Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/3138362e36342e39362e302f32312d3234203d3e203532343330.roa
File:                     3138362e36342e39362e302f32312d3234203d3e203532343330.roa (raw, json)
Hash identifier:          odiDAQPXm/RSZtQYjFfcLTdCPZixdMRvDKgNO4nPIQI=
Subject key identifier:   C9:6B:2D:45:61:46:EC:C9:C7:84:F9:F9:6A:96:5B:D5:3C:AD:86:72
Certificate issuer:       /CN=2C36A670C53A27F65B8EF7F309F07097DCEF7A41
Certificate serial:       535CB6746A6D0145A1C7ECB6B2442177C3C61C5F
Authority key identifier: 2C:36:A6:70:C5:3A:27:F6:5B:8E:F7:F3:09:F0:70:97:DC:EF:7A:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/3138362e36342e39362e302f32312d3234203d3e203532343330.roa
Signing time:             Fri 25 Jul 2025 16:45:01 +0000
ROA not before:           Fri 25 Jul 2025 16:40:01 +0000
ROA not after:            Fri 24 Jul 2026 16:45:01 +0000
asID:                     52430
IP address blocks:        186.64.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5c:b6:74:6a:6d:01:45:a1:c7:ec:b6:b2:44:21:77:c3:c6:1c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C36A670C53A27F65B8EF7F309F07097DCEF7A41
        Validity
            Not Before: Jul 25 16:40:01 2025 GMT
            Not After : Jul 24 16:45:01 2026 GMT
        Subject: CN=C96B2D456146ECC9C784F9F96A965BD53CAD8672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:31:16:f9:f8:a2:45:9c:18:fc:9b:db:ce:
                    dc:8d:26:18:ba:bb:13:24:0b:e3:5f:32:82:bd:a1:
                    16:93:a2:df:65:a5:e8:b1:05:6f:b5:a6:23:32:27:
                    ac:9b:e0:b9:65:b5:d5:94:c9:0c:3a:ec:67:61:69:
                    15:d5:39:de:23:c8:b4:95:9a:12:5c:03:54:a1:c3:
                    77:4e:b0:82:42:98:03:a5:2d:d5:da:b8:70:31:43:
                    1a:66:ec:d2:3c:9c:a9:52:a9:f6:d0:0c:56:29:5d:
                    f3:51:ba:eb:f9:2c:60:1d:ee:30:bf:81:df:79:a4:
                    a4:c1:3c:46:b1:7e:fe:93:b8:27:6d:40:47:6f:cd:
                    b8:3d:14:ef:d2:2a:5e:dd:ec:ac:ae:a3:0c:67:2f:
                    c0:d6:ec:37:90:4e:6e:fc:6c:88:ee:b3:b2:09:4d:
                    7e:70:7d:c8:b8:10:c1:1f:27:7a:64:86:07:5b:a4:
                    34:0f:c9:d4:61:75:19:23:d8:a9:9d:5c:13:8d:58:
                    ad:ab:80:ef:11:38:e5:15:05:f3:ac:b2:a6:08:e4:
                    24:a5:c9:c8:fd:66:79:dc:95:8a:94:cd:ff:94:99:
                    3f:7f:5d:d2:2d:90:e1:b8:3b:7e:5d:2e:75:4d:bb:
                    52:b0:f1:89:dd:45:d5:80:97:31:c9:cd:ea:7f:50:
                    0b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6B:2D:45:61:46:EC:C9:C7:84:F9:F9:6A:96:5B:D5:3C:AD:86:72
            X509v3 Authority Key Identifier:
                keyid:2C:36:A6:70:C5:3A:27:F6:5B:8E:F7:F3:09:F0:70:97:DC:EF:7A:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C36A670C53A27F65B8EF7F309F07097DCEF7A41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/457A20C0CFF178C222744665E71A9184FAB99379C3143468BDE84D09C5E64D80/0/3138362e36342e39362e302f32312d3234203d3e203532343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.64.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:dd:06:70:db:bf:36:c9:5a:60:3e:cf:e6:3d:9e:73:1c:48:
         f5:c6:20:48:a2:1a:3a:53:a4:1b:da:f6:8a:10:71:e1:cd:86:
         00:a0:81:34:02:79:b4:7d:c2:8d:a0:8e:c4:3a:d1:df:2d:a4:
         23:c7:96:cc:67:4f:f2:ba:4c:1d:62:07:50:d2:0e:87:e3:e3:
         b3:96:aa:ec:fb:2c:51:af:4c:1a:8d:6f:84:c9:a1:4f:8c:14:
         6a:14:b2:13:88:da:1b:bb:9d:59:f8:9f:9d:b8:cc:b4:7b:af:
         9c:4e:93:82:f1:b5:85:46:4f:0b:39:a0:90:3a:61:a7:ae:b6:
         d6:e8:c2:9e:64:f2:cf:4c:81:4c:f7:93:2a:ef:a8:5a:93:07:
         22:b7:82:26:f8:a9:ce:1c:01:48:38:d5:18:0f:dd:17:2f:96:
         b0:a0:82:f9:4f:e9:ea:16:a3:ca:45:0b:e6:cc:d1:9e:5d:27:
         4d:d7:fb:d8:8e:76:69:45:26:cf:a6:1d:bb:20:6d:7b:fa:0d:
         83:ce:72:cc:d0:68:34:27:dd:f4:0d:00:0c:9c:06:8d:19:a1:
         1f:c6:de:13:a3:cf:46:b9:83:c3:c7:84:23:b7:e8:86:a0:8a:
         36:c4:9e:a2:11:bc:19:cc:d0:8f:fc:53:49:c2:71:2c:db:21:
         a0:9b:1a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:54:49 2025 by rpki-client