Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138362e302f32342d3234203d3e20323635373238.roa
File:                     3136302e3233382e3138362e302f32342d3234203d3e20323635373238.roa (raw, json)
Hash identifier:          EP9nQ6sdmKSxzuGZT9oXZ9bdkS/8OkeiZOjHRDLt5Ks=
Subject key identifier:   E3:16:BB:81:50:C7:22:F6:39:E8:47:9F:7D:BC:87:0A:2D:39:5D:07
Certificate issuer:       /CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
Certificate serial:       203FD8628EACA4EC75FDB06838A33B3AAC732B1E
Authority key identifier: B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138362e302f32342d3234203d3e20323635373238.roa
Signing time:             Fri 31 May 2024 20:45:02 +0000
ROA not before:           Fri 31 May 2024 20:40:02 +0000
ROA not after:            Fri 30 May 2025 20:45:02 +0000
asID:                     265728
IP address blocks:        160.238.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3f:d8:62:8e:ac:a4:ec:75:fd:b0:68:38:a3:3b:3a:ac:73:2b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444
        Validity
            Not Before: May 31 20:40:02 2024 GMT
            Not After : May 30 20:45:02 2025 GMT
        Subject: CN=E316BB8150C722F639E8479F7DBC870A2D395D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:7c:92:5f:87:d0:4b:7a:7f:d5:9d:a5:74:
                    16:dd:4c:50:7c:66:8d:3a:28:7a:94:2d:74:08:8b:
                    ff:a9:a7:b8:49:a1:91:7e:c9:11:4e:f7:87:04:1f:
                    ab:36:28:8a:e1:44:0f:e8:8f:18:7d:d9:d1:bf:a0:
                    2e:f1:b3:33:99:8f:e4:1a:72:f7:cd:98:a8:42:7a:
                    5d:07:da:db:9d:16:b8:33:b9:f3:10:84:36:14:bb:
                    b3:49:61:ad:b6:57:59:51:e9:0a:bb:1c:bb:5d:32:
                    e2:17:34:52:19:39:d1:57:99:84:43:9e:b5:87:02:
                    69:b9:de:99:cb:52:90:06:a6:9e:1a:a3:35:52:25:
                    f7:44:e8:e2:e7:46:00:52:2c:0e:84:85:a5:88:7f:
                    a8:68:48:70:b3:3c:57:32:aa:25:55:4d:02:fa:be:
                    89:d0:a0:6e:86:d8:62:44:74:cd:aa:16:0e:80:59:
                    d2:a4:b8:4f:3a:ae:a9:dd:17:84:2c:83:67:25:e0:
                    f9:af:e9:e9:57:0b:36:86:ef:0e:7b:e1:81:8d:79:
                    44:01:bb:cf:f4:00:f3:52:dc:0a:a9:19:19:9e:98:
                    bd:08:71:fb:16:84:34:db:f1:9c:40:36:8b:6e:e1:
                    dd:da:55:ee:c8:f0:2e:53:7f:f4:e9:7f:a9:f6:e6:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:16:BB:81:50:C7:22:F6:39:E8:47:9F:7D:BC:87:0A:2D:39:5D:07
            X509v3 Authority Key Identifier:
                keyid:B7:E1:AB:EC:01:0A:BB:9A:F4:63:BF:22:B1:6C:56:1B:5C:2C:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7E1ABEC010ABB9AF463BF22B16C561B5C2C4444.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A511D681E72F9D814F7BD8FC39D1FED7EA3F94AB704F688C8C38F1A51732BDC/0/3136302e3233382e3138362e302f32342d3234203d3e20323635373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ed:4a:d3:37:0b:c3:b1:3a:30:15:c9:a7:a6:99:f8:95:e5:
         66:ae:06:62:18:b9:e3:54:1d:44:49:47:0a:ae:84:5c:fc:1c:
         fe:a0:35:34:00:71:22:b5:7e:18:81:66:a1:eb:df:46:65:4d:
         34:8e:7a:11:58:a3:5b:10:2a:ba:4c:34:f5:a2:f1:f9:2c:80:
         79:3a:e1:07:76:a2:b0:75:42:95:da:40:8c:d7:1e:56:b6:c8:
         f7:ba:1d:4f:8a:03:6c:ee:26:14:1e:f9:54:91:3b:c7:70:e5:
         39:6d:b1:4b:1a:98:91:e7:82:b9:7e:0d:8d:22:d9:da:ad:c5:
         50:72:35:0a:e1:a7:90:67:ec:8b:95:86:58:bd:75:6e:64:c3:
         1e:c4:c4:63:a3:95:24:b9:5d:a8:69:d2:97:3c:b9:7d:18:32:
         7d:63:c7:94:cc:d4:a0:e1:82:27:e6:97:33:f3:45:31:3b:fc:
         56:bc:46:65:13:c8:de:9c:74:ea:6c:95:9a:10:0a:bc:42:b2:
         2c:56:4c:31:98:e7:d6:1e:e4:21:06:f3:ab:55:f1:15:4e:42:
         de:a2:94:6c:57:39:1c:73:e0:84:d0:fd:ab:0c:92:30:c7:1a:
         cd:62:73:f9:2c:22:b0:83:6d:2c:7f:57:60:33:c9:c7:b4:17:
         a8:86:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org