Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e3139302e3136302e302f32302d3234203d3e203237393533.roa
File:                     3138362e3139302e3136302e302f32302d3234203d3e203237393533.roa (raw, json)
Hash identifier:          DhShdhWHncn3JV7m/35YMs5UqRwp/waFhjU+9sMQySo=
Subject key identifier:   2D:4D:F3:AE:D0:C2:13:76:B2:15:32:68:39:F7:C8:2A:C4:0B:B6:F4
Certificate issuer:       /CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
Certificate serial:       2A38D209281E5C0E89E8B92BEBA6D9A0D49134E7
Authority key identifier: D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e3139302e3136302e302f32302d3234203d3e203237393533.roa
Signing time:             Tue 05 Mar 2024 18:07:53 +0000
ROA not before:           Tue 05 Mar 2024 18:02:53 +0000
ROA not after:            Tue 04 Mar 2025 18:07:53 +0000
asID:                     27953
IP address blocks:        186.190.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:38:d2:09:28:1e:5c:0e:89:e8:b9:2b:eb:a6:d9:a0:d4:91:34:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
        Validity
            Not Before: Mar  5 18:02:53 2024 GMT
            Not After : Mar  4 18:07:53 2025 GMT
        Subject: CN=2D4DF3AED0C21376B215326839F7C82AC40BB6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:4a:44:f2:86:43:ee:cb:34:67:0f:f7:5a:
                    a7:e0:82:9f:f4:9c:8d:1f:d7:ef:f4:40:72:03:0a:
                    c3:2a:1e:1e:2c:e5:a3:6a:02:fb:5f:39:e8:0f:93:
                    5f:96:c6:80:2b:74:cc:9d:08:a8:68:48:60:20:12:
                    97:71:58:81:09:25:55:c3:66:33:3a:14:4d:6f:bf:
                    dc:17:03:4a:30:a1:8f:19:0d:43:10:f3:7f:37:ce:
                    39:58:88:a2:bc:46:03:5b:57:19:ce:a6:c7:e0:c4:
                    40:9e:01:85:51:35:84:8b:11:2b:89:72:c7:7b:52:
                    5a:b4:bd:06:26:5f:50:a2:ca:e4:a9:da:36:59:94:
                    92:e9:18:20:50:18:12:04:3b:61:a8:55:4e:24:88:
                    b7:d5:56:5c:44:1c:e6:c2:35:a2:03:0f:cf:af:e1:
                    65:79:2f:09:c7:0e:e2:14:5d:51:04:a5:25:f0:dc:
                    78:9a:5a:b2:41:4a:03:14:4e:c3:57:9e:a6:6f:41:
                    31:9c:1a:d4:72:f7:0f:f8:ef:67:ff:d4:b4:87:68:
                    d3:22:69:f3:5e:2c:49:84:69:8a:71:f1:c4:3c:0b:
                    74:a1:12:9e:b5:3c:ac:49:26:43:e1:96:95:0a:26:
                    ff:bb:91:91:d2:c6:3f:d2:08:54:83:a9:45:cd:7b:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4D:F3:AE:D0:C2:13:76:B2:15:32:68:39:F7:C8:2A:C4:0B:B6:F4
            X509v3 Authority Key Identifier:
                keyid:D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e3139302e3136302e302f32302d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:76:de:c4:8d:67:b7:e2:30:62:e6:b1:43:b1:4a:ad:96:
         23:b0:20:78:7a:c9:b5:06:c4:a3:af:36:d7:0a:13:f4:a1:f4:
         31:b3:0e:cb:82:6e:50:2b:00:5e:6c:3a:f0:91:d2:f6:74:12:
         b8:e4:e4:12:a8:c1:f1:32:e2:20:a7:4e:5b:58:88:ea:ce:fb:
         37:ce:09:8f:7f:d8:77:5e:81:c1:75:8f:fd:9e:ff:52:5e:15:
         26:f5:f0:2c:61:04:c9:85:b7:1d:51:af:58:69:1f:0a:f6:e0:
         c3:3c:ec:6b:8a:0e:96:7a:9c:ad:d4:66:96:81:23:e0:53:60:
         38:34:98:f5:bb:4a:ee:e8:1d:40:48:eb:33:a8:bb:d9:f3:3a:
         0c:8c:0c:41:3a:3e:ed:30:e2:04:92:21:fe:d6:9d:bf:11:8a:
         27:25:88:40:e3:1f:f2:b9:7f:2d:e4:76:7a:23:28:d8:19:1c:
         43:fb:0a:65:bc:d1:62:16:ee:23:7c:12:db:f4:6b:e2:a8:16:
         3a:e4:75:e9:77:52:58:0f:2e:58:7e:e9:cd:2b:23:69:d1:fb:
         5a:df:5e:57:a4:43:c9:73:51:e0:f7:f8:ef:4e:aa:87:21:5b:
         ae:ee:b7:35:5d:0b:22:13:7f:f6:78:c5:78:f5:02:3f:63:00:
         f4:1d:4a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org