Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3133382e3138362e3235302e302f32332d3234203d3e203237373733.roa
File:                     3133382e3138362e3235302e302f32332d3234203d3e203237373733.roa (raw, json)
Hash identifier:          Q1d28v8efNvaORM7D+HmtFdGhS+GTkQdLP/0P9MnfGQ=
Subject key identifier:   A7:35:13:ED:BB:CA:63:C1:37:5C:3D:10:09:00:4D:FF:46:5E:D1:DE
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       7935DF62D45E9F90A53E6DE1372A22A5B8FC65CA
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3133382e3138362e3235302e302f32332d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:26 +0000
ROA not before:           Tue 05 Mar 2024 18:05:26 +0000
ROA not after:            Tue 04 Mar 2025 18:10:26 +0000
asID:                     27773
IP address blocks:        138.186.250.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:35:df:62:d4:5e:9f:90:a5:3e:6d:e1:37:2a:22:a5:b8:fc:65:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:26 2024 GMT
            Not After : Mar  4 18:10:26 2025 GMT
        Subject: CN=A73513EDBBCA63C1375C3D1009004DFF465ED1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:a2:53:f8:b2:d4:a4:21:46:aa:52:6f:1b:
                    86:7b:2a:9b:47:7f:f9:ba:36:7f:f9:bc:c5:78:5c:
                    21:ac:54:0f:2f:d2:3d:fd:77:9a:2b:86:32:67:ed:
                    1f:43:fa:fd:20:a9:e1:75:6e:fe:6c:be:b0:82:91:
                    14:d8:86:d1:c5:a2:6e:6c:39:5d:7f:d9:d6:f1:2a:
                    d7:33:f3:fc:ac:48:2c:64:9a:b0:ca:bf:80:2e:e5:
                    d6:b9:c2:70:df:fe:a3:19:2f:e2:b6:7c:d1:0f:99:
                    97:a6:70:c4:13:7e:07:cd:14:cd:d9:67:80:96:9b:
                    e7:6f:1d:c0:47:a3:c5:f7:b6:c8:7d:0f:86:f2:8b:
                    fc:e0:7b:c4:07:03:1c:6d:09:6f:d9:02:e9:e3:7d:
                    8d:85:b7:de:cd:8a:f4:ea:cb:36:b4:ab:c6:ec:2a:
                    ee:40:bb:3a:30:8a:31:a2:9e:ea:96:4f:5b:d7:55:
                    ce:f4:4e:72:28:f2:79:61:15:cd:6d:16:18:45:89:
                    5a:d5:90:28:39:20:7d:6f:22:11:5b:62:ae:20:a2:
                    6a:09:f7:93:44:6b:6f:06:87:1f:58:3e:e1:62:b8:
                    c4:8b:d2:62:bd:6c:e5:48:61:11:a1:4f:e8:e3:5f:
                    2c:b0:ff:1c:28:ce:1a:98:93:a7:3f:44:86:cc:20:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:35:13:ED:BB:CA:63:C1:37:5C:3D:10:09:00:4D:FF:46:5E:D1:DE
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3133382e3138362e3235302e302f32332d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:e0:59:f2:cb:78:d8:e5:c7:89:ed:d6:38:52:a6:f9:02:74:
         f8:5b:5d:f4:03:25:77:be:f2:99:6e:f0:a8:7b:f2:9c:f6:3d:
         d7:bd:9c:55:f0:63:bd:58:62:0a:6a:a0:27:cb:97:97:4d:1d:
         c1:40:28:51:cb:78:4d:69:e9:63:63:9c:90:85:1b:34:27:2e:
         d3:50:b2:a2:d9:56:70:da:b7:10:20:69:b9:f0:e5:6f:d7:6d:
         1f:5d:56:6a:86:99:f9:3e:32:0c:cb:ba:82:46:60:23:81:b4:
         39:f6:d1:b0:fd:1e:c3:04:1d:d9:5d:f8:67:5b:ee:4d:56:50:
         cc:35:e9:71:82:fe:be:d7:1f:49:81:99:2c:5e:86:13:94:57:
         9f:17:42:f1:3e:6d:c8:c4:db:b0:31:a6:f4:2c:b1:25:cc:e2:
         43:39:ea:ab:ca:47:1d:d0:e7:10:7b:c3:d0:ef:8e:6a:71:68:
         7c:6e:4a:bf:6d:44:25:9c:d4:33:d0:34:7e:60:7e:f9:97:1d:
         b5:f4:c0:35:08:51:6e:03:46:61:9c:f3:40:51:1d:b7:6c:c1:
         53:77:72:85:2e:f4:aa:94:e9:86:73:d5:e0:e4:2d:6c:4b:0b:
         9f:51:8f:9a:5c:eb:03:47:eb:2d:85:f7:bf:27:44:a6:85:58:
         4d:6b:a8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org