Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3232302e302f32322d3234203d3e203532323238.roa
File:                     3138362e3135392e3232302e302f32322d3234203d3e203532323238.roa (raw, json)
Hash identifier:          ErJc+KXSTA+0BVmOnBItawIg4HUOTgzR/+HFf822XRw=
Subject key identifier:   93:82:CB:5A:86:04:B2:3E:21:26:E0:BC:7C:CB:EF:20:A0:46:38:71
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       2FF72862245CE253B28D19C757AFB0A1723EC2BB
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3232302e302f32322d3234203d3e203532323238.roa
Signing time:             Tue 05 Mar 2024 17:54:27 +0000
ROA not before:           Tue 05 Mar 2024 17:49:27 +0000
ROA not after:            Tue 04 Mar 2025 17:54:27 +0000
asID:                     52228
IP address blocks:        186.159.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f7:28:62:24:5c:e2:53:b2:8d:19:c7:57:af:b0:a1:72:3e:c2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Mar  5 17:49:27 2024 GMT
            Not After : Mar  4 17:54:27 2025 GMT
        Subject: CN=9382CB5A8604B23E2126E0BC7CCBEF20A0463871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:74:3e:3c:41:28:4f:3f:7d:aa:9a:c0:5c:
                    ca:27:c3:69:dd:20:8e:97:bc:5d:14:4e:bd:3a:b7:
                    6e:12:e6:28:23:44:96:f9:86:3a:0f:a0:41:82:7d:
                    06:7c:d7:62:ef:29:b3:33:7c:d2:38:92:44:48:cb:
                    dd:4f:e9:bb:4f:c0:24:42:b4:16:41:d3:de:98:27:
                    1a:b1:6e:92:ee:b6:f4:52:19:90:f4:44:f4:50:2f:
                    da:82:a9:b5:f5:19:61:dc:b6:b4:f4:c1:3a:bb:2a:
                    a6:13:fb:84:5b:ea:bd:45:6b:14:b2:c4:6e:07:86:
                    40:76:6f:d6:c2:af:89:ba:d7:6c:2a:c6:82:38:fa:
                    47:62:c4:45:01:cf:70:94:60:0f:45:21:1c:35:ba:
                    77:4e:3f:17:da:f2:c8:96:5c:a3:dd:ec:9a:3d:7c:
                    02:39:74:b0:fb:06:77:ef:ae:5f:b6:c4:cc:b3:78:
                    99:8a:ef:4e:af:0c:d9:0e:e5:01:a5:ff:99:e2:a1:
                    03:87:c1:1d:5b:b5:6a:ae:f5:55:21:8d:d0:a3:2f:
                    93:14:a5:74:5d:36:40:db:09:22:53:f5:b4:0d:2d:
                    b2:59:67:a3:8a:7b:04:e8:4e:f9:9d:c1:69:42:08:
                    07:9f:da:05:68:23:3c:0c:ea:28:de:a2:72:6c:4c:
                    d3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:82:CB:5A:86:04:B2:3E:21:26:E0:BC:7C:CB:EF:20:A0:46:38:71
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3232302e302f32322d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:be:65:d5:22:ec:7b:52:36:02:16:4a:06:29:1f:5d:54:8a:
         11:32:35:34:5e:bc:ac:bd:0e:c5:d6:9e:46:59:7a:9b:81:18:
         35:19:bb:fa:41:7c:f8:8d:aa:0e:ec:90:f6:4a:de:e1:ea:71:
         3b:55:87:fe:f0:d5:96:56:af:4d:5c:c4:21:42:d2:2c:b9:24:
         c4:33:bd:e4:6d:7d:01:ce:66:1c:6b:0c:76:5c:5b:7c:9f:dc:
         c5:4a:8b:9c:12:64:ef:2c:4a:27:3d:e3:1e:2b:13:2f:11:1c:
         bd:f1:34:52:28:08:f9:8b:d7:7b:e1:ab:82:fb:cd:bf:03:5a:
         63:46:bd:bc:ab:0d:55:d5:22:0a:69:44:f1:9c:b8:bb:98:06:
         8b:e3:23:3b:18:26:19:b2:da:0a:38:c9:bb:aa:30:a3:cf:01:
         8d:79:d9:41:9f:3a:52:a0:36:f4:db:5a:cb:6a:75:2f:26:a5:
         28:72:00:cf:9a:85:96:ce:9e:8f:3a:ab:4a:88:4a:dc:dc:73:
         f8:bf:d9:f1:96:57:bf:1e:30:91:75:5a:da:b6:fe:0e:1f:ef:
         6e:b1:92:46:cd:9f:47:7e:f1:1f:82:31:1e:f2:5c:ee:eb:24:
         13:e0:a1:21:b4:fb:df:9d:06:67:cf:2c:eb:9c:f3:c6:5d:6e:
         7f:29:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 00:33:42 2024 by rpki-client on console-fra.rpki-client.org