Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3138362e3137392e3132382e302f31372d3234203d3e203237373735.roa
File:                     3138362e3137392e3132382e302f31372d3234203d3e203237373735.roa (raw, json)
Hash identifier:          koTE9mvNvlUn7shzRALAJAbxjzu67D+19g5hEo0NH5Q=
Subject key identifier:   A1:30:2C:25:D2:04:85:28:CB:8E:52:8D:AD:D5:F1:07:F1:63:09:68
Certificate issuer:       /CN=E448655A46C905154A46DF19D5CADDB20B5D1153
Certificate serial:       25D29EECAAFA837641E1FAB8C4794185E7B7A8ED
Authority key identifier: E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3138362e3137392e3132382e302f31372d3234203d3e203237373735.roa
Signing time:             Tue 05 Mar 2024 17:41:33 +0000
ROA not before:           Tue 05 Mar 2024 17:36:33 +0000
ROA not after:            Tue 04 Mar 2025 17:41:33 +0000
asID:                     27775
IP address blocks:        186.179.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d2:9e:ec:aa:fa:83:76:41:e1:fa:b8:c4:79:41:85:e7:b7:a8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E448655A46C905154A46DF19D5CADDB20B5D1153
        Validity
            Not Before: Mar  5 17:36:33 2024 GMT
            Not After : Mar  4 17:41:33 2025 GMT
        Subject: CN=A1302C25D2048528CB8E528DADD5F107F1630968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:55:d4:d2:13:31:56:69:63:15:c8:ea:79:
                    78:70:0f:24:a4:78:91:38:2e:76:5d:3c:fa:27:ef:
                    db:69:b0:98:3f:6b:ac:88:c9:d3:86:08:e1:fa:6c:
                    22:01:84:ec:b3:13:77:34:89:58:39:9c:71:13:12:
                    78:09:0b:87:ab:f6:5e:c1:7d:ad:1d:b1:4c:a4:79:
                    bd:69:f1:e3:e4:bd:ae:8b:82:23:93:8d:a8:d1:c2:
                    2f:4b:47:05:f9:41:ff:5c:93:78:05:d2:ca:88:5b:
                    e2:99:ad:2e:d7:5a:8f:ac:b7:f3:25:90:80:de:8a:
                    3f:10:29:24:ff:90:62:dc:8a:e7:f0:4d:fe:02:db:
                    07:ad:a1:b3:12:e1:14:cb:d2:29:c4:6a:d0:2e:c0:
                    f6:aa:89:32:67:92:df:d8:96:64:a5:b7:d4:10:6c:
                    33:c1:8f:1c:a2:87:23:b6:68:76:f4:b8:64:f4:b7:
                    86:f5:af:f4:d5:c9:df:22:0e:c5:61:f8:f1:69:83:
                    01:8a:45:d7:54:de:e3:63:3b:9c:7e:c7:56:66:44:
                    1b:c2:89:b0:af:46:26:cd:3c:fa:85:05:61:52:75:
                    bb:32:d7:cd:70:62:a8:2f:12:c7:d4:2d:32:5a:26:
                    60:19:56:87:06:6f:83:dc:b3:05:0b:af:ff:db:02:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:30:2C:25:D2:04:85:28:CB:8E:52:8D:AD:D5:F1:07:F1:63:09:68
            X509v3 Authority Key Identifier:
                keyid:E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3138362e3137392e3132382e302f31372d3234203d3e203237373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         68:f6:e2:cb:3e:52:ab:4c:12:e0:24:ab:9d:31:63:6a:3f:b8:
         6d:f6:6c:24:0e:ec:ce:c1:9a:79:d7:8b:ed:61:d0:22:bb:76:
         41:d8:7e:8f:46:ba:97:b3:84:20:ff:c7:37:b4:f2:c1:be:7f:
         56:cb:94:6e:fb:44:2d:1f:39:59:d7:93:e3:16:a6:1f:d0:25:
         89:6d:97:4c:27:97:55:76:02:b3:e8:b1:69:82:09:40:38:fa:
         48:54:9a:54:d9:ec:54:a1:f9:e1:c5:c5:f8:d8:fb:e9:13:ce:
         c4:f2:f1:17:66:bb:08:2c:9b:92:94:d8:3e:da:b4:fb:a2:cd:
         8b:9f:2b:d6:0b:ec:11:42:44:f5:e1:64:19:31:56:4b:fe:c3:
         35:4c:89:47:8f:f6:55:98:5b:e1:0a:fe:31:0d:54:ae:04:f3:
         49:dc:1b:5b:78:5f:da:59:95:fc:9c:94:e9:5d:8f:fb:7f:b1:
         e2:bd:16:46:4e:de:27:78:03:c6:ae:f6:99:41:ff:f0:6d:1e:
         65:0e:9f:c6:ab:54:83:6d:0d:91:d6:60:24:a9:20:f5:5e:eb:
         f9:44:42:40:05:09:15:63:9e:42:4f:7b:52:0c:7c:66:7c:ca:
         2b:f1:b3:91:7a:df:36:a7:96:97:07:e8:c1:f3:e5:3b:e1:36:
         69:5e:f6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:36:44 2024 by rpki-client on console-ams.rpki-client.org