Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138362e312e3233352e302f32342d3234203d3e203532343236.roa
File:                     3138362e312e3233352e302f32342d3234203d3e203532343236.roa (raw, json)
Hash identifier:          bOLgmZVXJ2QLhkuJXtbTfnPU0/HHm0VyTT/pVN4T7dU=
Subject key identifier:   C7:03:BD:1A:38:9B:71:2A:36:66:09:39:A0:89:88:8F:97:14:6B:33
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       4FE7626B3FFD1F2C8EC3AAFB54B1DDD643E42C0D
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138362e312e3233352e302f32342d3234203d3e203532343236.roa
Signing time:             Tue 05 Mar 2024 18:05:24 +0000
ROA not before:           Tue 05 Mar 2024 18:00:24 +0000
ROA not after:            Tue 04 Mar 2025 18:05:24 +0000
asID:                     52426
IP address blocks:        186.1.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Apr 2024 10:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e7:62:6b:3f:fd:1f:2c:8e:c3:aa:fb:54:b1:dd:d6:43:e4:2c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Mar  5 18:00:24 2024 GMT
            Not After : Mar  4 18:05:24 2025 GMT
        Subject: CN=C703BD1A389B712A36660939A089888F97146B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:d6:21:a2:81:30:65:cd:54:4f:9c:96:3a:
                    0c:4f:cc:5b:c4:16:99:b1:2b:f9:dc:f6:43:d4:63:
                    18:0d:90:1e:d3:9b:ab:a7:23:3e:97:f4:fd:8a:79:
                    8c:e7:d8:64:d6:06:41:b5:f6:78:71:71:26:87:58:
                    e3:79:13:a9:66:89:67:80:a9:c8:b3:41:70:55:b5:
                    fa:f8:d6:09:98:0c:03:26:b7:03:36:0a:06:7b:19:
                    3b:6f:4c:22:f6:03:48:53:62:76:5b:64:be:be:a7:
                    b8:0f:31:ed:bf:de:06:a4:8c:26:b7:79:ee:16:df:
                    6a:b1:a1:a9:5c:27:ed:42:11:ab:61:97:85:64:de:
                    be:e0:38:1f:8c:0a:5f:c9:dc:32:38:cf:f5:3a:ad:
                    f3:8f:06:98:2a:8d:6f:f6:e1:cc:bf:78:03:b8:dd:
                    a3:92:65:cc:da:fc:5b:35:f3:c5:28:bc:e3:ba:a8:
                    4f:1c:41:9e:0b:0c:f4:11:69:13:94:c2:bb:95:1d:
                    ab:8a:30:87:41:2d:4f:db:19:db:cb:b6:82:97:74:
                    2b:5b:7c:5a:2b:dd:a5:cd:a6:cc:f2:f4:26:60:b3:
                    46:fb:b4:9a:7f:f2:1f:e7:37:f9:e1:f8:34:14:17:
                    b5:08:68:c1:0b:da:a2:f6:12:32:da:89:c7:cb:12:
                    b6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:03:BD:1A:38:9B:71:2A:36:66:09:39:A0:89:88:8F:97:14:6B:33
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138362e312e3233352e302f32342d3234203d3e203532343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:40:5c:8e:1b:b4:4f:0b:e2:c1:4d:78:2d:7b:21:16:6a:26:
         3a:b2:60:03:ef:54:60:dc:1f:30:7e:f0:17:d0:1c:ad:54:71:
         a0:c5:8f:65:34:ba:27:46:08:4a:d0:f2:8b:68:0f:ed:5e:a8:
         0f:0c:13:e0:5b:e5:75:59:60:a0:d7:d4:59:fb:a4:5b:38:d3:
         3c:41:be:b2:b9:7f:9d:fd:25:49:ab:6e:e0:48:81:cc:1a:4f:
         72:6f:6c:0b:9e:73:10:62:6a:dd:b4:71:90:8d:b3:b3:8d:3c:
         d7:3f:17:20:26:55:ed:90:f5:e4:fa:e4:f2:a6:63:24:d7:a6:
         dc:17:52:50:69:6e:90:72:47:ce:ba:de:82:2d:94:c7:a7:dd:
         e7:14:22:c5:df:ec:d2:51:f6:e0:f3:78:cb:b1:a4:8e:ac:7f:
         3f:53:1a:ad:fa:9a:0c:87:2d:37:87:4e:5e:07:25:fb:69:73:
         4f:bb:24:64:ab:1d:e8:ff:e9:d6:d3:bd:b9:5d:cf:0e:d7:2c:
         e4:cc:d2:1a:e4:52:73:5d:c2:c8:ca:ff:6f:22:8e:37:39:64:
         e5:40:d9:cd:17:4f:87:aa:99:ec:17:89:96:52:21:9d:3e:3c:
         f7:fe:36:18:95:35:f4:34:03:8b:78:01:e0:00:20:7e:9a:19:
         fd:c7:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 11:35:26 2024 by rpki-client on console-ams.rpki-client.org