Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139372e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3139372e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          ENOoT0OScV9lkSGKVhPmRHYzXDtIhoKxUTC15bQSnag=
Subject key identifier:   0C:9B:90:13:DE:7F:9E:AF:9E:75:0E:A2:2E:C3:54:F8:78:FE:B0:D2
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       2B3DCF6DD2BDF38BD9DD932220CC8B08D47AF230
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139372e302f32342d3234203d3e203232393237.roa
Signing time:             Thu 12 Jun 2025 15:21:52 +0000
ROA not before:           Thu 12 Jun 2025 15:16:52 +0000
ROA not after:            Thu 11 Jun 2026 15:21:52 +0000
asID:                     22927
IP address blocks:        186.143.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3d:cf:6d:d2:bd:f3:8b:d9:dd:93:22:20:cc:8b:08:d4:7a:f2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jun 12 15:16:52 2025 GMT
            Not After : Jun 11 15:21:52 2026 GMT
        Subject: CN=0C9B9013DE7F9EAF9E750EA22EC354F878FEB0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:53:87:eb:46:ca:d1:9f:1b:d3:a0:70:26:
                    8a:5f:6b:a0:8d:40:55:63:29:7f:dd:2b:9a:6d:ee:
                    86:4d:b2:f1:ac:35:77:35:e3:4e:fb:64:4d:82:93:
                    51:13:df:aa:02:ea:bc:fb:83:a8:b9:36:3e:a4:0e:
                    bd:92:d7:bc:6c:e6:2b:68:a3:a8:94:31:71:f8:0b:
                    65:96:08:88:bc:c5:2f:10:67:eb:78:58:84:89:0f:
                    81:8a:ff:77:4f:53:08:ec:48:0d:8c:30:b7:d3:ae:
                    f6:98:d2:80:bb:cd:e2:39:99:a5:17:19:72:d3:c9:
                    00:af:52:8c:7a:29:59:c0:b5:5c:b3:21:6e:e8:0c:
                    f5:25:57:de:d3:f7:18:97:f6:5d:8f:b6:11:94:eb:
                    56:ff:f2:44:d5:ae:2a:11:fd:b8:c8:8a:75:dc:e5:
                    44:56:05:9a:a8:c9:ba:c9:d7:e3:51:e2:c1:b7:95:
                    86:ad:2c:49:4a:02:a1:b1:3f:9c:98:8a:32:37:7c:
                    3b:19:80:a8:95:7c:26:aa:9e:d6:f5:c4:25:d6:d2:
                    f3:63:54:43:87:00:4f:30:38:e2:14:43:a6:b7:4c:
                    b9:fd:dd:97:cd:7b:ca:d8:9b:18:85:77:05:6b:38:
                    a8:24:16:5c:04:ad:c1:57:1e:79:c4:79:d9:45:71:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9B:90:13:DE:7F:9E:AF:9E:75:0E:A2:2E:C3:54:F8:78:FE:B0:D2
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139372e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:56:05:73:e2:eb:a8:a2:80:84:42:10:9c:8c:2a:09:7c:b0:
         b5:96:ff:01:9d:0a:c7:90:0e:43:dc:30:83:43:a4:d5:69:7b:
         e1:10:25:89:c6:53:a1:63:ed:84:31:fa:fa:64:4e:96:e9:a2:
         da:f1:05:12:15:1c:b3:f5:fd:9c:43:5a:be:5d:83:6e:5c:e8:
         5b:b2:58:51:8b:ec:4c:7d:e7:62:ea:2e:01:69:60:0a:2c:c8:
         fc:81:fb:aa:20:e3:74:c0:3e:3b:f1:65:43:44:a9:a8:52:b5:
         7c:f8:5f:48:bf:ba:b5:1a:d1:e6:9d:be:0e:59:72:8a:f6:99:
         e1:a3:47:84:8b:fa:e8:fb:e6:13:8d:17:41:00:f2:fb:aa:2b:
         af:36:e5:67:07:43:04:10:59:ea:8c:3b:be:c7:65:7d:fe:62:
         1b:7c:a7:7e:f7:38:01:3a:6a:95:9b:4c:28:95:f1:6d:36:5a:
         b6:e8:18:0f:de:68:f8:e6:84:9d:5a:36:e9:b7:86:a3:0a:a7:
         16:32:5a:a3:6c:58:0f:1b:1a:d0:67:e0:3c:6e:4a:ad:03:15:
         30:40:b8:59:fc:58:34:51:00:25:5d:83:af:6e:71:58:ea:9f:
         94:90:0a:41:6e:8c:e9:6d:1d:d8:de:e8:42:52:f0:bc:08:de:
         54:6b:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:53:22 2025 by rpki-client