Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39362e302f32342d3234203d3e20323633373236.roa
File:                     3133382e33362e39362e302f32342d3234203d3e20323633373236.roa (raw, json)
Hash identifier:          sNPTTcMZ7xMxSDOP9cLmawYDDCsx60fi3NsAJm4HjM0=
Subject key identifier:   5F:67:76:69:2F:A7:A5:F8:37:D3:EF:CE:20:4B:13:34:BC:1F:3F:3A
Certificate issuer:       /CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
Certificate serial:       2456B1396EFB871578F8FE3FBE1D69C610317B1F
Authority key identifier: A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39362e302f32342d3234203d3e20323633373236.roa
Signing time:             Fri 12 Apr 2024 20:15:01 +0000
ROA not before:           Fri 12 Apr 2024 20:10:01 +0000
ROA not after:            Fri 11 Apr 2025 20:15:01 +0000
asID:                     263726
IP address blocks:        138.36.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:56:b1:39:6e:fb:87:15:78:f8:fe:3f:be:1d:69:c6:10:31:7b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
        Validity
            Not Before: Apr 12 20:10:01 2024 GMT
            Not After : Apr 11 20:15:01 2025 GMT
        Subject: CN=5F6776692FA7A5F837D3EFCE204B1334BC1F3F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:be:1d:49:b7:a1:79:16:b4:98:25:00:9f:
                    34:e2:1f:e7:d4:42:b4:c2:fd:6f:b6:94:d6:71:6e:
                    36:9b:e8:0f:3d:8f:40:46:91:2c:f2:ff:84:c0:25:
                    10:64:5b:24:9f:b5:5c:43:74:b8:b3:a3:5f:3b:f2:
                    53:39:e3:1b:5b:0d:d2:04:af:a3:87:16:a8:53:83:
                    58:46:60:22:52:74:61:11:87:25:e5:85:bc:d9:62:
                    ad:40:0c:eb:38:ef:a3:6e:01:48:26:fc:61:bd:60:
                    9f:8c:c7:32:7f:a3:89:18:89:16:dc:b4:89:39:f9:
                    8b:49:ad:c0:23:04:4d:df:e0:7a:a4:1d:ae:a0:72:
                    26:8d:64:97:e6:45:92:76:dc:61:a0:4c:c3:f6:4a:
                    d8:44:50:e2:3b:20:47:a8:ca:74:e2:92:d6:a8:3f:
                    51:45:3c:03:6a:92:a9:06:81:e3:e8:d8:e6:0f:14:
                    df:73:8a:97:6c:19:d8:5f:49:e6:d8:7a:cc:34:d2:
                    48:11:48:09:ca:1e:34:0c:3a:6c:ca:95:c0:e8:50:
                    4a:99:cb:a4:6c:f5:9b:2b:c7:a5:3f:29:0f:d6:e3:
                    1f:29:72:15:e4:40:76:9b:11:55:25:9c:53:b9:de:
                    fe:93:0e:53:e4:82:f1:6a:1c:e3:ec:81:9e:98:87:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:67:76:69:2F:A7:A5:F8:37:D3:EF:CE:20:4B:13:34:BC:1F:3F:3A
            X509v3 Authority Key Identifier:
                keyid:A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39362e302f32342d3234203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b9:e3:5b:bb:ca:a2:14:18:98:2c:fc:fd:2b:f9:eb:03:aa:
         ff:4a:eb:2d:99:23:48:63:fe:cf:58:37:00:3f:07:76:6d:af:
         23:28:f3:0c:00:2d:fb:ec:16:6a:2b:64:72:3e:b8:36:f1:e6:
         db:62:a0:9f:f6:69:6f:52:e3:f1:bb:44:ee:40:40:33:03:53:
         97:5f:15:80:cc:2a:14:b9:cb:29:22:3d:0c:ee:6b:6f:50:71:
         dc:25:2b:fb:5f:80:14:65:2c:a2:4d:ea:54:1c:e3:26:cf:a7:
         0d:dd:bc:a1:4c:1e:2d:e4:4a:b5:1d:a1:db:00:21:67:86:ef:
         1d:ef:1b:39:c4:40:1e:6d:2f:bb:f2:31:8f:7b:6e:b3:df:08:
         eb:50:de:fb:c0:03:b6:be:f4:b4:ff:27:de:75:09:1a:7c:f0:
         79:8b:e4:aa:bd:7d:8c:9d:2a:95:6e:34:e1:36:61:05:72:b6:
         c5:31:6b:47:24:8b:48:fa:93:fb:a8:b5:58:91:a0:cd:69:d1:
         4d:83:9e:c9:69:07:46:a2:1a:cd:e1:54:28:0a:46:52:c1:80:
         4d:15:a6:4f:1a:b5:8b:76:bc:8d:2e:d4:68:fc:11:d9:57:cf:
         a2:be:1f:fa:34:cd:38:54:1d:94:e6:b7:aa:e3:62:99:26:f9:
         6b:05:fa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:54:25 2024 by rpki-client on console-ams.rpki-client.org