Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3234322e302f32342d3234203d3e203532333437.roa
File:                     3138362e3137372e3234322e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          82F3q/LPm9kQb2AWvMgSPdeNrZVD05cvcqmArbtAZ9c=
Subject key identifier:   EB:43:40:95:0A:27:A1:37:BC:40:4A:09:F9:4F:E2:D7:E8:9E:9A:37
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       4BD3C6DCD64359D9536CD1874FCAF42422D2DC57
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3234322e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 05 Mar 2024 17:41:26 +0000
ROA not before:           Tue 05 Mar 2024 17:36:26 +0000
ROA not after:            Tue 04 Mar 2025 17:41:26 +0000
asID:                     52347
IP address blocks:        186.177.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d3:c6:dc:d6:43:59:d9:53:6c:d1:87:4f:ca:f4:24:22:d2:dc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Mar  5 17:36:26 2024 GMT
            Not After : Mar  4 17:41:26 2025 GMT
        Subject: CN=EB4340950A27A137BC404A09F94FE2D7E89E9A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:b6:73:34:0e:47:ef:c1:31:9c:b3:1d:a7:
                    e5:5b:09:d5:97:0d:41:e6:0b:ec:3f:4a:31:ab:3f:
                    9b:92:35:95:bb:79:64:5b:18:2b:03:de:41:76:c9:
                    26:4c:a3:da:ec:83:4b:97:d1:7e:26:72:66:b4:55:
                    69:b3:ca:d8:e7:c6:d2:71:1a:a3:6d:fc:d6:f2:cc:
                    f4:4e:18:58:0a:b8:4c:5a:e6:f9:3d:57:08:d4:6f:
                    61:39:43:89:df:28:e0:75:a5:99:06:98:d4:e3:ad:
                    09:88:91:37:d1:da:55:38:07:38:f7:14:d3:8d:5a:
                    03:b9:98:4c:50:73:de:6b:ba:83:98:29:5f:40:18:
                    cc:60:e8:c1:b3:62:3e:52:60:45:73:65:00:98:2c:
                    6e:23:65:c2:f8:35:d7:5e:9c:90:23:d9:a2:bd:e7:
                    e0:b7:b3:27:8d:1f:f9:c8:47:89:e3:08:b8:a5:f4:
                    58:e8:ef:aa:e0:89:88:14:bc:ac:7c:ce:2e:ec:54:
                    27:75:29:f6:67:d0:69:de:13:b0:ea:4e:5d:3b:70:
                    27:b9:21:35:ec:0d:90:6c:dd:12:5e:14:c7:ae:c3:
                    8b:58:c6:3f:f1:f0:51:30:5b:34:5f:d2:e7:ff:78:
                    9a:c1:e3:45:a4:be:a2:9e:63:38:ae:39:8a:3a:95:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:43:40:95:0A:27:A1:37:BC:40:4A:09:F9:4F:E2:D7:E8:9E:9A:37
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3234322e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d1:f8:96:3d:96:d0:d4:31:a2:6d:2b:7e:40:b7:90:91:45:
         01:b0:42:99:69:73:33:a1:28:19:2a:b9:16:c0:ca:bc:bc:1b:
         19:67:ff:10:f9:e0:aa:2f:29:86:66:6b:0f:d2:8a:6b:9f:95:
