Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e38302e302f32312d3234203d3e203134373534.roa
File:                     3138362e3135312e38302e302f32312d3234203d3e203134373534.roa (raw, json)
Hash identifier:          bM6RJleEN5DhNN9at+5YzkzEHYKqqqNY9OCEqNMWzK8=
Subject key identifier:   CF:AB:0F:6D:A6:84:30:07:C3:57:28:03:FA:52:EC:D7:03:E6:E0:0C
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       3648F290E9426AACCD024FD2B0D8A7B7CD0DFD82
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e38302e302f32312d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:28 +0000
ROA not before:           Tue 05 Mar 2024 17:37:28 +0000
ROA not after:            Tue 04 Mar 2025 17:42:28 +0000
asID:                     14754
IP address blocks:        186.151.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:48:f2:90:e9:42:6a:ac:cd:02:4f:d2:b0:d8:a7:b7:cd:0d:fd:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:28 2024 GMT
            Not After : Mar  4 17:42:28 2025 GMT
        Subject: CN=CFAB0F6DA6843007C3572803FA52ECD703E6E00C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:a2:e3:af:b9:46:0b:79:03:76:57:cc:98:
                    65:84:c5:00:e7:c6:53:2f:d4:2f:f5:e9:ef:cc:29:
                    7f:3f:17:0d:79:0e:80:16:59:8d:ab:3e:a3:b3:fe:
                    f9:2a:f4:ec:a9:1e:86:29:e6:9d:92:39:58:86:26:
                    f8:37:75:24:98:75:cf:9b:2b:5e:c9:7b:08:64:ae:
                    ba:8a:cb:fe:78:16:b8:df:e8:eb:3c:89:d5:43:cb:
                    7c:8b:19:e0:8f:d5:46:db:c4:c1:2a:d5:6a:7c:90:
                    be:26:be:0f:e4:6e:8d:09:a9:b4:9f:1e:85:06:fc:
                    4c:50:41:cf:d1:f2:52:41:c4:7a:f6:b7:6b:31:bc:
                    4b:cf:46:07:4e:d0:43:65:22:e1:9c:80:5f:28:e9:
                    ae:b9:eb:4c:71:23:69:a1:ac:8a:b0:0d:c7:91:47:
                    58:47:86:aa:99:d3:b4:f1:bd:68:17:29:cb:7e:d3:
                    74:30:ad:fe:97:cf:c5:8a:e3:e1:5a:01:cb:3d:bd:
                    1d:13:43:27:0a:1a:e1:d4:c0:19:05:a6:20:72:c1:
                    79:68:da:25:75:b3:92:0f:ab:2f:10:ed:86:37:97:
                    2f:ae:24:da:d6:bb:3a:9a:c9:0d:56:e8:d5:9a:9e:
                    24:d9:45:42:fd:79:22:7d:1b:96:fd:31:6e:6d:1b:
                    8c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AB:0F:6D:A6:84:30:07:C3:57:28:03:FA:52:EC:D7:03:E6:E0:0C
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e38302e302f32312d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:db:ee:cc:de:dc:49:e5:8c:dd:8e:7e:1e:e7:62:64:08:3a:
         76:0e:ee:4d:b4:6e:b7:1e:2b:b0:7e:99:49:43:d9:1f:2e:62:
         fe:b9:8d:f3:01:78:3d:d4:fa:b2:12:3f:e4:cd:b3:f7:fd:ea:
         69:0d:06:25:91:f3:e9:c3:bd:a5:d6:65:2c:0a:81:03:67:59:
         60:9c:57:96:56:78:f0:63:5c:24:74:30:e4:5e:83:0e:48:c3:
         6b:5b:1d:d9:ac:1b:8e:89:10:3e:7e:f8:7a:1a:96:bf:fc:df:
         db:60:14:35:67:3d:6d:36:af:f1:85:f6:8c:51:2d:14:95:2b:
         75:8a:6d:7b:48:74:56:65:d3:3d:97:f9:2b:c9:e7:db:8c:d6:
         69:aa:28:2f:c5:4a:55:6e:69:6d:4e:a3:fb:dc:49:14:5b:c1:
         1d:b2:71:dd:3f:79:82:01:68:97:15:c3:4c:60:5e:c1:89:83:
         72:0d:e6:32:a4:60:65:bf:c2:fb:df:bf:6f:0a:18:7c:67:37:
         6c:5a:64:95:f9:0c:04:5f:38:79:80:11:16:aa:4d:6c:57:11:
         61:ad:9f:8b:64:13:b8:30:31:51:78:e1:6b:f9:33:15:11:21:
         96:ea:39:dd:8b:a0:57:8f:21:74:3f:05:35:97:2a:a5:57:77:
         5c:3b:14:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org