Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e302e3132382e302f32312d3234203d3e203237393533.roa
File:                     3138362e302e3132382e302f32312d3234203d3e203237393533.roa (raw, json)
Hash identifier:          4tLSiRVs2UwH6UNB6Ad053gPYeMWt0/zTy0v069k1hs=
Subject key identifier:   5E:D2:5B:0C:09:E8:40:CA:BA:52:2B:9C:49:36:B4:DD:10:BA:39:89
Certificate issuer:       /CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
Certificate serial:       6444B79F275499A7424D27ABF158D48EA032E105
Authority key identifier: D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e302e3132382e302f32312d3234203d3e203237393533.roa
Signing time:             Tue 05 Mar 2024 18:07:52 +0000
ROA not before:           Tue 05 Mar 2024 18:02:52 +0000
ROA not after:            Tue 04 Mar 2025 18:07:52 +0000
asID:                     27953
IP address blocks:        186.0.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:44:b7:9f:27:54:99:a7:42:4d:27:ab:f1:58:d4:8e:a0:32:e1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
        Validity
            Not Before: Mar  5 18:02:52 2024 GMT
            Not After : Mar  4 18:07:52 2025 GMT
        Subject: CN=5ED25B0C09E840CABA522B9C4936B4DD10BA3989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:1f:51:4e:6d:37:0e:81:02:e2:69:a4:0b:
                    f7:96:7a:5b:34:98:40:a0:be:35:a4:35:dc:89:2c:
                    02:19:da:bb:3e:c7:60:83:b8:14:36:71:90:51:bc:
                    71:f9:da:38:05:94:fb:4c:e8:ad:f1:d2:c0:b4:76:
                    90:c0:bf:ad:8f:a0:02:54:da:8a:d6:13:ba:7d:ce:
                    ea:60:cf:84:93:06:db:84:29:13:cb:9f:e6:77:24:
                    c3:ad:aa:77:ac:55:22:5c:45:eb:39:51:25:d0:a2:
                    85:13:74:2e:f5:e9:d5:b4:1e:d9:fa:f0:f3:c5:1c:
                    10:3e:d6:0d:33:a8:e2:7e:72:dd:2b:59:98:cb:ba:
                    56:27:02:30:47:b0:8c:5f:60:cf:85:87:52:98:aa:
                    2c:fd:75:eb:19:a4:62:39:02:91:58:ff:85:f7:4f:
                    25:ab:5c:95:7d:61:8a:a2:bf:e3:e7:e5:2b:ff:e3:
                    58:b7:8c:e8:d7:af:0b:c4:a8:20:6e:13:96:ca:35:
                    39:8c:73:1c:1b:fe:7b:46:03:72:77:9a:75:ae:4b:
                    fd:47:1f:8d:a5:40:71:81:0b:22:ea:0d:38:98:80:
                    69:62:b0:9b:59:e0:6f:8d:16:f4:03:b4:bc:b1:e8:
                    10:bc:db:5b:80:00:b3:23:44:1b:50:ae:6b:23:a0:
                    d3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D2:5B:0C:09:E8:40:CA:BA:52:2B:9C:49:36:B4:DD:10:BA:39:89
            X509v3 Authority Key Identifier:
                keyid:D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e302e3132382e302f32312d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:d3:29:53:0e:f6:ab:bf:60:07:37:92:9d:46:62:fa:95:2e:
         4b:79:99:a7:e5:6f:45:71:48:e2:21:ab:11:a4:4f:66:b9:1d:
         a6:e2:05:d5:b8:91:a9:cd:46:cc:a7:75:42:ce:3a:52:e6:8e:
         07:3b:97:37:2c:9f:95:68:de:82:d1:21:fa:84:45:cd:c7:a1:
         f7:7f:19:6f:1b:02:1a:40:26:96:a7:7a:6e:11:bf:40:ac:ff:
         6f:5c:9a:05:b6:38:a3:ac:60:64:9c:ff:83:4c:f6:cb:cc:e8:
         37:d3:fd:bb:59:0e:2c:2c:de:36:5b:43:e1:83:e7:80:49:e5:
         58:5a:4c:d8:ce:84:2a:27:c0:26:1e:25:3e:5c:62:75:3a:25:
         08:25:a5:1c:3f:a7:3f:5d:30:0e:0d:f1:88:6c:ee:7b:32:23:
         31:d6:f3:77:63:97:8d:66:f2:b7:06:50:4d:60:d4:b2:9e:2e:
         8c:c6:f1:08:66:95:dc:96:0a:7c:3b:46:ea:77:7f:bb:da:e2:
         e2:51:a7:51:89:ad:8b:64:d3:a0:9b:08:49:42:9d:66:73:51:
         68:3b:e8:89:63:7f:01:1b:a8:b0:b2:00:d9:3c:1d:33:36:95:
         0c:40:33:9c:fd:22:3e:28:e8:29:03:79:b3:bd:35:12:38:b5:
         83:cc:32:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org