Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3138362e3139302e3234302e302f32302d3234203d3e203236353035.roa
File:                     3138362e3139302e3234302e302f32302d3234203d3e203236353035.roa (raw, json)
Hash identifier:          HNq5I37LjYzI5Pl3IlbbeQP00p+RSWidJusX0DtdKEg=
Subject key identifier:   C7:9D:73:C6:BA:BF:23:7A:BC:49:80:16:2F:7E:0B:4B:1F:17:48:CD
Certificate issuer:       /CN=E05464F45EEB0ED0894BBD64663203701E769A12
Certificate serial:       013EA142A282B936AD13E2E43A3E684EFECFCB0B
Authority key identifier: E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3138362e3139302e3234302e302f32302d3234203d3e203236353035.roa
Signing time:             Tue 05 Mar 2024 18:17:02 +0000
ROA not before:           Tue 05 Mar 2024 18:12:02 +0000
ROA not after:            Tue 04 Mar 2025 18:17:02 +0000
asID:                     26505
IP address blocks:        186.190.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3e:a1:42:a2:82:b9:36:ad:13:e2:e4:3a:3e:68:4e:fe:cf:cb:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E05464F45EEB0ED0894BBD64663203701E769A12
        Validity
            Not Before: Mar  5 18:12:02 2024 GMT
            Not After : Mar  4 18:17:02 2025 GMT
        Subject: CN=C79D73C6BABF237ABC4980162F7E0B4B1F1748CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:97:33:e5:f9:6a:59:d3:a4:d1:9d:ba:97:
                    f2:99:80:c7:a6:20:8c:22:05:e5:2f:7b:e7:1b:17:
                    af:b1:04:de:29:4f:18:1d:2d:bd:5b:b3:c7:d9:a1:
                    84:76:96:0e:83:01:02:a8:64:0f:6d:08:fa:ea:6b:
                    52:03:11:1c:27:44:aa:43:51:5a:04:92:5e:0e:04:
                    08:84:42:17:1a:84:7b:fa:29:76:4a:2b:25:6e:f4:
                    04:ca:9e:f5:4c:49:88:9a:f4:41:25:d3:12:2a:0e:
                    56:67:cd:14:a4:17:96:e5:74:86:89:27:17:93:32:
                    c9:ea:5a:4c:8a:88:3a:82:db:a1:45:28:21:bb:00:
                    47:5a:75:ee:9d:83:db:a2:c7:e7:f5:c2:60:8b:ea:
                    62:1d:a5:9f:a7:ef:06:6f:43:b9:1b:a4:58:aa:16:
                    9d:6f:55:9a:2a:99:b8:1d:98:02:dc:fb:de:b4:d3:
                    8a:bf:ac:b2:f1:9f:df:13:66:0f:9a:24:d2:2c:96:
                    1d:87:c8:9a:99:1d:c1:84:23:62:f3:19:3b:51:0a:
                    18:54:a8:6d:03:86:fd:db:1e:fe:1a:e1:6a:71:87:
                    e9:11:cb:32:84:b8:86:49:35:26:21:3b:b3:8a:cb:
                    b3:dc:bd:e1:48:9b:00:7b:c5:9c:f3:bd:6a:4e:46:
                    6d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9D:73:C6:BA:BF:23:7A:BC:49:80:16:2F:7E:0B:4B:1F:17:48:CD
            X509v3 Authority Key Identifier:
                keyid:E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3138362e3139302e3234302e302f32302d3234203d3e203236353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:04:dc:79:d2:1f:a8:b2:c4:b6:38:23:2b:8f:f3:68:a0:0b:
         a5:54:c0:cf:c5:f6:e2:a8:c7:51:8a:a1:21:e8:31:17:3e:9c:
         51:f4:bd:07:12:c9:fa:a6:5c:aa:a5:43:80:5c:88:dd:c2:af:
         2d:74:1e:6b:b2:3c:2a:e5:f5:7c:af:7f:df:83:0d:aa:c8:13:
         43:b6:2d:27:2f:d4:b7:ff:94:5a:98:86:ca:18:d9:a5:fb:10:
         8e:a8:73:5a:bf:47:bb:25:f7:8b:a1:74:12:5a:d9:8c:a3:fe:
         91:3f:d8:05:0d:49:86:85:ed:6b:84:a8:6d:35:e2:f0:fb:e6:
         f7:f1:c6:1d:58:92:64:df:4b:d6:fe:ec:a0:11:d4:e2:8b:79:
         66:62:f8:f4:ae:a5:d9:db:3c:32:99:e8:34:6d:00:73:d5:d9:
         c8:df:bb:34:94:01:e5:10:bc:2e:79:c9:4f:37:77:79:78:75:
         e8:33:20:31:a8:6d:ad:d3:ca:64:04:5f:92:01:f0:91:c6:13:
         a5:7f:ca:46:fa:ae:c6:8d:e3:66:62:9e:4e:d5:b8:f6:f8:5f:
         98:a2:a6:af:ab:25:46:8a:1d:49:14:ff:82:58:29:35:00:5a:
         2f:11:56:cc:e3:5f:41:a7:02:11:fd:5e:02:c8:5d:d4:0d:12:
         2b:28:98:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org