Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3132392e302f32342d3234203d3e203532323632.roa
File:                     3138362e322e3132392e302f32342d3234203d3e203532323632.roa (raw, json)
Hash identifier:          cOY5mubalnauAJug9IV511iUkfVPeQ17xCli1FdzSmU=
Subject key identifier:   D6:22:52:1D:83:AB:0D:56:95:88:1D:8F:19:74:64:57:33:F2:69:0A
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       753C045D7527F08A6CB6381C9FC77C3F4A66D8B7
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3132392e302f32342d3234203d3e203532323632.roa
Signing time:             Tue 05 Mar 2024 18:08:16 +0000
ROA not before:           Tue 05 Mar 2024 18:03:16 +0000
ROA not after:            Tue 04 Mar 2025 18:08:16 +0000
asID:                     52262
IP address blocks:        186.2.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3c:04:5d:75:27:f0:8a:6c:b6:38:1c:9f:c7:7c:3f:4a:66:d8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Mar  5 18:03:16 2024 GMT
            Not After : Mar  4 18:08:16 2025 GMT
        Subject: CN=D622521D83AB0D5695881D8F1974645733F2690A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:69:2e:be:5a:3f:23:65:96:2d:24:98:df:
                    6a:d9:f5:b8:80:ed:9f:8b:cd:cd:fd:09:84:7f:a8:
                    da:0f:8b:91:d5:29:cc:3c:1a:cf:a7:29:1d:0b:f7:
                    cc:47:68:6a:54:74:26:79:b3:95:e8:ba:56:52:45:
                    38:4e:af:65:83:21:bf:90:54:17:9d:c9:01:5b:4c:
                    c8:a7:ff:fb:ec:7f:29:c5:0c:95:f1:10:f7:a1:40:
                    05:3a:a0:f1:c1:ae:86:83:37:da:73:6a:e0:4b:2b:
                    7d:9e:4b:d0:57:03:cc:1e:51:46:64:01:1f:6c:e6:
                    36:33:db:a7:7c:c3:68:4b:6b:47:22:c1:ac:2d:3b:
                    be:f1:e9:66:7d:f3:15:f2:59:6f:2d:38:51:7b:7f:
                    0a:97:0e:89:e9:36:79:ef:f2:fb:bc:ea:fd:f5:33:
                    3c:58:eb:da:ce:c4:cf:1f:56:58:06:b1:32:a7:3b:
                    bf:44:d5:b5:da:ac:6b:b3:cd:a4:64:a9:ad:0f:b7:
                    43:55:10:b6:42:69:35:eb:8d:50:ea:63:49:1c:fb:
                    e0:f5:af:cd:b7:4a:f6:49:16:43:6e:1e:1b:15:97:
                    34:2c:39:e7:70:a3:3d:ee:a0:9a:2b:f0:5d:d7:df:
                    69:3c:07:1b:9c:08:d7:e4:14:1b:05:8a:b2:f6:b6:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:22:52:1D:83:AB:0D:56:95:88:1D:8F:19:74:64:57:33:F2:69:0A
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3132392e302f32342d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:f4:7b:02:60:83:28:5f:18:30:11:f3:a5:8d:80:81:d4:00:
         3b:07:fc:14:67:c1:c7:a6:73:be:33:0c:8a:6f:6f:96:db:31:
         a6:7b:97:a5:20:cd:d0:a3:15:21:af:f7:4b:d4:42:cb:b7:07:
         34:b9:fb:bd:dd:ab:8c:df:b2:c2:08:1f:4d:73:5c:b3:a9:e5:
         1d:31:cf:6f:10:21:c9:6b:5a:29:4a:22:8e:0e:a7:7c:20:a1:
         20:01:dd:f8:62:f5:50:6e:e8:08:6f:30:a2:23:8a:8f:68:af:
         ff:59:80:5d:a3:fd:72:b1:62:c8:a3:c7:4d:81:32:e2:46:f9:
         2e:20:e0:2c:d9:48:c1:95:c9:3e:0e:5c:d9:8f:58:c8:b6:a8:
         36:72:f3:76:f5:54:1f:b0:a9:56:2f:31:c5:21:88:ea:92:73:
         59:f3:0a:fc:b7:58:82:e1:95:e3:37:c6:1e:23:af:93:d4:b8:
         dd:cd:f9:26:7a:00:20:d3:9b:92:46:57:2e:33:3f:01:93:e2:
         fc:a8:09:ee:f4:db:5b:42:6c:d4:99:b4:0d:f4:49:b2:fa:77:
         d6:96:4e:89:dd:84:8f:3b:05:15:73:2c:23:68:b1:91:2b:51:
         d7:bd:69:c9:28:8f:a1:48:d2:e9:b9:d0:aa:1e:cd:06:ff:b2:
         d8:c8:78:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 00:21:07 2024 by rpki-client on console-fra.rpki-client.org