         54:5e:b4:5c:d2:33:0a:57:7b:59:e2:6f:63:f8:99:2c:e7:a1:
         1a:27:7c:12:ce:4f:9a:27:6c:0b:93:d2:02:0b:db:7e:e8:6d:
         16:fc:21:36:df:56:61:18:e4:5b:21:32:8c:64:0b:9a:5e:fe:
         ee:2b:3c:52:2b:ae:a6:31:05:02:8c:53:4c:d0:64:d2:58:bf:
         a2:94:fb:f8:de:4a:ea:c5:82:0b:96:51:f3:30:b9:5d:46:f7:
         c4:76:62:31:d8:c6:ea:d8:b5:04:64:b7:b5:34:6c:fe:67:38:
         07:cc:38:c4:41:35:ab:a1:1f:1b:24:af:f2:31:db:19:bf:c6:
         b1:86:70:5d:1b:9c:86:be:cf:c8:eb:ac:20:4e:88:d4:c9:ea:
         ed:1a:f3:20:82:5b:5c:21:ae:5a:b1:08:e6:c7:86:58:6b:44:
         ef:43:22:46:6c:ca:99:9e:5c:3b:17:c8:f5:3e:4c:9d:d2:35:
         de:51:b9:e3:7f:0f:ce:2c:32:f6:4d:6c:39:c2:68:53:dd:d3:
         06:3d:72:ac
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUS9PG3NZDWdlTbNGHT8r0JCLS3FcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkU3NUY0MkQyNzExMkZFNUQ4OTU3RkRGMTk0OTUx
MDVGOUFERjAeFw0yNDAzMDUxNzM2MjZaFw0yNTAzMDQxNzQxMjZaMDMxMTAvBgNV
BAMTKEVCNDM0MDk1MEEyN0ExMzdCQzQwNEEwOUY5NEZFMkQ3RTg5RTlBMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqbZzNA5H78ExnLMdp+VbCdWX
DUHmC+w/SjGrP5uSNZW7eWRbGCsD3kF2ySZMo9rsg0uX0X4mcma0VWmzytjnxtJx
GqNt/NbyzPROGFgKuExa5vk9VwjUb2E5Q4nfKOB1pZkGmNTjrQmIkTfR2lU4Bzj3
FNONWgO5mExQc95ruoOYKV9AGMxg6MGzYj5SYEVzZQCYLG4jZcL4NddenJAj2aK9
5+C3syeNH/nIR4njCLil9Fjo76rgiYgUvKx8zi7sVCd1KfZn0GneE7DqTl07cCe5
ITXsDZBs3RJeFMeuw4tYxj/x8FEwWzRf0uf/eJrB40WkvqKeYziuOYo6lUjbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU60NAlQonoTe8QEoJ+U/i1+iemjcwHwYDVR0j
BBgwFoAUkvvnX0LScRL+XYlX/fGUlRBfmt8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQjE5MzQzRkU0Nzk5N0Q4MzBDNjFDREU1NENFODEzODlF
MkZERjMzRURENjI0Nzk5OEQ1Q0E2RUQxREZDNTMwLzAvOTJGQkU3NUY0MkQyNzEx
MkZFNUQ4OTU3RkRGMTk0OTUxMDVGOUFERi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCRTc1RjQyRDI3MTEyRkU1
RDg5NTdGREYxOTQ5NTEwNUY5QURGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkIxOTM0M0ZFNDc5OTdEODMwQzYxQ0RFNTRDRTgxMzg5RTJGREYzM0VE
RDYyNDc5OThENUNBNkVEMURGQzUzMC8wLzMxMzgzNjJlMzEzNzM3MmUzMjM0MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzNDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAurHy
MA0GCSqGSIb3DQEBCwUAA4IBAQCS0fiWPZbQ1DGibSt+QLeQkUUBsEKZaXMzoSgZ
KrkWwMq8vBsZZ/8Q+eCqLymGZmsP0oprn5VUXrRc0jMKV3tZ4m9j+Jks56EaJ3wS
zk+aJ2wLk9ICC9t+6G0W/CE231ZhGORbITKMZAuaXv7uKzxSK66mMQUCjFNM0GTS
WL+ilPv43krqxYILllHzMLldRvfEdmIx2Mbq2LUEZLe1NGz+ZzgHzDjEQTWroR8b
JK/yMdsZv8axhnBdG5yGvs/I66wgTojUyertGvMggltcIa5asQjmx4ZYa0TvQyJG
bMqZnlw7F8j1Pkyd0jXeUbnjfw/OLDL2TWw5wmhT3dMGPXKs
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org