Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e39322e302f32332d3234203d3e203134373534.roa
File:                     3138362e3135312e39322e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier:          CgCnZo7If1rv92gedOt9K1zNT3GXTYCfNabq6aRJMus=
Subject key identifier:   DA:56:FE:A7:5C:14:20:60:0B:32:DB:6D:80:8F:BF:93:89:E8:D8:95
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       05C1018F5464E4B416309047C5FC726F79A36365
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e39322e302f32332d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:34 +0000
ROA not before:           Tue 05 Mar 2024 17:37:34 +0000
ROA not after:            Tue 04 Mar 2025 17:42:34 +0000
asID:                     14754
IP address blocks:        186.151.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Sep 2024 07:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c1:01:8f:54:64:e4:b4:16:30:90:47:c5:fc:72:6f:79:a3:63:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:34 2024 GMT
            Not After : Mar  4 17:42:34 2025 GMT
        Subject: CN=DA56FEA75C1420600B32DB6D808FBF9389E8D895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:35:26:80:8d:41:df:74:2f:0e:8d:e8:0e:
                    1c:4e:a0:65:4d:35:35:96:bb:24:00:9f:5a:5e:dd:
                    1a:f6:78:df:ed:b5:99:98:83:cb:93:65:44:a9:3b:
                    03:a3:0d:68:dc:fe:b6:a0:06:ce:e9:48:8a:3d:1b:
                    32:e0:14:f0:80:53:89:d3:ad:61:94:8c:5f:ad:e1:
                    3a:25:2d:28:2d:9f:ea:19:44:fc:59:dd:36:e8:07:
                    b5:fe:e7:74:f7:7e:f8:67:45:de:52:70:ee:87:38:
                    10:ce:83:f2:f8:58:92:ba:ef:3a:31:1c:1b:3f:28:
                    ba:df:7b:59:78:06:13:64:9e:db:45:3d:5d:d3:c7:
                    b2:eb:8e:99:83:4d:a3:e5:cf:60:78:f6:74:c5:d7:
                    22:29:d5:99:37:0d:2b:54:42:a1:51:39:e8:55:96:
                    ce:5b:c8:43:a4:e4:d7:17:de:f1:af:d1:40:b9:53:
                    df:f7:22:07:8c:15:50:3b:01:e2:5a:c2:1f:8f:b6:
                    10:7a:1e:16:11:ec:ec:f8:59:2f:aa:00:76:73:83:
                    2a:8f:8f:5a:6d:71:9c:70:4a:ca:3d:9b:22:1d:af:
                    2c:af:f0:2c:7f:39:44:39:08:3a:2d:4a:e9:ad:01:
                    11:cd:e2:6a:d9:1a:e4:91:e2:2c:f0:23:b9:af:22:
                    76:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:56:FE:A7:5C:14:20:60:0B:32:DB:6D:80:8F:BF:93:89:E8:D8:95
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e39322e302f32332d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:47:54:06:f7:42:56:47:30:51:8e:bf:de:6f:d2:10:fd:d7:
         4c:50:77:f8:a7:c4:fc:0c:40:0b:35:e1:6a:77:d1:4c:08:c8:
         80:33:6b:d7:ef:ff:ec:f4:a7:13:a5:f5:81:06:6d:50:06:d3:
         b6:f3:1e:1f:89:68:7a:03:86:b5:15:2f:cd:47:e4:b4:e1:4f:
         6b:2b:55:9c:36:f3:2e:9c:e9:65:01:e3:c9:a6:2e:a3:20:f0:
         fb:72:28:5b:fd:2e:3d:d1:35:d0:ce:3a:b4:38:f9:b0:e7:33:
         15:93:41:a4:8b:5f:95:d5:0a:b6:77:fd:46:a6:aa:56:03:fd:
         82:71:27:92:ae:d2:db:67:c6:35:3b:60:41:f2:4c:90:c8:4c:
         ad:47:4a:21:37:d6:a4:de:3b:ae:02:ef:47:b1:27:9a:a5:5a:
         db:23:88:27:23:8a:6c:92:d3:d0:fe:26:24:9f:56:ff:92:bd:
         00:54:f3:3a:ee:67:2d:09:4b:f2:04:30:08:1b:f5:94:9e:97:
         c8:bf:c3:6b:bb:e4:14:fc:7d:9b:ef:ca:e7:d7:02:7d:ff:8a:
         3c:ab:12:f8:99:f7:00:e0:54:e0:96:e3:36:4b:65:4c:4d:c1:
         d2:60:9b:d4:54:59:d4:1b:e3:4a:39:6d:b5:36:ec:e0:8a:21:
         95:20:a0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 02:51:47 2024 by rpki-client on console-ams.rpki-client.org