Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3134382e302f32332d3234203d3e203233333833.roa
File:                     3138362e322e3134382e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier:          yPYUeIM3EGDnIQTV7w9qhP0YWdY/ncun7AGysII3ch0=
Subject key identifier:   01:53:7D:D2:4C:38:C3:13:DA:B4:A5:96:9C:AD:45:A8:34:50:86:16
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       674998BAC79F9D63DA4CB29CC6311D7887FE51E7
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3134382e302f32332d3234203d3e203233333833.roa
Signing time:             Tue 01 Apr 2025 00:13:27 +0000
ROA not before:           Tue 01 Apr 2025 00:08:27 +0000
ROA not after:            Tue 31 Mar 2026 00:13:27 +0000
asID:                     23383
IP address blocks:        186.2.148.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:49:98:ba:c7:9f:9d:63:da:4c:b2:9c:c6:31:1d:78:87:fe:51:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Apr  1 00:08:27 2025 GMT
            Not After : Mar 31 00:13:27 2026 GMT
        Subject: CN=01537DD24C38C313DAB4A5969CAD45A834508616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:2e:4d:be:92:d0:4c:0b:27:fa:bf:a1:81:
                    5b:1b:2d:dd:9c:d0:d1:5e:14:1f:a5:20:9f:02:1e:
                    ce:b9:0d:d6:6a:2c:c6:86:ee:df:35:e8:fb:23:8f:
                    66:31:a9:73:b3:1d:24:44:85:36:68:24:af:9f:cb:
                    a2:23:63:4e:47:94:44:c5:91:23:09:60:f7:72:2f:
                    79:3f:20:2a:75:fd:bd:d7:41:36:a3:35:74:6a:20:
                    6c:c8:1f:65:8f:cf:a7:16:49:76:86:31:8a:24:35:
                    85:59:d3:37:92:96:8a:b6:6d:bc:b5:6d:0b:27:77:
                    b7:6e:55:1d:0e:48:e0:f5:bc:e3:59:ff:85:99:d9:
                    ab:5b:f1:7d:ea:51:e4:c3:4d:99:64:9e:47:0c:f0:
                    67:83:b4:41:ce:b8:ea:04:61:ae:5c:e0:e4:ca:8e:
                    37:d6:41:15:e1:a2:02:37:c4:d5:86:61:91:7e:05:
                    5d:b5:a6:8c:2f:f2:e9:2d:e7:8b:ea:05:59:de:b2:
                    65:a8:e6:f3:c7:db:b5:a2:23:d3:45:9b:84:c1:0a:
                    48:a0:34:da:19:dc:42:83:ce:77:22:12:f5:3b:48:
                    46:34:87:57:aa:1b:92:f4:68:fc:c0:81:87:e3:93:
                    c6:2d:d9:5e:22:54:7e:24:01:80:60:55:5f:bb:a0:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:53:7D:D2:4C:38:C3:13:DA:B4:A5:96:9C:AD:45:A8:34:50:86:16
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3134382e302f32332d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:8d:b9:3c:79:e8:3c:4e:89:bc:fb:c6:0c:cb:02:8b:c1:41:
         9c:58:16:90:99:c1:11:30:6d:58:f3:8e:e5:71:35:77:ed:e7:
         01:4b:bb:63:88:da:8a:0d:91:4a:d3:a8:94:49:b8:e0:a4:d9:
         dc:51:d1:d1:33:d5:02:89:90:3e:2f:e1:64:17:c3:11:56:6c:
         10:2d:2a:e8:94:b3:26:1e:54:aa:16:96:5a:39:dd:0c:48:a5:
         11:63:d7:b9:3f:9b:e5:47:c5:ee:d6:06:cd:6e:72:95:57:bf:
         19:60:61:ed:a6:dc:b0:f9:b4:9f:40:1b:11:0d:4b:79:5b:89:
         4a:ad:1c:60:ee:8e:c1:76:da:77:94:22:3f:8c:51:35:58:83:
         9e:04:df:97:ca:f4:50:2b:86:a1:98:4f:09:a1:25:ad:d6:16:
         22:e5:9e:a9:7d:9e:b8:3f:76:69:e4:4b:e6:c8:e7:05:aa:81:
         0b:8d:f0:35:6b:05:0a:e9:ff:5e:7c:19:69:07:b4:e9:83:fb:
         e7:3e:08:5b:1b:d7:f3:8d:30:23:9b:7b:66:69:67:89:a4:6b:
         99:5c:57:31:55:24:0c:c2:44:f5:a3:f8:eb:bf:61:e5:3b:fc:
         79:5c:0d:17:56:da:aa:21:36:e0:20:c3:25:4f:ba:9f:51:ff:
         e6:c8:9f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:56 2025 by rpki-client on console.sobornost.net