Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e302e302f31372d3137203d3e203238313134.roa
File:                     3138362e3138332e302e302f31372d3137203d3e203238313134.roa (raw, json)
Hash identifier:          CwMBUWuadYL1CBKVQy6g1L8AwWj/pvNN5EG0p6ifghI=
Subject key identifier:   B9:AA:4B:C3:AE:5C:74:6F:27:5B:12:8A:B3:BE:55:2E:6B:35:99:26
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       790E4FA909D2E497260A3CFBCCCCEA79B832F575
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e302e302f31372d3137203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:18 +0000
ROA not before:           Tue 05 Mar 2024 17:53:18 +0000
ROA not after:            Tue 04 Mar 2025 17:58:18 +0000
asID:                     28114
IP address blocks:        186.183.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0e:4f:a9:09:d2:e4:97:26:0a:3c:fb:cc:cc:ea:79:b8:32:f5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:18 2024 GMT
            Not After : Mar  4 17:58:18 2025 GMT
        Subject: CN=B9AA4BC3AE5C746F275B128AB3BE552E6B359926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:b2:61:2c:df:d7:3d:08:53:96:8b:bd:7c:
                    e3:9d:90:ea:14:76:d2:e0:96:51:25:f8:71:11:73:
                    a5:b9:81:65:68:42:f3:a2:e4:c0:c4:c8:b3:8d:a1:
                    b2:10:01:ea:59:43:fe:a8:93:fe:5b:d3:b3:9f:63:
                    ca:5a:95:fa:e2:41:33:73:3b:4d:0a:ec:6c:5e:ed:
                    29:e6:6e:66:73:40:9f:c2:21:60:ef:87:ef:14:db:
                    c2:bc:fa:3c:e5:80:97:7d:63:75:7f:e2:8c:9f:06:
                    3b:14:43:68:95:ad:60:4f:97:53:1c:af:eb:88:e6:
                    46:2b:a7:82:16:5d:4e:a5:dc:e7:78:0e:4c:bc:3f:
                    ae:f3:6d:e7:2e:4b:f6:27:3d:bd:38:a9:0b:f7:3f:
                    21:0a:5b:2d:41:be:ee:cc:7a:b9:d3:0a:c3:92:49:
                    71:dd:34:83:a7:f2:36:97:df:9b:7a:6a:be:18:e0:
                    6a:91:3d:89:f3:cf:23:74:b6:b4:95:ef:76:ca:4d:
                    c2:d0:b6:c5:88:17:9a:78:eb:3d:98:cc:a3:9d:bd:
                    07:ee:58:65:ff:9c:74:0c:cb:da:c5:e9:d4:21:a8:
                    50:92:88:98:1b:9d:0e:9c:59:a1:ac:ab:39:27:30:
                    c7:47:3c:25:0e:7d:2f:60:ab:9e:31:a3:3c:d0:72:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AA:4B:C3:AE:5C:74:6F:27:5B:12:8A:B3:BE:55:2E:6B:35:99:26
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e302e302f31372d3137203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9e:64:97:d6:c9:1a:30:5b:f5:f3:b1:cc:e8:22:d6:e8:10:5f:
         80:18:1e:85:82:f4:65:29:b9:aa:d0:9f:ba:b8:ea:3d:9b:77:
         ff:66:3f:f2:07:9e:8f:49:58:54:38:a8:99:e8:40:0a:98:7f:
         4b:47:9c:9c:26:65:99:83:34:bc:6b:02:4e:5d:72:cc:c5:3a:
         c7:48:75:ef:7c:fa:67:dd:94:d9:fd:01:5c:e6:b6:4f:c6:dd:
         34:a5:31:3c:ac:27:7b:69:6d:09:cd:7f:61:a3:da:ee:45:bc:
         ff:01:ed:73:78:07:5d:00:d6:e1:56:6d:4d:9d:71:55:aa:18:
         57:a6:77:26:12:8a:e2:0d:ba:d1:d4:9d:8c:9f:e8:02:4b:4e:
         b5:38:e1:24:86:14:a1:b4:a0:da:38:6c:94:ab:e4:84:24:4d:
         61:25:80:53:09:37:b1:8b:c5:a4:34:3c:b5:4a:6c:f4:af:18:
         78:21:cd:6e:ff:27:88:df:9f:60:d6:d3:e9:0a:c7:46:bd:7c:
         8d:75:a9:7f:42:d8:89:e2:79:de:95:1a:7d:0b:82:22:48:b2:
         f0:e2:92:cb:00:c2:02:e9:79:7f:4e:8c:a5:b9:a2:c2:56:2a:
         32:e6:01:85:63:33:5b:03:2c:a2:70:69:99:7e:18:ca:04:a7:
         ee:ef:48:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org