Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3234312e302f32342d3234203d3e203532333437.roa
File:                     3138362e3137372e3234312e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          eKGVza3T+NVa4RyV9Vtp/oV9mWdEn6RDNjdKeyuuRUg=
Subject key identifier:   2F:43:CA:60:79:DB:E2:44:E9:C3:37:9D:40:6B:38:89:54:22:45:04
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       36FE6697A5DCB6F34F731AF073E10B376C04E715
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3234312e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:27 +0000
ROA not before:           Tue 05 Mar 2024 17:36:27 +0000
ROA not after:            Tue 04 Mar 2025 17:41:27 +0000
asID:                     52347
IP address blocks:        186.177.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fe:66:97:a5:dc:b6:f3:4f:73:1a:f0:73:e1:0b:37:6c:04:e7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:27 2024 GMT
            Not After : Mar  4 17:41:27 2025 GMT
        Subject: CN=2F43CA6079DBE244E9C3379D406B388954224504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:35:09:8c:10:53:21:53:60:86:6f:f8:26:
                    25:73:34:be:4c:24:8d:d5:2b:57:c5:3e:4f:be:dd:
                    01:76:1b:4e:bf:1b:b7:7f:1e:bf:61:2a:c7:5a:a5:
                    d4:8c:d9:57:75:30:02:b2:20:ea:63:fc:11:20:e4:
                    3b:a3:b8:2b:67:6b:82:25:a7:9b:b7:cc:c5:e9:19:
                    2f:51:b0:26:62:af:61:64:53:86:59:e6:20:41:fc:
                    d8:6b:31:13:a8:b7:e3:f2:de:3a:ca:04:7b:98:95:
                    54:f9:36:7f:e4:d3:12:d6:7d:80:5e:bd:49:1a:e8:
                    38:ff:57:8b:73:f1:d3:46:77:59:c0:ec:b8:88:e0:
                    e5:3c:9e:3d:16:d7:a9:f7:0e:c4:da:70:39:00:e6:
                    b1:52:9b:fd:35:2c:21:ac:0d:9a:48:8c:5f:62:1e:
                    bb:b3:a8:c7:87:14:ac:0d:61:cd:0a:86:9c:c3:1d:
                    e4:5c:72:15:fd:0d:4b:5e:08:44:51:8f:c6:c2:ae:
                    44:56:91:68:ff:bb:ff:91:ce:63:10:a1:09:31:33:
                    28:53:7b:a8:ed:ef:28:0f:48:9a:99:d4:57:2e:c5:
                    6a:eb:4f:24:06:86:d6:f1:6e:66:90:1a:f2:66:67:
                    4f:54:cc:f0:a5:8e:23:ca:8c:2c:b9:70:b8:37:36:
                    6a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:43:CA:60:79:DB:E2:44:E9:C3:37:9D:40:6B:38:89:54:22:45:04
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3234312e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c4:34:f7:ed:ee:dd:40:85:bd:5f:6c:d9:ba:65:cf:79:c0:
         ac:62:cf:78:f4:d2:75:37:2f:fc:35:15:94:23:eb:0b:bb:4a:
         8e:2e:fe:59:f0:2f:59:71:30:c1:81:85:cd:f3:92:b5:00:a2:
         b9:45:cd:40:57:7e:bf:3d:c6:95:d0:ca:b9:85:4e:90:a1:7c:
         fb:c6:2c:83:5b:f2:ab:8c:1a:e0:79:ff:1d:02:55:eb:21:3e:
         25:eb:dc:d9:a4:66:dd:81:c9:23:cb:5c:c9:5c:97:f6:2e:c7:
         8e:d0:86:3e:03:46:31:78:07:3b:fa:c3:e3:47:dc:fa:a8:c4:
         a2:b9:14:4c:d7:9a:78:89:a8:4e:a0:b2:1d:75:83:78:ec:37:
         3f:46:75:54:23:68:50:7d:1e:22:45:fb:ef:54:76:f8:2b:2b:
         18:4a:01:15:9c:a5:06:85:32:66:b0:dc:bc:98:70:28:a0:d4:
         83:5d:c8:f5:c6:bf:84:56:92:07:39:ce:54:98:80:d4:19:15:
         45:f3:90:77:e7:33:7b:41:f7:2b:3f:a6:a5:d3:a8:69:2d:6d:
         e1:19:29:f6:59:5e:7c:94:bf:90:21:e0:a7:0f:a3:2e:b4:58:
         df:42:ed:34:dd:f7:8d:8c:79:51:5c:80:d6:fc:9a:02:7a:7a:
         87:18:e6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org