Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e33372e302e302f31362d3234203d3e203237393235.roa
File:                     3138362e33372e302e302f31362d3234203d3e203237393235.roa (raw, json)
Hash identifier:          0dvoNTYK8FUXcx98nFk/o4aKHZ4STjrNdl/EaucG9rE=
Subject key identifier:   CD:3F:7B:10:FB:91:93:3B:69:3A:6F:CA:1D:A0:00:E5:2C:FC:24:1C
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       2409DD957F92070CE923C2794C4EE766DFE5605F
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e33372e302e302f31362d3234203d3e203237393235.roa
Signing time:             Tue 05 Mar 2024 18:17:38 +0000
ROA not before:           Tue 05 Mar 2024 18:12:38 +0000
ROA not after:            Tue 04 Mar 2025 18:17:38 +0000
asID:                     27925
IP address blocks:        186.37.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:09:dd:95:7f:92:07:0c:e9:23:c2:79:4c:4e:e7:66:df:e5:60:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar  5 18:12:38 2024 GMT
            Not After : Mar  4 18:17:38 2025 GMT
        Subject: CN=CD3F7B10FB91933B693A6FCA1DA000E52CFC241C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:76:6c:0c:1f:58:1c:1a:cd:d9:51:4c:81:
                    3a:b9:d6:0f:b4:32:1e:9c:6c:98:3e:6b:6b:0d:e6:
                    c9:9d:2c:66:46:c6:b8:12:2e:6a:17:91:3f:06:ca:
                    67:77:d7:86:7b:70:17:01:6e:64:2d:98:35:f2:e9:
                    18:9f:11:4e:90:69:80:d1:77:31:9b:2e:f6:59:29:
                    2b:92:bc:f8:ea:c4:3a:21:2b:d0:21:86:cb:0d:de:
                    dc:44:d2:93:3f:fa:1c:cc:ac:30:ca:59:11:46:1d:
                    10:b2:f5:37:aa:da:0c:76:95:c3:41:f9:59:1c:f2:
                    0a:dc:3e:73:49:24:42:68:51:93:c5:2c:65:df:10:
                    5f:7c:a4:20:04:47:00:75:c3:fc:39:3c:78:be:e1:
                    af:d7:4b:4b:ca:40:10:4d:7d:19:56:f0:3d:45:c6:
                    e9:8e:33:b8:82:bf:3a:c1:8d:9a:5e:e5:ee:a5:19:
                    50:ad:8b:b4:c2:b9:d6:06:a6:ed:b2:d9:5a:d8:b5:
                    0c:52:d5:7d:8e:a9:08:aa:e9:ea:c8:e3:85:b1:a2:
                    c2:aa:b4:e4:76:c1:5b:c7:49:c3:28:23:64:4b:32:
                    a9:bb:a4:cc:bc:13:01:c2:c2:0c:8a:e6:d8:98:35:
                    ec:75:25:59:3a:82:ed:ac:13:00:de:91:e5:55:84:
                    f3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3F:7B:10:FB:91:93:3B:69:3A:6F:CA:1D:A0:00:E5:2C:FC:24:1C
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e33372e302e302f31362d3234203d3e203237393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.37.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:45:7d:fc:89:42:58:19:07:8e:dc:19:2b:45:71:a1:bd:e6:
         47:0a:d5:9a:e6:27:19:f3:0c:d2:77:b5:02:14:0c:d4:e3:db:
         26:c2:fa:df:6e:3b:a7:0b:7a:e6:bf:e5:50:b1:52:3b:f9:59:
         33:3c:33:9f:65:dd:4a:06:26:46:14:79:f3:44:fe:17:2f:68:
         19:bc:cc:e1:fc:c8:d9:8f:eb:8b:87:66:c9:ff:6d:ac:34:da:
         eb:7f:7f:41:91:df:69:7b:41:0b:4c:22:cd:c6:48:4d:1f:ca:
         b6:eb:aa:35:35:4d:ce:a0:28:9a:ec:3c:08:61:bd:d9:76:23:
         50:d2:56:e8:df:dd:9a:67:54:de:db:09:26:30:0b:98:cf:1e:
         b8:25:41:32:38:45:9a:37:6b:cc:80:99:14:fe:61:b5:50:2c:
         26:de:07:54:18:cb:66:fb:87:48:9e:e5:e1:84:e2:a3:43:2f:
         0b:a1:83:c3:99:3a:90:ea:24:1b:a6:aa:da:8e:1c:c5:51:f9:
         76:b0:8d:86:7b:e1:d7:f7:63:2d:3b:e5:24:58:df:55:a5:07:
         a6:9a:9c:48:71:8b:5b:f4:83:62:f6:2f:fc:20:40:c2:47:cb:
         f4:46:35:9b:b8:32:93:b6:c5:92:c9:56:1f:40:7c:1a:b3:eb:
         ed:64:af:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org