Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3135362e302f32332d3234203d3e2037303034.roa
File:                     3138362e3130332e3135362e302f32332d3234203d3e2037303034.roa (raw, json)
Hash identifier:          Ja60X5l9UQp0VRufkKjpHoBEmvkKWMSOj+FJ6l1Bj5Y=
Subject key identifier:   53:9F:C9:87:77:E0:C9:5D:27:B0:DF:46:8D:FF:0A:EC:A2:A3:D1:93
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       7A2238AB2768C0986F30DF52F1866DFC0114B77E
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3135362e302f32332d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 18:16:57 +0000
ROA not before:           Tue 05 Mar 2024 18:11:57 +0000
ROA not after:            Tue 04 Mar 2025 18:16:57 +0000
asID:                     7004
IP address blocks:        186.103.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:22:38:ab:27:68:c0:98:6f:30:df:52:f1:86:6d:fc:01:14:b7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:57 2024 GMT
            Not After : Mar  4 18:16:57 2025 GMT
        Subject: CN=539FC98777E0C95D27B0DF468DFF0AECA2A3D193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:ab:ee:8c:b4:82:1e:58:1e:1e:07:2f:fc:
                    60:15:d7:ea:37:3a:71:83:01:39:59:70:59:8f:2c:
                    2c:4e:54:aa:e4:a7:43:5b:de:6d:17:b4:27:6d:19:
                    56:28:e6:26:af:77:33:11:02:45:13:2a:c2:20:8d:
                    e0:45:53:ec:1c:22:19:5c:4e:8b:a9:4f:63:9c:fe:
                    29:e6:dd:4e:6a:d4:73:50:51:94:c7:3b:f5:3a:77:
                    e3:d8:fe:13:b4:5c:55:bb:d6:2d:9a:12:3a:2d:9f:
                    91:87:38:1c:2a:9b:60:a1:f2:90:9b:03:07:8f:73:
                    08:84:35:e6:ad:81:03:2b:8b:02:dd:70:6f:21:95:
                    98:e1:b1:3a:42:24:0e:18:44:2f:e9:4b:3d:99:e0:
                    29:4c:a0:6b:33:20:3f:da:4e:fc:31:f0:13:e7:a3:
                    34:19:e6:66:67:4e:ac:40:3d:57:e1:04:de:7f:fa:
                    cb:ea:21:9e:57:bb:02:40:8c:ad:f9:4e:2e:7e:53:
                    aa:ef:3c:52:a1:49:ca:58:4a:4b:17:e3:4c:c6:eb:
                    8f:1e:dc:9d:93:33:c8:7f:90:7f:1b:91:6c:55:33:
                    83:95:d8:71:93:02:92:93:a3:55:97:06:ea:98:7f:
                    7a:5e:b0:be:e2:d4:89:d4:74:c6:a9:7b:12:7f:cf:
                    80:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9F:C9:87:77:E0:C9:5D:27:B0:DF:46:8D:FF:0A:EC:A2:A3:D1:93
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3135362e302f32332d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:40:f3:03:b1:fa:99:bb:2b:64:fc:43:bf:cf:d3:0c:a4:ab:
         aa:7e:63:20:b0:2c:99:25:3e:46:e7:5d:67:4e:10:88:db:5c:
         05:3c:aa:f9:53:bd:94:c9:cc:3c:f1:86:14:b6:5d:db:99:b3:
         e0:db:bf:a6:83:54:32:98:84:58:62:4d:70:00:68:0c:71:a0:
         a1:e0:bd:fc:33:b6:0f:07:15:6a:c4:ea:20:08:19:c9:10:3c:
         97:c4:6d:64:23:b1:e7:0e:44:1e:00:5f:5b:c7:5f:8e:25:3c:
         fb:8a:45:07:f6:bb:40:84:d6:c6:58:54:bf:03:3f:0b:97:5b:
         e0:6d:4f:be:68:55:f8:96:71:be:fb:04:3e:14:b4:d0:d6:ad:
         ce:98:fc:88:fe:49:0a:dc:a2:54:6d:b7:07:08:ff:f7:72:9f:
         cd:25:48:26:5e:d9:dd:9c:7b:06:7a:b3:20:ed:e2:92:0c:b2:
         13:6b:3d:1e:4a:64:35:61:dd:f6:bb:92:8a:f9:65:39:20:3e:
         5b:5a:da:6d:2e:91:33:29:76:30:e3:77:a1:fe:31:f9:61:d6:
         f1:f1:ab:3b:3a:a8:b6:47:d3:ef:b6:4d:9f:41:fe:99:8f:8e:
         08:44:aa:99:a6:8c:94:e1:b1:39:10:1d:3c:fa:64:36:c0:17:
         91:47:9f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:43:20 2024 by rpki-client on console-ams.rpki-client.org