Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e3131322e302f32312d3231203d3e2033383136.roa
File:                     3138362e3132312e3131322e302f32312d3231203d3e2033383136.roa (raw, json)
Hash identifier:          T/iQzOOE8aJkImkNjT/F673akR5viJAVPBHaxioYI/s=
Subject key identifier:   1E:1E:E4:3C:34:EF:80:2C:68:66:69:54:EF:63:48:A6:E8:B7:4A:9B
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       4BE67BB5FE88CFBC2210E11244A6244262F5F0BB
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e3131322e302f32312d3231203d3e2033383136.roa
Signing time:             Tue 28 May 2024 17:30:00 +0000
ROA not before:           Tue 28 May 2024 17:25:00 +0000
ROA not after:            Tue 27 May 2025 17:30:00 +0000
asID:                     3816
IP address blocks:        186.121.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl
                          rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e6:7b:b5:fe:88:cf:bc:22:10:e1:12:44:a6:24:42:62:f5:f0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: May 28 17:25:00 2024 GMT
            Not After : May 27 17:30:00 2025 GMT
        Subject: CN=1E1EE43C34EF802C68666954EF6348A6E8B74A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:ab:6b:fe:d6:40:2b:38:10:b5:79:35:f4:
                    86:30:a8:8f:91:48:c4:41:77:32:e2:62:6f:4d:23:
                    73:0f:6c:5e:63:7a:0e:c2:fb:a2:43:9b:63:12:79:
                    a1:b8:7a:ec:7e:8d:f8:84:d0:30:43:c5:14:02:46:
                    6e:b8:e4:3c:6e:50:39:fd:ba:df:1a:cd:f1:3e:d2:
                    0e:90:21:0e:be:36:25:d2:9e:53:20:58:f6:de:98:
                    3c:b9:7e:53:d5:7b:b0:e0:fe:4b:35:ba:0f:8d:08:
                    ed:ff:c4:32:d8:a8:c4:95:11:d0:ba:91:22:34:3c:
                    95:06:f0:e8:ea:c6:a1:76:a4:6f:39:74:38:65:c5:
                    be:82:68:b0:ab:61:6f:35:aa:83:a5:32:99:95:d1:
                    b2:e5:82:b1:84:6d:23:0d:13:87:5d:93:ca:10:75:
                    da:fc:99:89:e4:fd:d1:ef:a3:32:15:6e:b1:5a:d2:
                    06:8f:56:2c:16:4d:5d:a0:16:52:e0:6f:2e:27:af:
                    7b:79:8f:62:b5:0f:d9:b8:6d:82:cb:56:83:f0:a2:
                    34:3f:dc:04:3a:a8:36:e2:81:d5:73:81:bb:68:95:
                    97:e3:72:dd:dd:d9:31:d1:72:d2:77:8b:8b:2c:c1:
                    e7:53:26:52:c4:80:65:e6:60:7f:bf:ee:47:16:49:
                    28:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1E:E4:3C:34:EF:80:2C:68:66:69:54:EF:63:48:A6:E8:B7:4A:9B
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e3131322e302f32312d3231203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:c9:c8:d1:bf:1c:b4:f4:92:96:9f:4d:dc:61:d0:7a:a1:80:
         be:14:81:14:6f:5a:12:9d:ec:13:16:20:d4:d9:77:8b:80:3d:
         d6:c2:70:e0:47:4f:08:f7:3a:34:2c:7d:fb:8a:ab:be:53:bf:
         31:fc:35:33:22:29:08:2f:a2:ee:ad:97:b9:42:19:cc:6a:cc:
         1f:51:5a:72:e9:54:2d:4d:5c:3b:67:fd:1f:97:86:0d:cf:e9:
         4e:8b:53:1f:91:0e:a4:3b:f7:e9:41:db:1b:5f:b4:aa:3b:ef:
         47:e7:0c:ea:ed:27:da:7f:2a:72:46:aa:07:81:0f:0d:ee:a1:
         27:73:2d:25:33:4e:12:7f:d5:c4:b6:7a:3e:c7:9b:95:36:02:
         c6:b3:e0:fb:9a:a8:52:9f:99:d8:23:42:64:6e:7a:14:d7:ba:
         2e:a4:fc:16:9f:45:af:21:28:4f:20:92:05:36:a1:f3:3c:37:
         9a:31:cd:2b:b2:14:dc:f6:f8:b9:b0:b8:a6:68:77:89:86:5c:
         ce:08:03:6d:62:98:cd:28:17:7e:2b:56:c4:9b:04:73:95:74:
         c7:a5:33:22:fe:72:d6:81:f3:35:b3:aa:f9:13:9e:cc:64:b5:
         71:ac:85:e7:d8:8a:6c:c9:d9:54:7e:d6:e7:f8:2e:66:a0:90:
         5b:12:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:11 2024 by rpki-client on console-ams.rpki-client.org