Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3234302e302f32302d3234203d3e2037303034.roa
File:                     3138362e3130332e3234302e302f32302d3234203d3e2037303034.roa (raw, json)
Hash identifier:          ewEUgTe8jun223dBA/hdwqJzph05A5+nPVBRAPxc2Dc=
Subject key identifier:   91:FC:83:92:BB:D6:73:A1:DD:5F:AF:26:71:37:DA:18:AB:F9:70:DE
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       63A9CD684BD1A1A823FB47017AE9DD9304978DC7
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3234302e302f32302d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 18:17:00 +0000
ROA not before:           Tue 05 Mar 2024 18:12:00 +0000
ROA not after:            Tue 04 Mar 2025 18:17:00 +0000
asID:                     7004
IP address blocks:        186.103.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a9:cd:68:4b:d1:a1:a8:23:fb:47:01:7a:e9:dd:93:04:97:8d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:12:00 2024 GMT
            Not After : Mar  4 18:17:00 2025 GMT
        Subject: CN=91FC8392BBD673A1DD5FAF267137DA18ABF970DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:be:77:a5:54:a0:70:c7:5f:af:35:a1:0f:
                    c4:87:d9:71:af:b1:29:f8:99:b1:d1:f1:8e:7c:4d:
                    af:d0:5b:ba:58:00:4a:65:20:c1:c4:9e:10:b7:5f:
                    1e:64:26:b7:92:a7:cc:13:d5:9e:21:52:70:91:c5:
                    71:45:20:a2:3a:8a:a7:1e:87:bd:3b:4f:dc:40:07:
                    3c:99:f8:f1:61:af:b7:87:c3:d5:5a:bd:ed:8f:2b:
                    19:1a:e8:9c:c7:82:3c:56:d3:17:92:13:f2:cb:f9:
                    da:89:0d:6c:cd:a2:b1:b9:93:4e:01:ed:cc:37:c4:
                    c6:c4:83:1c:c1:42:7c:f6:a3:00:51:c5:d0:f2:4c:
                    e3:75:7e:28:75:52:d7:c7:4a:27:f8:82:97:fe:03:
                    c7:b4:ef:f0:dd:14:a1:2d:22:31:05:64:2b:a1:a1:
                    05:77:ca:2b:77:c7:6b:67:dc:dc:7c:1b:a6:09:4d:
                    da:3f:bd:7f:19:47:49:9e:11:ed:95:66:f9:04:2a:
                    cc:e0:a6:9e:0e:9a:4e:12:eb:85:90:52:4d:13:6d:
                    e4:cc:61:33:c6:3b:86:3e:1c:36:2a:13:63:9a:c1:
                    4b:f5:de:8c:04:03:e7:d2:7d:b3:2e:40:84:74:ab:
                    8f:2b:bc:a6:17:34:41:35:86:7b:f0:cf:c7:14:7f:
                    40:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FC:83:92:BB:D6:73:A1:DD:5F:AF:26:71:37:DA:18:AB:F9:70:DE
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3234302e302f32302d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:f8:b8:64:31:89:25:33:30:8f:57:e9:0a:80:12:ae:9b:fc:
         8c:ed:96:3b:5a:f2:b8:9a:cb:95:7d:d0:d7:d9:9d:4d:b5:36:
         12:e9:b2:6f:f0:aa:2f:8d:88:e5:e2:14:1e:9a:a5:86:8a:06:
         75:5c:5c:f2:f3:c9:3e:8a:f3:4d:7f:37:fa:96:1a:92:b5:87:
         17:53:64:b0:e8:6d:e9:fb:b3:c2:06:e7:3c:5c:de:df:aa:d9:
         18:3e:86:88:31:6e:78:b8:e2:d3:7a:16:e2:f7:fc:47:9c:19:
         8d:b2:04:fa:02:8e:e7:f1:00:38:a5:01:64:fa:33:ed:dd:90:
         93:dd:ea:89:8d:a1:23:71:18:3f:75:11:7a:35:57:bc:13:bd:
         97:9d:72:45:21:21:02:49:73:be:7c:94:95:05:81:d2:c8:a8:
         cc:42:dd:e7:8a:8e:5d:47:84:71:34:46:bc:16:18:29:36:e9:
         e1:6c:a4:6f:31:d7:f4:7b:54:7b:78:64:af:44:03:26:30:b4:
         fc:5f:ab:fd:12:a4:e7:33:e5:ba:cf:8e:82:f5:00:16:04:f6:
         72:5a:77:da:fe:8b:e9:37:ef:00:eb:7d:7d:28:1c:bf:6f:30:
         a4:f8:58:34:77:cd:d0:b2:cc:85:c4:e3:bf:17:b0:b1:a4:58:
         31:8d:1d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org