc:c2:72:42:e9:18:8b:48:d2:18:97:
                    2a:7d:d1:93:ba:dc:39:09:e1:0b:f7:45:f5:e0:09:
                    5b:dd:74:0a:db:51:db:7d:de:a2:c5:76:b6:8b:3c:
                    f3:f3:2a:c5:7b:8e:8e:93:28:d9:23:46:d8:df:c4:
                    b1:5c:0a:ad:e0:ae:5f:8f:9a:1b:c7:ef:4c:8a:fb:
                    93:7e:bd:af:31:cd:0e:b7:18:c4:f8:d5:b3:86:8d:
                    c3:b1:65:9b:66:00:23:9e:51:6f:7a:39:b4:ff:9a:
                    0d:cf:fd:09:fd:7e:d9:ce:39:59:e1:9e:ad:f7:cd:
                    2a:69:f4:ca:1e:cb:39:d1:f4:72:25:68:38:a8:68:
                    16:79:ba:a4:6c:ae:85:55:b7:ac:03:8f:b0:e3:70:
                    fa:52:96:a8:07:37:44:23:6f:e9:0e:ef:7f:0e:46:
                    66:53:fa:67:58:87:22:69:ba:d0:dc:e5:5f:33:d2:
                    53:17:be:84:4b:e2:c4:7c:e8:3f:bb:9a:d5:23:85:
                    35:e8:6d:d4:38:f4:86:bb:dc:47:60:7f:58:4a:b2:
                    f0:ea:44:25:07:39:e1:a9:4b:82:9c:c4:0c:ca:f6:
                    50:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1F:50:9E:C2:21:4E:4E:3A:3D:00:EC:2D:95:8C:12:B3:AE:87:18
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e3131322e302f32312d3231203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:10:02:01:77:bf:11:be:a1:73:ca:23:a8:64:2a:23:bd:e9:
         33:ef:ba:fb:55:01:21:9e:0a:9c:ad:8c:9a:b7:0a:e2:cb:38:
         78:53:18:04:1d:28:7e:c3:ef:66:31:69:ea:96:18:51:ca:db:
         ac:ec:c6:f6:8c:8e:58:a9:b0:96:15:0b:1c:cf:cb:5c:f4:88:
         09:38:be:76:82:fe:05:27:c2:a8:bf:56:16:a3:6e:d7:8f:f8:
         5f:dd:9b:15:30:9f:86:1a:ad:04:a9:ee:5d:54:1f:b8:35:88:
         53:af:06:12:b3:73:53:e7:bd:a3:2d:af:73:1f:78:4d:ea:87:
         10:9a:a4:43:31:85:a1:a0:50:f8:d6:8d:82:a2:48:12:5f:9f:
         f2:4c:c2:f4:a7:ab:0b:36:9e:2a:06:c8:ef:56:e5:d6:13:7e:
         4c:7d:38:77:8c:6f:c4:32:bc:2b:3a:68:8b:6f:22:15:58:88:
         3e:88:ed:c6:e6:ef:49:e9:d6:2b:d3:d1:bc:3d:4b:40:ba:c0:
         ce:c6:2e:1e:7b:f4:a2:77:ca:08:66:40:ba:91:05:6a:98:7e:
         55:15:b8:a6:ad:e4:58:6a:53:5c:08:c8:64:9e:d8:be:e2:dc:
         43:60:0a:98:c5:97:93:ef:7a:b0:99:bb:ca:93:fb:93:7d:da:
         ed:b6:7b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 00:40:36 2025 by rpki-client