Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138362e302e3133362e302f32312d3234203d3e203532323531.roa
File:                     3138362e302e3133362e302f32312d3234203d3e203532323531.roa (raw, json)
Hash identifier:          7haCuRPmGBJxoSz86uX0e6vY+hwosGYAhEY0Y4Yfi28=
Subject key identifier:   2A:DC:FF:49:9F:3D:2D:6D:2A:0E:13:CF:F0:6F:AB:DF:34:F6:2D:B8
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       796DBB822B1615BEF9B3F0FE1A21688078D92FD4
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138362e302e3133362e302f32312d3234203d3e203532323531.roa
Signing time:             Tue 05 Mar 2024 18:05:25 +0000
ROA not before:           Tue 05 Mar 2024 18:00:25 +0000
ROA not after:            Tue 04 Mar 2025 18:05:25 +0000
asID:                     52251
IP address blocks:        186.0.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 01:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6d:bb:82:2b:16:15:be:f9:b3:f0:fe:1a:21:68:80:78:d9:2f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Mar  5 18:00:25 2024 GMT
            Not After : Mar  4 18:05:25 2025 GMT
        Subject: CN=2ADCFF499F3D2D6D2A0E13CFF06FABDF34F62DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:71:b8:a3:a6:29:50:ca:39:96:04:5f:69:
                    5a:f8:aa:75:2d:82:97:67:43:3b:1c:9c:f6:f6:ac:
                    bc:ab:e0:eb:e4:28:15:19:0d:90:02:c5:b0:54:b6:
                    80:bb:ae:6d:9e:2a:e6:df:bf:b3:0a:7e:a7:2f:fc:
                    38:6b:c5:a8:ed:ad:b2:54:c6:99:af:d8:fc:26:e9:
                    ca:b9:bd:5c:cb:96:fe:ad:0c:dd:a2:ea:d1:74:72:
                    57:05:ed:9f:b2:59:2b:94:40:86:46:ac:a8:0e:a3:
                    5e:13:b6:ec:b6:00:6a:eb:c2:d5:74:5b:18:95:17:
                    a5:fd:52:b1:e3:c2:91:0c:0a:3b:af:b6:4f:16:7b:
                    61:d4:6d:ab:43:3f:55:8d:db:f7:92:6a:91:40:ca:
                    c3:9f:93:49:5a:7f:03:18:f1:9c:6b:14:32:a0:12:
                    4d:ea:45:7a:95:0d:16:73:22:e0:46:98:1c:33:5f:
                    be:94:4a:d8:8d:a5:0a:d2:7e:01:59:b8:c8:4e:48:
                    a9:29:9e:5c:55:2a:70:07:45:0e:2a:a2:4e:58:81:
                    4f:be:93:e7:a4:b4:7d:9d:93:86:bc:c0:dd:b9:14:
                    57:0e:b3:74:c0:1c:fd:a1:2a:5d:d0:04:88:60:b2:
                    02:e2:e7:96:e1:83:c7:ac:18:b4:4f:7a:31:6f:cb:
                    f6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DC:FF:49:9F:3D:2D:6D:2A:0E:13:CF:F0:6F:AB:DF:34:F6:2D:B8
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138362e302e3133362e302f32312d3234203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:41:bb:da:3b:5a:e8:d4:75:43:3b:43:9b:5a:31:d7:00:8a:
         e1:c2:51:31:0d:3d:d2:96:7d:2f:79:18:67:c8:06:bf:d9:f2:
         b8:c7:ab:37:b6:92:06:cb:a8:cc:51:1d:d6:33:9f:9e:1b:51:
         9a:38:4a:a6:e6:36:d4:73:af:6c:e3:19:bc:f8:39:08:65:79:
         f1:34:d8:1c:f9:88:86:05:b6:1a:9a:57:7b:c8:37:e1:f6:53:
         ba:a5:6f:a5:7c:71:77:8e:f4:0f:5b:5e:0f:61:16:d4:3c:29:
         09:ca:d4:b1:de:f0:ca:8c:1e:35:e5:ff:73:01:d3:b4:56:4d:
         12:c2:86:e3:33:21:e2:b0:1d:9c:6a:5b:5d:c6:a7:85:c2:cf:
         b1:b6:86:ba:79:93:4c:66:6e:69:e6:cf:d8:2d:cf:11:07:a4:
         d1:39:94:ea:e4:75:3d:cf:5b:80:bf:55:cc:95:31:59:bb:66:
         b6:52:e4:84:1f:f1:11:4d:ca:4a:f0:c5:6c:1f:52:f1:cb:30:
         c6:52:07:05:cc:46:90:a6:89:6a:67:64:b2:9c:36:a8:1a:cf:
         0c:ce:21:87:6f:c7:5e:8f:5e:7a:7f:80:d9:63:97:15:9b:32:
         58:f7:ed:e0:b1:b5:c2:f6:c3:ea:f1:13:bd:65:25:72:d9:19:
         fe:e2:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 05:42:18 2024 by rpki-client on console-ams.rpki-client.org