Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e36342e302f31392d3234203d3e203238313134.roa
File:                     3138362e3138332e36342e302f31392d3234203d3e203238313134.roa (raw, json)
Hash identifier:          4CA10gu7+3Vuba31sVGjcIcjJEDzc2k6kyP1IsvfDmI=
Subject key identifier:   9B:AD:D2:3F:2C:39:EC:9C:17:BC:53:0F:DE:6A:7E:5C:15:F0:E8:27
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       10AB9B8E75BE125DF4B56BF83FFCD4E138FD376F
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e36342e302f31392d3234203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:17 +0000
ROA not before:           Tue 05 Mar 2024 17:53:17 +0000
ROA not after:            Tue 04 Mar 2025 17:58:17 +0000
asID:                     28114
IP address blocks:        186.183.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ab:9b:8e:75:be:12:5d:f4:b5:6b:f8:3f:fc:d4:e1:38:fd:37:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:17 2024 GMT
            Not After : Mar  4 17:58:17 2025 GMT
        Subject: CN=9BADD23F2C39EC9C17BC530FDE6A7E5C15F0E827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:c6:b4:a1:3f:d3:52:1a:db:f6:d7:9c:21:
                    83:a7:87:55:38:c5:a8:54:5f:58:52:1c:df:2a:a5:
                    7f:67:94:8c:31:24:ee:3a:65:ee:3f:5d:b3:c3:81:
                    7f:7e:b4:ea:ca:06:a6:5c:a3:50:8b:ed:34:54:aa:
                    e6:dc:95:24:2b:6e:96:dd:26:31:8a:b8:58:1a:76:
                    04:59:09:6d:9c:a5:c3:8f:34:e1:6c:2a:a2:cb:1c:
                    53:29:ca:78:3b:8d:c7:51:ad:fc:30:5d:12:0d:70:
                    fc:1a:4f:e9:73:f4:f1:9e:bb:29:67:0a:1e:6a:ca:
                    26:fb:c3:4e:23:57:97:81:3a:37:3c:8e:18:98:b7:
                    3f:5c:4f:e9:c9:38:7e:a8:a2:36:93:7e:07:65:fb:
                    d3:b0:b1:6a:15:92:71:31:7b:15:7b:54:ed:86:f4:
                    e3:f4:74:ec:27:77:07:06:b0:27:27:42:eb:0c:07:
                    94:e0:6d:b4:ca:aa:9c:82:62:21:37:d8:b8:c8:19:
                    d7:a8:cd:3d:19:8b:b1:a2:84:fe:92:0d:de:27:64:
                    c1:c6:c5:c9:37:73:64:13:ac:50:7e:18:84:81:bf:
                    27:42:bd:6a:76:3e:0e:6a:89:93:15:45:d4:20:e4:
                    04:cb:ea:5c:8c:25:ab:af:7b:86:8c:80:c6:5d:41:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AD:D2:3F:2C:39:EC:9C:17:BC:53:0F:DE:6A:7E:5C:15:F0:E8:27
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e36342e302f31392d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:10:1c:37:85:33:9c:49:97:c6:1e:2e:3e:d3:a1:da:81:db:
         3d:a0:c3:92:80:a4:0d:7d:d2:e8:1e:31:e8:dc:16:43:80:cc:
         ee:5c:61:9d:04:50:76:fb:d5:68:2f:6b:1d:e5:d5:f3:92:43:
         19:09:7e:6c:7d:1e:86:67:36:36:cb:d9:03:6e:f9:a2:51:0c:
         64:9d:1b:57:eb:62:42:81:58:d7:5c:3f:e5:68:6d:bc:1f:8e:
         df:4b:b6:6c:19:04:38:ac:dd:3c:49:05:bf:9f:6d:9d:2b:9f:
         d0:66:1b:cd:0d:b3:a9:ac:8b:e2:05:7f:96:6d:d9:d9:6f:5e:
         43:9c:ed:23:8e:6d:4b:82:7e:9b:9e:aa:a1:ab:dd:35:62:c2:
         6a:f0:41:1f:a6:a9:40:79:ce:56:ce:f1:eb:b4:44:1c:60:6a:
         f2:97:9d:af:9b:dc:17:ab:b3:a2:4c:3d:a5:78:27:a5:ff:29:
         ac:9a:93:03:f6:37:c1:62:51:71:0d:ee:d6:7a:08:16:d8:ed:
         63:99:cd:96:a5:da:63:d3:88:bc:a2:32:d4:b1:0e:a8:d8:ff:
         3f:cd:94:ca:bc:86:77:c3:f9:7b:12:3c:10:af:ab:83:a5:bb:
         3d:6c:04:75:89:db:88:21:b5:82:fd:de:5d:9b:5f:93:70:43:
         e0:d3:c2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org