Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3231203d3e203238313134.roa
File:                     3138362e3138332e3132302e302f32312d3231203d3e203238313134.roa (raw, json)
Hash identifier:          z8qM1lteOfeVYgHl68HtsAaHhvB9KIMErrlrMMZLCiA=
Subject key identifier:   78:7A:F7:30:D8:05:2C:C9:0E:50:73:93:BB:0A:24:FE:B6:89:3C:C9
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       36459D3DA5B94436B449E33B1735DC5292BBA224
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3231203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:13 +0000
ROA not before:           Tue 05 Mar 2024 17:53:13 +0000
ROA not after:            Tue 04 Mar 2025 17:58:13 +0000
asID:                     28114
IP address blocks:        186.183.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:45:9d:3d:a5:b9:44:36:b4:49:e3:3b:17:35:dc:52:92:bb:a2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:13 2024 GMT
            Not After : Mar  4 17:58:13 2025 GMT
        Subject: CN=787AF730D8052CC90E507393BB0A24FEB6893CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:20:13:19:ee:60:fb:a1:56:cb:e6:f8:0b:
                    85:51:23:e4:af:a0:fe:d6:79:b0:54:de:91:12:5d:
                    28:92:dd:e6:6a:14:60:82:be:8d:64:02:f3:f7:89:
                    72:d5:8f:ce:8d:61:6b:2d:4b:37:8c:67:ae:2e:ba:
                    41:ba:5a:8a:99:db:0e:86:c0:e1:9d:59:36:e9:1b:
                    5b:8e:c4:2c:b1:92:d5:11:8a:59:64:16:09:90:80:
                    42:12:ed:d1:d9:9b:77:89:5d:fb:8a:77:b6:fd:ca:
                    be:4a:f0:bb:e1:6f:60:d3:d9:07:d9:48:88:2e:78:
                    48:c4:89:9f:ca:c8:5c:b5:77:28:43:2d:3b:dc:f6:
                    24:b4:7c:db:d2:5e:3f:0b:81:03:6c:e2:a8:0b:93:
                    fa:3a:44:26:51:10:74:fb:3d:7a:96:ff:9a:03:b2:
                    a1:ea:4a:86:15:24:10:94:e3:9c:5f:43:09:e1:39:
                    3f:df:11:70:a3:5b:24:80:f8:c3:4b:9c:97:54:bf:
                    b1:89:ed:a6:33:1a:fc:61:ca:a9:f9:11:2a:39:d2:
                    45:bb:de:0b:e6:03:aa:80:6f:0a:82:68:d5:ca:41:
                    cc:8c:00:34:84:de:00:2f:d1:ca:74:09:0f:3a:4f:
                    13:bd:78:af:f6:74:19:1f:ed:4b:df:b6:a4:bb:5c:
                    6e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7A:F7:30:D8:05:2C:C9:0E:50:73:93:BB:0A:24:FE:B6:89:3C:C9
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3231203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:2f:34:3c:b2:a3:26:6d:94:36:3c:c1:52:e6:36:92:db:1a:
         d5:39:53:06:b5:93:6d:7f:0d:23:29:9f:1c:8b:f4:d5:a4:06:
         35:50:7b:eb:2f:7e:ba:61:37:f5:f6:7f:44:65:d0:f4:58:6d:
         59:92:fd:e0:ce:5c:58:7c:2a:42:b1:31:11:f2:a5:e4:76:ae:
         21:71:80:16:f8:45:d8:91:f6:50:ea:17:c0:1c:14:a6:3f:f5:
         5a:8b:ef:af:03:a1:cf:89:3f:85:69:73:93:6a:5e:c0:4c:3d:
         05:16:43:ad:77:e9:74:23:7f:1c:f8:41:30:33:89:88:11:2a:
         17:c9:37:d5:9e:85:96:97:b0:a4:49:2d:a0:72:00:2c:34:7b:
         d0:67:df:bd:af:65:16:99:70:83:16:a0:7d:f1:d1:1a:2b:1a:
         9d:95:a6:81:88:1e:94:07:f2:f3:f2:d6:a9:db:f9:51:a9:4b:
         17:78:88:3f:4d:44:9e:c1:cd:8c:bf:42:f1:22:ed:08:06:32:
         30:e9:72:08:b8:67:10:6f:09:32:27:0c:cb:ff:74:9e:8a:ce:
         07:77:39:02:2b:7a:2d:5a:94:b6:64:d1:9f:d5:d1:ee:33:05:
         08:49:b5:89:e6:71:12:60:31:1a:86:4b:4a:13:e3:55:ad:67:
         66:13:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org