Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3138362e3135392e39362e302f32302d3230203d3e203237373435.roa
File:                     3138362e3135392e39362e302f32302d3230203d3e203237373435.roa (raw, json)
Hash identifier:          mjP5j8X+AtALq5U7m5tiAEdb0C0vR77VZ9hyr+etkbs=
Subject key identifier:   67:DD:56:F0:D3:AA:8B:36:89:E7:74:4F:B9:34:E3:B3:9F:89:60:D9
Certificate issuer:       /CN=15DB6B388486161B93957759E07BEB14CE6D932F
Certificate serial:       5276EF3263AFAF653DDC32C0105547FD6688DEB8
Authority key identifier: 15:DB:6B:38:84:86:16:1B:93:95:77:59:E0:7B:EB:14:CE:6D:93:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3138362e3135392e39362e302f32302d3230203d3e203237373435.roa
Signing time:             Tue 05 Mar 2024 17:51:29 +0000
ROA not before:           Tue 05 Mar 2024 17:46:29 +0000
ROA not after:            Tue 04 Mar 2025 17:51:29 +0000
asID:                     27745
IP address blocks:        186.159.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/15DB6B388486161B93957759E07BEB14CE6D932F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/15DB6B388486161B93957759E07BEB14CE6D932F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:76:ef:32:63:af:af:65:3d:dc:32:c0:10:55:47:fd:66:88:de:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DB6B388486161B93957759E07BEB14CE6D932F
        Validity
            Not Before: Mar  5 17:46:29 2024 GMT
            Not After : Mar  4 17:51:29 2025 GMT
        Subject: CN=67DD56F0D3AA8B3689E7744FB934E3B39F8960D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e8:c9:65:2f:73:10:cb:28:0d:82:6d:d6:2b:
                    43:dc:b1:59:a8:45:6b:a1:1e:df:2c:49:b4:f9:a9:
                    d4:4c:54:b3:0f:87:fd:9c:35:ea:0a:c0:8f:e7:31:
                    b1:ab:6c:11:6d:fb:db:0b:f5:bb:18:a1:61:1c:e2:
                    22:c4:c8:15:ba:21:45:3d:81:b5:11:82:05:c0:c0:
                    fa:d6:43:54:8d:01:bb:88:c9:3d:67:9d:9e:42:d8:
                    e1:de:a2:47:fe:54:9f:90:b0:2a:55:a0:20:f4:71:
                    ed:2e:c8:d9:e6:f0:bb:1e:24:ff:4e:a0:bb:49:4e:
                    35:81:b7:3d:35:98:95:59:d4:ff:ec:93:94:34:83:
                    94:ea:0a:67:e6:ec:fc:0f:e3:db:27:f3:90:cc:29:
                    61:1b:7a:c7:05:18:48:b5:e1:ad:5c:22:c8:de:89:
                    9f:dc:58:ed:7b:9d:88:f8:5b:39:6e:18:c3:36:c9:
                    72:db:62:ff:f3:e9:89:4d:14:41:ff:76:83:a6:ab:
                    2e:b0:66:f4:48:46:0b:26:39:bc:ba:12:e8:06:0b:
                    b6:a4:85:40:2b:7c:30:af:a7:0f:d4:91:3a:8e:0a:
                    08:00:98:6d:bb:7c:dd:44:ef:af:8e:c6:17:65:59:
                    7a:30:da:6c:a7:7c:15:a0:63:84:27:83:5b:8f:2d:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DD:56:F0:D3:AA:8B:36:89:E7:74:4F:B9:34:E3:B3:9F:89:60:D9
            X509v3 Authority Key Identifier:
                keyid:15:DB:6B:38:84:86:16:1B:93:95:77:59:E0:7B:EB:14:CE:6D:93:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/15DB6B388486161B93957759E07BEB14CE6D932F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3138362e3135392e39362e302f32302d3230203d3e203237373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:24:0f:11:87:52:ba:4e:75:aa:93:ef:c0:dc:4e:ed:45:4f:
         65:d7:b2:ae:fa:10:7c:28:5a:38:1c:65:ba:c9:47:e5:03:82:
         a3:12:09:1d:27:30:56:62:9c:d2:44:1d:eb:ef:9f:11:4b:76:
         00:c1:41:05:58:b6:75:b3:4a:1f:98:00:41:ca:8f:b7:66:c3:
         05:88:4a:d4:38:2c:d8:37:ad:06:0f:3f:30:8a:4d:99:22:5f:
         58:c3:9a:6f:94:a9:f3:12:d0:62:95:66:70:5a:1e:d9:12:b2:
         f3:e5:d3:e8:fd:01:0b:81:53:ef:74:19:8c:1c:26:63:a9:31:
         a0:6b:36:59:8f:11:c0:89:3f:73:30:75:1d:69:f4:d5:10:b8:
         6e:bf:98:29:a0:55:36:8f:d0:b7:51:e5:80:81:18:8b:29:f9:
         c1:0f:6d:44:6b:5c:aa:df:e9:df:67:6c:f4:29:fd:cd:ac:db:
         ad:39:41:85:05:26:19:07:f4:89:aa:8f:4e:63:7f:1e:95:39:
         6e:e9:96:cb:1e:bc:b0:06:39:02:0b:80:3a:27:fc:a2:02:32:
         05:91:f1:59:65:ea:fd:ea:48:a1:94:b2:91:22:8c:f9:77:d4:
         a9:a9:18:d6:16:83:5a:a6:71:32:a3:3e:ff:2a:01:c7:eb:bb:
         9a:ab:61:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org