Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e3234382e302f32312d3234203d3e203237373733.roa
File:                     3138362e33322e3234382e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          f9p92fBvz6lDL2jj3k5jTMpijorb7+5fhhscK5pMXF0=
Subject key identifier:   A0:DC:87:3F:17:B9:8A:F6:1E:3F:13:AF:BF:4F:32:E7:74:4B:3B:99
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       6B705143FB96D59301FA1C0032CA921D07C5E60C
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e3234382e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:22 +0000
ROA not before:           Tue 05 Mar 2024 18:05:22 +0000
ROA not after:            Tue 04 Mar 2025 18:10:22 +0000
asID:                     27773
IP address blocks:        186.32.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:70:51:43:fb:96:d5:93:01:fa:1c:00:32:ca:92:1d:07:c5:e6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:22 2024 GMT
            Not After : Mar  4 18:10:22 2025 GMT
        Subject: CN=A0DC873F17B98AF61E3F13AFBF4F32E7744B3B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:9a:9d:fd:5b:9e:95:a6:68:3c:67:1a:63:
                    c4:c9:7d:ff:79:c0:6a:b9:90:5b:99:b6:83:b8:a8:
                    c2:13:67:0d:97:d4:3a:56:f6:28:4e:1c:37:37:dc:
                    95:0f:ba:0d:75:6f:ec:39:99:20:56:8a:29:7a:d0:
                    aa:19:a9:29:42:fd:70:60:12:a4:d6:54:4b:a8:aa:
                    92:dd:d8:09:7d:02:3c:76:e5:f1:84:5a:a2:ef:40:
                    a0:c8:78:7a:37:f7:34:49:28:d5:86:9f:4e:b9:b9:
                    57:5d:5f:e7:40:1a:b4:5d:f7:c1:ff:ca:2c:75:77:
                    a4:42:4e:60:b1:fd:82:d5:f8:89:1a:05:32:47:db:
                    84:1e:f5:67:ed:35:69:e5:89:68:a2:82:f2:bc:40:
                    d6:33:58:53:8a:a3:39:fa:da:1b:a9:ad:fb:37:6f:
                    bb:b2:6d:52:d0:f1:b6:70:02:6d:6e:5f:6c:f4:ed:
                    2a:5b:2d:8b:33:36:7f:09:29:3e:65:d2:f9:23:d5:
                    f4:7b:9c:43:ae:71:20:4d:a5:7e:b8:e5:7b:d5:29:
                    3f:02:54:9d:ce:80:fb:d6:08:2a:1d:5e:8f:c6:6f:
                    47:cd:22:e4:1b:e0:6f:a1:61:2f:f3:40:69:6e:da:
                    e7:d5:1d:82:db:b2:8d:7d:2c:ea:05:d7:ec:42:8f:
                    62:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DC:87:3F:17:B9:8A:F6:1E:3F:13:AF:BF:4F:32:E7:74:4B:3B:99
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e3234382e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:81:f4:f5:56:82:f0:53:ce:fc:bc:53:ff:3b:48:d1:95:1e:
         1c:65:e5:c0:b6:74:b7:36:a0:36:8a:d1:3f:96:88:87:10:0c:
         b4:2d:df:85:f0:c6:01:c2:d0:2d:11:c3:a5:8f:f2:8f:84:60:
         12:44:86:70:d6:10:07:ad:79:26:f1:51:fd:4c:05:72:c9:3b:
         95:a3:a2:8b:cb:5d:45:b5:66:ed:d7:56:68:50:97:ef:a3:0d:
         d8:df:1d:33:23:94:aa:d5:14:2c:3a:fd:63:92:80:b1:04:6c:
         ff:90:46:7f:f4:e6:c4:07:12:46:5d:68:9a:23:0d:cb:69:5b:
         4d:00:3a:a7:6b:b1:10:d6:c3:9e:19:4a:1f:42:81:6d:be:07:
         87:a8:38:12:10:16:a6:ce:ef:e2:92:c7:92:03:06:00:2a:6b:
         a4:d6:54:01:2a:09:9a:e1:d4:3b:af:06:7f:58:36:e7:77:31:
         2a:e7:56:ff:2f:59:4c:25:04:f9:39:86:a5:4e:db:fa:5d:f2:
         60:bc:ae:28:a2:3c:79:79:97:1c:09:05:4e:c5:6d:64:ea:d7:
         3b:f9:ab:6f:7f:e2:fb:89:6a:ce:39:43:9d:e1:35:dc:c4:d6:
         49:5a:79:d0:5d:d2:cd:c9:f0:d9:84:ae:3b:cf:5b:0d:3d:0b:
         b8:34:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org