Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138362e32322e302e302f31352d3234203d3e203237373437.roa
File:                     3138362e32322e302e302f31352d3234203d3e203237373437.roa (raw, json)
Hash identifier:          Y2M6YEX3j8JGp+Ci2KhCa9HAyt9PHhAZEy7bOiwEXpk=
Subject key identifier:   64:1C:DA:00:3D:E2:6C:96:A5:63:9A:52:83:AD:26:65:34:89:9B:49
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       04D33A06AF56C62DDEE608C027B0EC1D48AB36EA
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138362e32322e302e302f31352d3234203d3e203237373437.roa
Signing time:             Tue 05 Mar 2024 17:52:53 +0000
ROA not before:           Tue 05 Mar 2024 17:47:53 +0000
ROA not after:            Tue 04 Mar 2025 17:52:53 +0000
asID:                     27747
IP address blocks:        186.22.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d3:3a:06:af:56:c6:2d:de:e6:08:c0:27:b0:ec:1d:48:ab:36:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Mar  5 17:47:53 2024 GMT
            Not After : Mar  4 17:52:53 2025 GMT
        Subject: CN=641CDA003DE26C96A5639A5283AD266534899B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:15:27:4c:b0:d1:f7:d6:ea:21:e0:b3:28:
                    52:51:ed:54:2c:99:8f:00:4d:56:50:25:dd:80:06:
                    06:a6:81:e2:16:13:ef:38:07:96:5e:65:f8:db:11:
                    67:45:e1:c7:aa:22:5f:ea:0f:d9:37:14:16:0e:4e:
                    35:2e:7d:73:b5:48:c6:13:97:2d:33:f7:0a:18:a7:
                    d6:73:7e:cc:bb:0e:aa:fd:71:24:71:9b:c3:ad:82:
                    ec:6c:95:75:4f:2e:ff:a0:b8:ce:7d:71:a9:3f:44:
                    2c:dc:7b:67:fb:4d:da:f8:50:c5:ef:ad:17:18:a6:
                    e9:5a:29:9e:a9:f9:9b:4e:b9:4d:3e:35:19:41:f3:
                    11:a1:5f:22:f4:df:0a:b6:a4:d2:d3:39:af:d7:16:
                    76:c6:73:ac:03:32:79:fb:b9:53:db:26:f1:c2:15:
                    31:c6:93:8d:ee:16:4e:ee:c5:43:46:f6:91:f8:c9:
                    29:da:6f:ad:06:22:e9:74:b3:e2:fc:6d:3a:15:f6:
                    62:3e:d1:62:91:2c:6d:1f:54:0e:b0:05:d4:a9:9e:
                    b2:f0:c7:c3:a1:46:04:59:85:0c:18:01:d1:a7:d8:
                    30:c4:52:f7:0e:df:b2:66:5b:f8:c7:78:27:81:2e:
                    d9:fb:b3:34:2a:e9:80:7b:6f:ec:0f:6f:cf:02:52:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1C:DA:00:3D:E2:6C:96:A5:63:9A:52:83:AD:26:65:34:89:9B:49
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138362e32322e302e302f31352d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.22.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         15:43:a9:53:2c:98:61:03:e0:78:ad:03:6a:f8:68:2f:71:35:
         f6:1c:0e:bd:b4:80:bb:1d:7e:43:6b:fb:ea:9e:98:f6:d7:ce:
         9e:36:2d:60:0b:dd:30:c6:ec:ee:ff:2f:06:a8:8f:7a:f2:63:
         7a:3a:3c:29:ae:e1:d2:75:2f:1c:9b:9c:a7:64:cb:df:b0:e9:
         c3:af:36:3d:46:29:20:9e:4e:2b:5a:e0:5c:f7:52:14:c4:da:
         9c:4f:c5:32:a2:5d:37:9e:f6:5a:69:18:99:95:d3:06:db:bb:
         ee:cd:3b:52:bb:42:c7:d8:c4:80:ab:dc:82:5e:bd:4d:13:c8:
         bd:bf:56:8b:e5:44:ac:3d:27:21:c2:de:87:68:75:8c:2d:38:
         95:62:e8:45:37:f4:aa:6c:6e:c7:b8:e1:d6:f0:a8:2d:68:37:
         9e:97:29:3d:f8:58:fe:22:be:55:0d:0f:ea:59:60:50:0a:a7:
         0b:10:04:14:50:41:16:22:6c:e3:d5:42:da:05:f1:58:1c:19:
         e4:59:d4:0b:e1:10:22:45:a2:3a:71:d3:1a:27:6a:82:64:73:
         1b:8f:0b:c9:ac:f4:9e:e0:6c:fb:5e:a4:69:96:62:e4:ab:6c:
         70:fe:84:5f:0c:20:af:ba:55:d3:41:fa:0b:1a:e5:3f:66:97:
         d0:f7:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:18:46 2024 by rpki-client on console-fra.rpki-client.org