Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e3133382e302f32342d3234203d3e203237393836.roa
File:                     3138362e31302e3133382e302f32342d3234203d3e203237393836.roa (raw, json)
Hash identifier:          /rrxrXqSILTp4RlSdNWNcIQ/+OOIhQtJByK1VAjazPc=
Subject key identifier:   F9:9D:D9:84:5B:9D:9B:58:D6:48:D3:88:3F:93:EF:E2:4D:83:68:58
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       4ADD5E3F7BC46AF49C585D2E9F42951C00C22B4C
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e3133382e302f32342d3234203d3e203237393836.roa
Signing time:             Tue 05 Mar 2024 18:17:41 +0000
ROA not before:           Tue 05 Mar 2024 18:12:41 +0000
ROA not after:            Tue 04 Mar 2025 18:17:41 +0000
asID:                     27986
IP address blocks:        186.10.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:dd:5e:3f:7b:c4:6a:f4:9c:58:5d:2e:9f:42:95:1c:00:c2:2b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar  5 18:12:41 2024 GMT
            Not After : Mar  4 18:17:41 2025 GMT
        Subject: CN=F99DD9845B9D9B58D648D3883F93EFE24D836858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:31:11:fa:48:a2:27:99:e9:51:e9:4b:4a:
                    08:bd:33:e8:11:58:66:98:ca:ab:5f:ee:d7:55:a5:
                    c9:10:3c:61:0b:12:68:86:fb:35:0f:46:51:9f:fb:
                    0e:54:05:9d:ed:47:eb:8b:70:ab:86:fb:e8:77:fc:
                    07:e2:69:97:9a:b7:d7:f1:12:db:63:95:15:11:fb:
                    c3:93:de:85:bc:94:16:b3:67:e8:ea:9a:21:9f:23:
                    c5:69:61:4f:8a:3c:f1:f4:56:8a:57:23:cc:c3:6f:
                    51:72:bb:37:62:a8:3c:0c:8c:11:b9:87:2c:f7:f7:
                    ac:ce:23:24:ba:d5:32:4c:6f:13:56:a8:00:a0:07:
                    7b:b7:77:6d:66:ef:3a:72:82:b0:f0:a7:a7:86:99:
                    5a:bd:49:83:db:4b:f9:d7:76:ab:ea:af:c0:b9:08:
                    7c:13:fa:5c:24:ac:2a:dd:3d:f1:0c:75:02:ac:6b:
                    21:22:1e:ec:7b:90:5c:e8:37:bd:54:5a:f2:f8:16:
                    22:20:bc:9a:93:7e:e1:ac:71:20:b6:9e:0f:15:c7:
                    7e:a1:57:1c:75:4e:88:c8:3a:c7:fa:e5:7d:94:ea:
                    5f:97:e8:e7:63:1a:3d:f4:64:f4:6a:74:37:0e:75:
                    24:83:31:45:53:f7:ec:bf:ee:56:5e:10:af:c0:ab:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9D:D9:84:5B:9D:9B:58:D6:48:D3:88:3F:93:EF:E2:4D:83:68:58
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e3133382e302f32342d3234203d3e203237393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.10.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:28:8b:10:e9:e1:ee:0a:b8:05:7d:70:e8:c8:76:34:b5:
         1b:77:37:bd:e5:b4:dd:74:45:4c:6c:60:3b:38:31:92:f0:c2:
         9b:3b:39:a8:e5:22:fb:5a:f0:a9:4c:15:08:8d:3f:c8:8c:fb:
         4b:95:3b:fb:16:63:bd:bb:8e:c8:7e:30:40:b9:c9:75:3a:e6:
         28:98:2a:ff:da:b8:21:34:a9:d8:f9:75:55:a1:e7:64:67:24:
         22:4d:f3:21:97:6b:68:68:f2:b4:67:c6:78:f1:27:2d:73:97:
         41:0e:75:4c:4f:67:15:80:94:9c:a1:9f:96:35:f3:99:28:eb:
         1c:4d:0c:0e:fd:c1:5b:1f:a3:8a:32:25:a4:67:b6:b9:45:de:
         d8:d5:e3:cb:f6:ff:60:25:44:80:c7:26:28:8b:03:38:3f:ec:
         3d:f5:14:1e:de:96:1b:21:e9:34:72:69:85:0c:cd:5d:e3:55:
         f7:23:e9:75:09:23:24:c9:a0:db:f2:45:c2:ac:05:19:52:2f:
         b1:83:56:59:50:66:90:8a:31:12:92:46:ff:c8:9f:c3:58:02:
         20:1b:bd:2f:b4:14:65:d6:8f:28:cc:bb:26:d2:52:96:29:8b:
         1b:53:cd:f0:b6:7e:6e:0d:75:c8:94:bc:c7:64:bd:42:92:77:
         c7:3f:94:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 13:36:20 2024 by rpki-client on console-ams.rpki-client.org