Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232382e302f32322d3232203d3e203532333437.roa
File:                     3138362e3137372e3232382e302f32322d3232203d3e203532333437.roa (raw, json)
Hash identifier:          iqsY2KRJsZsgu8ygw8jua218bQOWGq23yLo85CiGPKk=
Subject key identifier:   D6:05:F0:92:64:16:03:98:11:2A:B6:66:3D:B0:4A:92:A6:2A:0B:F4
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       4607AF666E7AAD8C7E5AD6DC9AA47144277D92A4
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232382e302f32322d3232203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:27 +0000
ROA not before:           Tue 05 Mar 2024 17:36:27 +0000
ROA not after:            Tue 04 Mar 2025 17:41:27 +0000
asID:                     52347
IP address blocks:        186.177.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:07:af:66:6e:7a:ad:8c:7e:5a:d6:dc:9a:a4:71:44:27:7d:92:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:27 2024 GMT
            Not After : Mar  4 17:41:27 2025 GMT
        Subject: CN=D605F09264160398112AB6663DB04A92A62A0BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:46:d7:55:dd:32:85:c0:70:d3:54:53:68:
                    46:22:0e:d1:c9:51:b0:cb:d6:80:bf:85:3b:f5:00:
                    aa:3c:19:e2:a1:be:30:2c:aa:3d:3b:5f:6f:44:50:
                    88:24:2e:0f:5f:5d:be:08:72:a3:b2:c9:53:3d:e8:
                    83:e6:86:d9:75:10:30:b0:4b:87:a9:a6:69:2c:9a:
                    87:9f:f5:d1:ff:79:5c:0d:9b:3b:7c:84:24:8d:77:
                    9d:d4:49:c3:97:19:36:86:76:45:f9:d7:73:30:a6:
                    ac:14:b6:79:c5:c4:58:76:55:b1:e0:08:d3:02:ba:
                    c4:fa:32:cd:d8:52:80:99:f9:6e:91:f0:97:27:c2:
                    87:53:5f:e1:f9:c7:a5:60:f3:05:45:c6:d2:b7:7c:
                    55:07:95:6e:60:5f:f6:54:bd:6c:6f:72:aa:f7:6a:
                    b7:b5:e8:66:09:28:9e:44:c0:1a:b3:e5:1e:aa:22:
                    94:57:46:72:32:8d:08:64:2a:12:fb:1d:24:bf:9f:
                    2f:ad:27:b1:ac:7f:f3:0b:48:5e:33:12:42:b4:91:
                    1c:f9:4c:7f:4e:94:cc:d1:76:78:22:b6:e5:17:df:
                    a0:7f:e1:81:58:e6:e7:5a:e1:05:ed:05:fa:fe:41:
                    45:ff:d2:52:82:56:b8:3c:2f:85:0f:68:24:3d:69:
                    09:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:05:F0:92:64:16:03:98:11:2A:B6:66:3D:B0:4A:92:A6:2A:0B:F4
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232382e302f32322d3232203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:59:97:a8:13:2f:bc:22:00:b3:ea:3b:5c:c8:af:42:95:46:
         d7:17:36:08:d1:35:37:22:b8:47:78:d5:4f:35:76:d4:cf:db:
         42:83:b4:98:fc:f9:33:3f:9e:30:47:8a:f0:58:1d:4c:2a:d8:
         22:45:07:da:3d:33:9d:11:12:40:a2:c9:5b:de:20:29:0e:39:
         28:fd:2e:a6:82:b2:7a:1b:fe:c5:88:f4:1a:25:5f:38:ee:83:
         b6:a5:87:75:4f:7e:da:82:57:d1:09:e8:8d:ca:58:3e:32:e9:
         c8:b2:e9:54:fb:9b:b9:4d:64:6f:6d:c2:7d:57:98:b1:8d:6e:
         f2:9e:22:00:b2:a5:bb:b9:6c:5a:5b:7d:60:ee:d3:f4:e3:82:
         93:4b:f8:6b:35:1e:b0:51:c0:5b:1d:fb:82:ee:73:8c:e1:8b:
         f9:78:26:09:ae:ca:f6:79:a0:b0:bf:d5:1c:32:fd:35:6e:d6:
         5a:80:af:50:88:36:c4:74:de:61:b7:0e:cb:c6:ac:06:45:03:
         6f:e3:4f:4a:0b:85:56:49:fa:10:78:94:43:b4:f2:fd:23:b6:
         19:95:63:f8:82:0a:ac:f6:f0:f1:cd:9b:d2:02:90:b2:36:cc:
         73:f4:dd:65:e6:a1:ab:df:91:4b:a2:32:82:e2:11:c3:79:e1:
         ef:2c:a2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:16 2024 by rpki-client on console-ams.rpki-client.org