Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa
File:                     3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa (raw, json)
Hash identifier:          9ciAY6R7DZn2wUzVcHmfiSoz/UuR8qBu3wyYxjXNYtc=
Subject key identifier:   16:17:A4:C4:D7:D9:B3:41:FA:89:B1:E8:5B:C5:8B:70:80:7E:84:D4
Certificate issuer:       /CN=CF2E2C753A200707CD61AACD7110A7372C505538
Certificate serial:       4F15C25E4796118B7090A4B8B3E5CAE0C064ED84
Authority key identifier: CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa
Signing time:             Fri 12 Apr 2024 15:00:00 +0000
ROA not before:           Fri 12 Apr 2024 14:55:00 +0000
ROA not after:            Fri 11 Apr 2025 15:00:00 +0000
asID:                     263726
IP address blocks:        186.189.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl
                          rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:15:c2:5e:47:96:11:8b:70:90:a4:b8:b3:e5:ca:e0:c0:64:ed:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF2E2C753A200707CD61AACD7110A7372C505538
        Validity
            Not Before: Apr 12 14:55:00 2024 GMT
            Not After : Apr 11 15:00:00 2025 GMT
        Subject: CN=1617A4C4D7D9B341FA89B1E85BC58B70807E84D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:02:7b:18:f3:9d:18:77:8c:c4:4f:51:6b:
                    4c:aa:9c:45:15:6c:36:cf:b4:c5:98:9a:f3:f2:f0:
                    4c:80:60:da:26:16:35:38:37:c9:00:33:34:23:d7:
                    39:86:af:a6:26:ec:91:2a:cc:fd:86:c9:07:e8:d3:
                    4d:e2:a5:5c:c0:8e:03:79:21:f1:9c:6c:7c:b7:55:
                    68:ae:46:94:00:b3:0f:07:bf:1f:ba:73:33:8b:1d:
                    93:24:d0:eb:52:3e:5b:7e:96:85:73:ed:35:cc:c3:
                    66:a8:fc:1d:67:fc:c3:82:58:df:0a:c9:f4:1d:c3:
                    ac:9f:71:53:cc:75:71:de:d2:96:d9:c5:b7:de:b6:
                    62:6c:e2:e6:20:06:a8:41:d5:fd:72:fe:73:55:6f:
                    17:ff:c1:11:8c:91:00:2b:c5:70:ff:35:66:f5:3f:
                    22:9f:3f:08:ea:60:32:15:1d:aa:99:81:38:bf:b5:
                    5c:59:ef:8c:79:33:32:a9:27:42:55:f5:72:2a:7e:
                    72:69:e1:ec:cf:26:3b:f6:03:a2:6f:17:3b:4f:d8:
                    a6:ae:9e:96:c2:01:06:35:8b:0f:e7:21:b9:fb:5e:
                    c2:39:b8:5d:e2:64:40:68:c4:af:c4:17:3f:95:1c:
                    bc:d0:98:1c:96:dd:2d:6b:26:da:1c:3b:87:78:7c:
                    bf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:17:A4:C4:D7:D9:B3:41:FA:89:B1:E8:5B:C5:8B:70:80:7E:84:D4
            X509v3 Authority Key Identifier:
                keyid:CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234342e302f32342d3234203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b2:93:c7:e6:23:4a:7c:05:ee:47:cd:51:0c:b7:18:5c:41:
         7b:e5:95:4d:66:84:cc:f2:d8:70:ab:59:8d:7a:5b:f7:df:cc:
         7c:13:6b:ea:ed:42:84:c8:1d:e1:62:ef:3e:e3:37:44:54:08:
         ac:dd:b3:65:ec:10:bf:09:ad:5d:a4:00:2c:b4:98:fa:b9:94:
         f5:8a:f0:47:2b:64:46:2b:35:6d:55:cb:d6:ae:c3:c4:e5:ac:
         04:31:c6:cd:f6:dc:7f:cc:8e:14:e3:a4:e9:88:0f:94:5f:4b:
         cb:e4:c3:c0:a9:92:0b:c6:dc:a1:af:1a:4d:78:f1:a8:1f:92:
         c5:20:f0:68:a3:ab:79:62:f5:37:ee:c6:5d:ec:d8:78:02:a9:
         88:59:7c:68:58:b0:cb:10:e7:fd:c3:b0:f0:fa:2b:ef:e0:78:
         22:91:2a:60:db:44:ae:ec:32:57:83:1a:88:05:c0:dd:c2:a5:
         cf:5f:5a:f1:27:5c:ef:1b:d9:0d:ea:06:b6:fe:f1:17:a2:7d:
         a4:2a:98:49:da:90:b0:08:67:8c:f9:78:23:df:0e:8c:e2:3c:
         89:09:e6:ad:cd:15:70:d1:ff:0e:19:77:8b:5c:34:f2:b7:8a:
         1a:4e:e0:c6:19:5d:94:00:54:e2:c2:53:6e:03:50:5f:d5:20:
         a2:e7:5f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:51:19 2024 by rpki-client on console-fra.rpki-client.org