Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3138362e3137392e36342e302f32302d3234203d3e203532343638.roa
File:                     3138362e3137392e36342e302f32302d3234203d3e203532343638.roa (raw, json)
Hash identifier:          3Nb3xohPLDRrznO8PYM0sZVeECVebt2htZKniJteA4w=
Subject key identifier:   E0:3A:45:1F:F9:AB:D1:F4:33:2A:94:AE:33:2A:E2:FD:37:C8:46:3D
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       305BEAB6D38C5CA3BED72EAE3D1EED440A9F9BB9
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3138362e3137392e36342e302f32302d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:51:20 +0000
ROA not before:           Tue 05 Mar 2024 17:46:20 +0000
ROA not after:            Tue 04 Mar 2025 17:51:20 +0000
asID:                     52468
IP address blocks:        186.179.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5b:ea:b6:d3:8c:5c:a3:be:d7:2e:ae:3d:1e:ed:44:0a:9f:9b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Mar  5 17:46:20 2024 GMT
            Not After : Mar  4 17:51:20 2025 GMT
        Subject: CN=E03A451FF9ABD1F4332A94AE332AE2FD37C8463D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:6b:c0:6e:09:ed:67:be:e2:71:fc:11:2a:
                    c6:fe:8c:bf:b3:6f:74:9c:db:07:0a:9a:50:2d:3d:
                    25:f3:d7:1d:7d:42:7b:8b:d1:1b:0f:a9:ac:01:8c:
                    79:7f:71:cb:ab:da:e6:58:1a:bb:f1:ba:0e:80:79:
                    71:c6:16:ae:22:01:21:88:d8:e6:d3:a8:de:b7:af:
                    a8:44:49:ad:73:a5:03:a8:c5:27:3f:12:d2:a1:e2:
                    9c:79:fc:5c:4c:0b:70:c9:ac:29:df:af:75:14:2a:
                    57:42:0a:b8:1b:38:ee:8b:1b:51:d9:76:df:84:a8:
                    b0:79:66:5b:bb:41:da:22:33:7c:2a:fc:4e:6a:7e:
                    e8:a9:6e:52:5f:94:48:f5:ca:4a:9f:69:69:e9:15:
                    00:ca:b5:6f:26:c6:35:47:1f:80:4f:fe:a5:ae:ae:
                    a6:21:f0:de:98:b1:86:21:c8:e1:8d:d6:97:59:e1:
                    6c:9b:83:48:73:cf:28:8b:48:2d:12:5f:c2:3b:15:
                    8e:f5:6a:31:c7:2c:95:21:ca:53:03:d2:d5:35:9c:
                    69:67:ae:bd:03:eb:59:99:b9:4b:d1:ab:d6:79:2e:
                    18:97:14:c5:0d:e0:81:94:0f:80:d4:7b:97:0c:d8:
                    63:ea:43:f6:f7:a9:b2:f6:33:89:88:96:20:a1:2b:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3A:45:1F:F9:AB:D1:F4:33:2A:94:AE:33:2A:E2:FD:37:C8:46:3D
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3138362e3137392e36342e302f32302d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:9e:55:f7:c2:51:c9:6f:5f:8f:c7:ee:41:e7:e2:03:df:
         45:74:98:c1:ac:74:23:ba:59:4f:79:de:59:ae:63:5f:3e:bb:
         4f:5b:41:98:a1:68:f5:61:15:97:f4:0f:cb:70:08:a1:00:95:
         c1:f2:69:c4:e5:07:a8:5e:6d:d5:19:77:f7:fb:f4:0d:b1:2d:
         ff:97:64:bd:87:08:69:24:a5:75:54:1d:6f:d1:07:bd:c2:c5:
         22:35:27:75:a2:f2:e1:9a:27:fe:09:ec:4b:cb:37:ae:16:d0:
         68:3c:06:f1:05:25:8c:23:a0:01:de:90:8f:cd:fa:24:8f:d3:
         50:18:c2:23:14:fd:13:7b:35:22:89:85:07:d0:79:8d:13:65:
         c1:7d:73:78:f5:ef:01:88:f9:80:91:07:49:5a:38:a3:36:c7:
         da:cf:17:2d:2f:a0:37:57:e0:d5:ca:71:c2:2b:76:1e:77:8f:
         0c:72:79:eb:55:cd:f2:03:6d:d9:24:af:c8:7e:16:88:50:09:
         84:4f:c2:b2:99:72:5c:94:9c:29:38:6f:d6:f0:ae:f1:17:8d:
         4f:de:f4:d6:82:a4:34:33:f8:78:89:c8:e9:8f:eb:d5:c6:db:
         0f:db:85:bc:78:b1:b8:13:cc:df:92:3c:19:04:67:48:b2:46:
         9b:f0:ce:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org