Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232342e302f32322d3232203d3e203532333437.roa
File:                     3138362e3137372e3232342e302f32322d3232203d3e203532333437.roa (raw, json)
Hash identifier:          JT3x4pXnQlFs/eqtXHb5E+GcYYfkHALBfOUTVbs6WV0=
Subject key identifier:   DF:1E:3F:E1:36:D3:F5:53:4C:2E:21:D5:2A:73:07:9D:66:EA:61:36
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       54C52B79E2E965C51FEB346A3E96AC1AE22B3ABD
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232342e302f32322d3232203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:24 +0000
ROA not before:           Tue 05 Mar 2024 17:36:24 +0000
ROA not after:            Tue 04 Mar 2025 17:41:24 +0000
asID:                     52347
IP address blocks:        186.177.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c5:2b:79:e2:e9:65:c5:1f:eb:34:6a:3e:96:ac:1a:e2:2b:3a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:24 2024 GMT
            Not After : Mar  4 17:41:24 2025 GMT
        Subject: CN=DF1E3FE136D3F5534C2E21D52A73079D66EA6136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:8c:52:00:33:c6:d6:62:6a:97:40:b8:32:
                    3e:d6:0b:a9:28:f3:aa:1f:e7:2b:30:5d:1b:ee:ea:
                    31:d6:f4:e6:aa:bf:9a:a3:0a:46:bf:69:20:94:de:
                    a9:6e:fc:cb:99:b7:83:a8:37:cb:58:65:ab:35:c4:
                    e4:87:ed:69:67:a3:36:47:c7:59:75:f9:a1:da:d0:
                    83:32:a4:4e:54:ed:0e:b7:e2:28:ad:f9:fe:c0:29:
                    ae:10:8f:64:66:eb:48:d3:f4:9e:ab:1f:a6:79:b2:
                    36:d2:55:2c:c0:36:1d:ba:cd:7e:e6:f3:04:ab:46:
                    c2:b5:a8:f2:d0:eb:20:b8:a2:1f:64:15:b4:f2:5e:
                    12:90:bb:42:25:9c:1a:14:99:4e:f6:1d:67:40:7f:
                    ed:7c:e7:67:d0:b9:5c:12:8f:25:00:49:8e:e2:4e:
                    57:6d:d4:af:e1:58:23:5b:0c:87:01:e5:d7:3f:7f:
                    39:4d:e1:a8:80:c7:7b:a1:0d:c9:c0:d7:56:3b:50:
                    d7:76:e5:77:41:96:70:f0:b3:51:81:4d:63:c8:c1:
                    de:89:a2:98:d0:e2:83:ce:0e:d0:35:6b:b0:b2:8b:
                    77:4a:b4:b5:29:dc:a8:8c:df:0c:eb:b9:3e:49:a1:
                    26:ef:aa:36:6a:4e:5f:7c:43:4e:9d:b9:67:58:ff:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1E:3F:E1:36:D3:F5:53:4C:2E:21:D5:2A:73:07:9D:66:EA:61:36
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232342e302f32322d3232203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:f4:fd:9b:32:4e:cc:19:4b:e5:d4:7c:63:d3:fa:a5:c6:cf:
         11:13:4b:98:81:40:b7:bb:1d:e8:cb:8e:96:d3:f7:ef:24:aa:
         70:ab:1c:84:1b:85:a3:0a:62:76:7a:9c:f1:8a:75:e3:fd:d2:
         35:dc:88:eb:33:ea:34:bf:eb:47:66:d6:8e:1a:b7:22:4c:0b:
         14:88:57:85:39:5a:ad:b3:6e:15:80:6b:fb:56:6b:d9:65:72:
         cc:a6:69:8e:d6:c2:85:df:46:ce:1e:9c:c1:b8:62:bf:fb:3c:
         3a:a4:91:03:cc:fb:9e:09:8a:11:9d:ad:ca:1c:37:c3:6a:fb:
         ec:7d:bb:38:ca:fc:92:62:10:06:5d:ec:0f:94:39:8a:fa:a3:
         04:c6:e5:74:e8:42:db:7c:dc:b8:f6:17:13:5a:43:75:98:84:
         c0:30:fd:19:f1:46:11:0a:25:22:67:87:b8:ee:fa:01:4d:10:
         d2:63:05:f8:be:22:8b:b6:9c:fd:e5:4d:97:40:1b:e4:dc:26:
         c2:52:24:73:4e:ef:64:68:2e:84:b6:4d:22:eb:27:7f:ef:a9:
         18:38:b5:9d:85:42:83:48:4d:3c:31:c9:78:1e:6d:b5:a4:a8:
         9f:40:2f:bb:34:36:15:f0:c8:fb:a0:8f:62:67:4d:d6:a8:9e:
         ee:b8:b4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org