Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B247EA2689872EAD1C46D365EC86710D1CFB5666AC46E823DB74477B718EB04/0/3138362e39362e3230382e302f32302d3234203d3e203237393234.roa
File:                     3138362e39362e3230382e302f32302d3234203d3e203237393234.roa (raw, json)
Hash identifier:          C4auZA5rY/+8lVHh65l1ssI9dqUXgkGqIQX8+Lw8j58=
Subject key identifier:   A1:DD:8F:8F:F4:F9:77:12:04:97:4E:D4:11:0E:59:74:A4:83:2D:A2
Certificate issuer:       /CN=448D738DFBD73388AE474D2B6ED53A04D42FCAE5
Certificate serial:       1596CC6B2D8FDFFF5436112A9281AE7AA95B09B6
Authority key identifier: 44:8D:73:8D:FB:D7:33:88:AE:47:4D:2B:6E:D5:3A:04:D4:2F:CA:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/448D738DFBD73388AE474D2B6ED53A04D42FCAE5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B247EA2689872EAD1C46D365EC86710D1CFB5666AC46E823DB74477B718EB04/0/3138362e39362e3230382e302f32302d3234203d3e203237393234.roa
Signing time:             Tue 05 Mar 2024 17:41:57 +0000
ROA not before:           Tue 05 Mar 2024 17:36:57 +0000
ROA not after:            Tue 04 Mar 2025 17:41:57 +0000
asID:                     27924
IP address blocks:        186.96.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B247EA2689872EAD1C46D365EC86710D1CFB5666AC46E823DB74477B718EB04/0/448D738DFBD73388AE474D2B6ED53A04D42FCAE5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B247EA2689872EAD1C46D365EC86710D1CFB5666AC46E823DB74477B718EB04/0/448D738DFBD73388AE474D2B6ED53A04D42FCAE5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/448D738DFBD73388AE474D2B6ED53A04D42FCAE5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:96:cc:6b:2d:8f:df:ff:54:36:11:2a:92:81:ae:7a:a9:5b:09:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448D738DFBD73388AE474D2B6ED53A04D42FCAE5
        Validity
            Not Before: Mar  5 17:36:57 2024 GMT
            Not After : Mar  4 17:41:57 2025 GMT
        Subject: CN=A1DD8F8FF4F9771204974ED4110E5974A4832DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:43:2c:51:5a:f1:39:5c:77:3e:5f:f3:fb:
                    25:07:90:5b:be:4d:71:91:d5:56:ff:aa:af:09:c2:
                    f0:87:c4:76:ec:2c:48:56:ad:85:ea:5c:77:2e:a6:
                    95:d9:f2:34:1b:7c:ff:bd:fa:3d:08:10:77:62:ec:
                    68:d7:04:9d:7a:7c:fc:3e:36:09:ef:46:f9:3c:b6:
                    f8:5f:5f:a5:9f:49:51:b5:6a:ba:f2:56:5e:e9:45:
                    c1:c6:42:75:ea:7a:5f:a7:7a:25:9a:dc:0c:94:5e:
                    dd:d5:35:9e:fc:48:9f:19:5b:8e:ca:ce:80:62:ec:
                    d3:59:e8:9d:5c:d8:fd:d4:6c:3a:02:3e:b1:38:54:
                    be:e2:88:95:26:3a:8b:70:49:c6:67:be:08:e2:19:
                    06:0e:1e:4d:12:82:a6:12:c4:aa:9b:05:80:0c:e9:
                    26:6e:b0:4f:a8:bc:b8:f5:c2:ce:b5:7d:5e:bf:3e:
                    1c:c7:ed:4a:cb:d0:54:c3:68:bc:75:65:f7:ef:3e:
                    1a:60:91:cc:8b:d5:4b:f9:56:bf:c7:f5:ee:5e:b6:
                    d1:72:13:82:9f:6a:86:d5:98:f7:fc:91:71:4d:79:
                    b9:b7:33:99:9a:c9:18:cb:57:06:45:34:d3:1f:1f:
                    ff:7f:87:35:31:cb:28:5d:37:3c:d9:9a:77:d4:e6:
                    34:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DD:8F:8F:F4:F9:77:12:04:97:4E:D4:11:0E:59:74:A4:83:2D:A2
            X509v3 Authority Key Identifier:
                keyid:44:8D:73:8D:FB:D7:33:88:AE:47:4D:2B:6E:D5:3A:04:D4:2F:CA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B247EA2689872EAD1C46D365EC86710D1CFB5666AC46E823DB74477B718EB04/0/448D738DFBD73388AE474D2B6ED53A04D42FCAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/448D738DFBD73388AE474D2B6ED53A04D42FCAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B247EA2689872EAD1C46D365EC86710D1CFB5666AC46E823DB74477B718EB04/0/3138362e39362e3230382e302f32302d3234203d3e203237393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:01:00:7a:5a:37:0e:e1:fe:f2:4c:ac:55:67:26:5b:66:73:
         e2:c2:d0:0a:42:f8:b9:7b:88:0e:44:1f:52:31:3c:8c:7c:ca:
         56:93:ba:8a:1e:85:86:d4:4e:69:8c:76:2a:e5:0e:8e:3f:95:
         b0:b7:43:be:01:10:90:b1:f1:cb:35:b0:8c:aa:30:d2:93:36:
         99:13:6d:ec:81:3e:81:10:b2:6d:12:32:ca:e5:c5:90:72:60:
         ee:0f:2a:9f:f2:73:84:03:fb:42:94:a1:22:48:d6:7e:7a:a6:
         27:d0:06:f4:89:76:22:44:81:e6:90:4d:86:fb:4f:c1:16:f8:
         41:18:32:e3:84:0a:09:08:24:8b:c9:33:43:99:a9:e3:b0:a5:
         d5:07:1a:20:43:0c:b1:87:77:e6:2d:18:51:e6:17:cb:b6:c9:
         4c:0b:a4:3b:5b:26:e8:13:4f:92:ba:d2:b1:f1:10:67:98:b9:
         47:d9:fd:36:f2:69:7c:4c:6c:e6:07:91:a8:23:3b:2f:cd:fe:
         ac:ef:a6:a2:3b:05:a5:6e:fa:8a:30:27:5b:07:26:29:6e:12:
         3a:09:a3:04:25:93:34:24:41:09:17:89:94:c1:c3:a3:ef:0d:
         e1:14:a9:b3:e4:b4:e2:3e:cf:2d:50:89:03:04:ca:c9:cb:9c:
         b2:41:06:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org