Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3234302e302f32342d3234203d3e203532333437.roa
File:                     3138362e3137372e3234302e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          nXbJ5jCZ2+ANK9xqRKkpGHFKg3VhEg8UNk1UTYnYrUg=
Subject key identifier:   6B:AF:DF:90:0C:6A:33:EC:98:0D:06:E2:65:7C:E4:BD:26:66:3F:76
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       6C5C89B3E68A6C8380D3ED802E9E314B511004D3
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3234302e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:28 +0000
ROA not before:           Tue 05 Mar 2024 17:36:28 +0000
ROA not after:            Tue 04 Mar 2025 17:41:28 +0000
asID:                     52347
IP address blocks:        186.177.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5c:89:b3:e6:8a:6c:83:80:d3:ed:80:2e:9e:31:4b:51:10:04:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:28 2024 GMT
            Not After : Mar  4 17:41:28 2025 GMT
        Subject: CN=6BAFDF900C6A33EC980D06E2657CE4BD26663F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:c6:f5:c0:55:9f:76:ae:a3:7d:43:2f:bf:
                    05:76:0b:50:c3:e2:6c:3e:f4:b3:6f:11:b3:fb:5a:
                    33:1b:2d:9a:ae:0a:45:8c:7a:d1:ea:11:af:11:69:
                    10:63:0a:95:98:d3:28:a0:e1:24:45:a1:7b:c7:5e:
                    34:33:fd:05:42:c2:66:cb:9f:8b:d4:f2:a4:fd:7a:
                    ad:8e:b8:f5:b6:6e:ac:50:5d:d3:87:ba:2a:c3:fc:
                    11:00:c1:8a:dc:94:1a:65:92:ec:ad:0e:4f:7f:86:
                    f3:11:32:ff:b6:80:e8:aa:79:ed:f4:ae:fd:36:9f:
                    47:2d:62:55:9c:a7:62:6a:0a:34:c1:1f:a3:37:1f:
                    81:21:61:8c:72:a4:20:f6:ee:9e:c1:67:5d:70:77:
                    7c:62:af:a7:1e:7c:8c:53:91:19:36:4c:96:c0:89:
                    f6:88:e0:3f:32:0e:fe:8c:9d:e1:bc:ee:ca:cf:b6:
                    5d:5d:8f:69:b3:fc:68:c9:0a:8f:52:f4:e1:a7:54:
                    36:6d:75:18:09:af:b0:2f:6a:c3:ee:b4:77:ca:69:
                    0a:4c:92:ab:f3:71:8c:a5:8a:36:6e:ce:61:3b:ef:
                    3c:10:e9:fd:92:46:70:e4:35:b8:e8:2f:2b:0a:15:
                    2e:3d:e6:c9:59:0d:60:7f:81:09:83:82:af:a2:4c:
                    8e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AF:DF:90:0C:6A:33:EC:98:0D:06:E2:65:7C:E4:BD:26:66:3F:76
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3234302e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ce:f1:41:8e:4c:9d:48:e2:63:c6:32:67:d7:89:01:4c:7e:
         b8:08:21:6e:04:63:11:31:c5:e1:dd:c1:c8:37:ab:40:34:c4:
         2c:e9:7c:19:de:15:06:f7:79:eb:97:f9:d0:e9:c5:3b:d2:2d:
         fe:da:92:ed:5f:5a:65:b7:0d:8a:8f:ca:18:6d:6c:9c:7f:12:
         47:b6:07:ef:0b:bb:b3:50:83:b6:fe:2e:e2:5b:fa:8d:89:d1:
         0d:2a:8e:ad:67:d3:85:29:cc:79:c8:51:ee:43:f7:d5:ee:8c:
         91:61:22:90:3e:7b:b4:9d:3d:e1:08:36:26:b2:e8:62:2e:0c:
         ea:18:b2:29:fe:ad:0f:c6:94:47:50:05:1c:94:27:90:b4:9b:
         70:df:d8:d7:4e:22:f4:0d:d6:b6:23:95:7b:b4:bf:f9:c5:fb:
         47:af:ad:96:7e:7a:7e:44:75:21:3d:b3:c5:dc:d7:6d:24:fa:
         52:54:2a:4f:b8:c9:b7:79:24:e2:b8:d4:d7:6d:e1:c2:53:f7:
         4f:ec:57:37:94:c4:2d:a0:9f:be:69:06:d2:8d:b3:15:41:19:
         2b:0d:e5:cd:57:86:26:6c:08:d2:31:f9:c3:6c:3a:9e:1d:73:
         24:9e:19:0a:7e:02:d4:d1:bd:db:98:ff:35:d6:3a:2e:68:0d:
         42:f4:25:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org