Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/3138362e3139302e3132382e302f31392d3234203d3e20323634363432.roa
File:                     3138362e3139302e3132382e302f31392d3234203d3e20323634363432.roa (raw, json)
Hash identifier:          wrZw9qoWiVjJHLD3kImpwBr4l6zstRB9lw4cqffk9Xs=
Subject key identifier:   3C:6D:02:66:3B:1B:D5:25:B3:8A:EA:65:90:BD:E3:49:00:2A:16:51
Certificate issuer:       /CN=FFD79896199115D473E566BF25169401D7AAE011
Certificate serial:       167FB6F5D20A52BDC10AB41843A05728084D500B
Authority key identifier: FF:D7:98:96:19:91:15:D4:73:E5:66:BF:25:16:94:01:D7:AA:E0:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFD79896199115D473E566BF25169401D7AAE011.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/3138362e3139302e3132382e302f31392d3234203d3e20323634363432.roa
Signing time:             Tue 05 Mar 2024 17:40:17 +0000
ROA not before:           Tue 05 Mar 2024 17:35:17 +0000
ROA not after:            Tue 04 Mar 2025 17:40:17 +0000
asID:                     264642
IP address blocks:        186.190.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/FFD79896199115D473E566BF25169401D7AAE011.crl
                          rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/FFD79896199115D473E566BF25169401D7AAE011.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFD79896199115D473E566BF25169401D7AAE011.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7f:b6:f5:d2:0a:52:bd:c1:0a:b4:18:43:a0:57:28:08:4d:50:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD79896199115D473E566BF25169401D7AAE011
        Validity
            Not Before: Mar  5 17:35:17 2024 GMT
            Not After : Mar  4 17:40:17 2025 GMT
        Subject: CN=3C6D02663B1BD525B38AEA6590BDE349002A1651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:89:6f:26:11:c2:49:f9:c0:17:6d:f1:d3:
                    f6:88:a9:9d:b4:e4:4e:41:8a:2e:7c:2c:74:f4:98:
                    72:b4:22:1b:b1:17:7a:f4:dd:90:69:9f:56:fc:37:
                    36:67:61:1a:92:92:1c:da:f3:9d:d3:3f:a6:37:a7:
                    ce:63:37:31:cb:47:25:1a:2f:7f:59:f0:c0:1b:3d:
                    41:c8:d2:82:14:07:d8:5d:e1:6d:5d:0c:55:f8:7f:
                    90:fb:9d:42:68:54:1f:89:1a:f4:e1:2a:f6:9c:cd:
                    84:ec:27:46:bf:6e:96:71:b1:a5:84:cb:f3:3f:f2:
                    1d:46:ad:0e:72:91:6e:85:4a:5e:34:f3:18:74:45:
                    77:2e:87:72:35:24:c8:0a:82:53:31:78:21:0a:2b:
                    92:81:45:b0:b1:86:e3:5d:60:56:ab:bc:83:4d:7d:
                    43:94:57:6c:6f:b7:64:98:e8:9c:a6:61:b9:41:2d:
                    36:81:d8:a8:a5:64:0e:03:95:57:19:e7:d7:e8:42:
                    66:ab:92:0b:1a:4e:5f:3f:57:b2:c4:2d:21:2d:0f:
                    69:ba:d6:de:2b:a1:58:08:95:41:65:43:16:12:52:
                    6d:3c:6d:ca:44:04:76:ae:ed:72:5b:fe:da:2f:88:
                    c2:fc:31:1a:e1:2b:ae:68:2b:b9:b6:64:b9:2a:cf:
                    a7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6D:02:66:3B:1B:D5:25:B3:8A:EA:65:90:BD:E3:49:00:2A:16:51
            X509v3 Authority Key Identifier:
                keyid:FF:D7:98:96:19:91:15:D4:73:E5:66:BF:25:16:94:01:D7:AA:E0:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/FFD79896199115D473E566BF25169401D7AAE011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFD79896199115D473E566BF25169401D7AAE011.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/3138362e3139302e3132382e302f31392d3234203d3e20323634363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:fe:71:18:8d:35:90:17:5b:22:43:34:b6:26:17:8e:c4:c5:
         1f:bd:dd:f1:05:d4:58:7e:55:36:c9:a5:c2:3a:13:e1:78:a2:
         53:78:86:9d:23:be:3f:6b:ef:78:17:01:65:0a:5e:c0:55:70:
         b7:35:85:86:28:9a:9e:50:52:42:04:f6:36:62:1c:ef:6a:81:
         95:4a:e1:4a:b4:5a:68:20:27:10:a8:a5:05:da:93:32:08:3c:
         1d:d2:85:67:55:a2:22:30:c9:44:74:3c:33:f2:1e:82:d7:2b:
         70:04:85:23:b3:c8:7d:a7:e9:dc:f7:c4:8f:60:c6:f3:2a:0c:
         03:9a:38:21:3e:94:99:6d:4c:42:ff:6e:2d:5d:24:19:fe:6e:
         14:d0:e3:aa:35:5d:ac:27:94:91:0b:f4:1f:02:2b:b6:8c:a4:
         36:9c:ec:af:0a:72:d9:5a:8e:29:a9:db:55:f4:d4:f5:92:4b:
         76:5d:30:8d:29:f4:f4:d3:af:1e:ad:45:b2:fc:a5:30:75:ff:
         4e:5e:3c:70:db:83:be:10:b4:c8:5d:9a:c6:35:27:74:b1:b5:
         23:cc:be:83:a0:5d:da:31:b8:57:7c:15:90:a5:46:a5:74:74:
         63:df:a3:12:ae:f6:11:15:f2:68:5e:21:37:9b:66:33:42:46:
         52:7e:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org