Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138362e32362e3132382e302f31372d3230203d3e203237383839.roa
File:                     3138362e32362e3132382e302f31372d3230203d3e203237383839.roa (raw, json)
Hash identifier:          vyGH3wGkO4s1wzOEZhqbY9AD0H0w7puavYvhdkw99+Q=
Subject key identifier:   01:7B:F5:D5:09:E2:64:72:9F:BB:A0:15:6A:CB:3E:A9:AD:50:70:BD
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       79AA62EBEF5575EC54DF7869D7AC3A429DDE4E1A
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138362e32362e3132382e302f31372d3230203d3e203237383839.roa
Signing time:             Tue 05 Mar 2024 18:18:26 +0000
ROA not before:           Tue 05 Mar 2024 18:13:26 +0000
ROA not after:            Tue 04 Mar 2025 18:18:26 +0000
asID:                     27889
IP address blocks:        186.26.128.0/17 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:aa:62:eb:ef:55:75:ec:54:df:78:69:d7:ac:3a:42:9d:de:4e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Mar  5 18:13:26 2024 GMT
            Not After : Mar  4 18:18:26 2025 GMT
        Subject: CN=017BF5D509E264729FBBA0156ACB3EA9AD5070BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:fb:84:39:db:ec:1e:e9:dc:06:d4:df:16:
                    b7:40:e2:19:a4:ac:fd:46:70:11:78:de:7e:1d:7d:
                    c2:04:2a:2e:7f:f1:71:3b:2e:e7:de:b3:e8:cb:0d:
                    9d:70:bf:4c:c0:18:24:07:96:32:d3:26:14:db:b8:
                    5a:7a:25:98:29:44:ca:2b:3a:e2:4b:6e:d0:c6:6c:
                    70:10:46:a5:e9:28:59:bc:dd:72:32:27:04:dc:ee:
                    16:89:68:93:e0:dc:b9:1a:9f:c9:0c:87:e8:99:12:
                    ca:ae:a1:36:d9:c7:9b:b9:25:f6:15:f5:43:39:f4:
                    bb:b6:73:e3:2c:8f:6b:48:81:57:a2:a4:c7:4f:cd:
                    88:7a:76:89:14:82:a1:70:51:28:46:fb:8e:a8:f4:
                    89:71:d8:bd:d1:77:51:82:78:a0:2c:8c:2e:44:7a:
                    1f:e1:53:ae:4b:e8:4f:f2:b3:38:67:89:12:29:ef:
                    8c:5c:0d:5d:24:d6:6b:78:31:06:fe:97:40:c5:a5:
                    72:ff:cc:a4:de:3e:e8:70:54:fa:42:fd:e2:c3:64:
                    df:f8:63:32:4d:34:ab:66:64:13:9b:ba:3d:8b:d7:
                    98:cf:66:da:d0:9a:6f:45:50:e9:57:02:a3:70:e4:
                    e3:59:64:72:9c:bd:6e:f6:66:28:9c:8c:27:b3:9f:
                    e5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7B:F5:D5:09:E2:64:72:9F:BB:A0:15:6A:CB:3E:A9:AD:50:70:BD
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138362e32362e3132382e302f31372d3230203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8f:d4:5d:f2:63:45:33:61:e7:bb:10:07:6e:9b:67:8d:4f:f3:
         6f:da:c5:e2:37:5c:2e:a8:76:67:a8:61:e7:8f:b7:ba:f4:b6:
         33:27:42:f4:6a:c9:fc:c4:af:96:e8:eb:05:22:32:fc:87:70:
         fe:27:54:a8:72:9c:84:eb:0c:45:54:7a:b1:6c:60:4c:7a:4e:
         77:15:56:9a:12:4f:f0:d9:c5:9d:5d:24:4c:36:87:53:c0:e0:
         e2:3e:c7:99:69:cd:30:8c:7f:b9:29:3b:8a:6e:7c:86:73:88:
         a5:ca:e9:ba:58:5d:e3:66:57:8b:7e:16:c7:e2:cc:d4:88:a6:
         56:45:3b:c4:2f:8a:97:a4:0d:f7:f5:89:c5:f8:02:97:13:70:
         58:b1:0d:c1:8b:67:36:b2:4e:3a:5a:24:21:0c:2b:f8:97:f8:
         ad:43:f6:e3:7c:f9:4a:b0:bc:57:16:2e:a5:6b:06:e1:be:39:
         b9:75:74:8c:bb:88:dd:4c:a3:12:2f:ff:57:f9:70:29:ce:08:
         fa:ed:4b:c9:d3:2c:1a:e4:23:d1:df:6b:f3:7c:c7:fc:fd:76:
         60:89:f3:50:ac:85:3b:48:83:7e:49:65:90:91:85:76:e3:56:
         de:7e:73:76:30:6c:ba:15:7c:b2:99:04:77:6b:d6:13:65:85:
         2b:97:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:20 2024 by rpki-client on console-ams.rpki-client.org