Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e36362e302f32342d3234203d3e203237373733.roa
File:                     3138362e33322e36362e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          GynZlgOU8cZ78aPoGN5QLcRz2ydZOy9IwvTvCS22qaA=
Subject key identifier:   A2:7E:E9:7F:1F:E8:68:D7:61:3B:F1:1B:44:41:4D:0F:2D:AD:57:C2
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       3E35AF7859E9364DFED32459CA9682B729B93D45
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e36362e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:45 +0000
ROA not before:           Tue 05 Mar 2024 18:05:45 +0000
ROA not after:            Tue 04 Mar 2025 18:10:45 +0000
asID:                     27773
IP address blocks:        186.32.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:35:af:78:59:e9:36:4d:fe:d3:24:59:ca:96:82:b7:29:b9:3d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:45 2024 GMT
            Not After : Mar  4 18:10:45 2025 GMT
        Subject: CN=A27EE97F1FE868D7613BF11B44414D0F2DAD57C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:92:41:fb:a9:a2:f9:f1:7b:58:ed:f6:ae:
                    f9:ff:6c:f7:5b:2e:ba:56:78:f2:4a:eb:11:a3:18:
                    c0:18:1b:eb:d6:2e:ce:2b:46:2d:ed:25:d8:88:c3:
                    66:66:65:30:3d:7c:18:b0:4f:7d:da:20:42:e5:d3:
                    0e:72:d1:cb:af:4e:c5:1a:b7:70:e7:00:eb:41:2d:
                    9b:ba:28:32:c5:b0:be:9a:ff:cf:34:fd:d8:91:54:
                    fb:5a:01:f4:10:61:c5:0a:6f:8f:e0:45:22:c1:6a:
                    ee:1d:dd:00:c0:ce:0d:4b:02:14:bd:46:98:96:1f:
                    32:d8:bd:8f:86:54:c7:24:7e:59:48:6b:a2:7f:c5:
                    b7:89:4a:5a:b3:f2:88:a2:63:a4:4b:80:be:06:3f:
                    69:2b:cf:de:08:bf:00:b2:c3:64:71:ba:f8:a6:1a:
                    6a:16:15:b7:d3:d1:58:33:60:39:9b:79:18:50:40:
                    85:31:23:0a:25:fd:4b:e2:69:62:1d:6e:f9:4b:bd:
                    7f:45:6b:06:37:b0:e5:0c:0f:47:91:00:ac:22:07:
                    cc:53:4d:1b:cc:c2:da:e3:21:ce:ef:57:b0:8c:95:
                    91:36:bb:89:52:1c:b4:d0:52:d1:af:f4:7e:59:0b:
                    c4:03:de:3a:e1:e1:9c:86:c0:8a:e2:3e:7a:cb:bc:
                    19:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7E:E9:7F:1F:E8:68:D7:61:3B:F1:1B:44:41:4D:0F:2D:AD:57:C2
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e36362e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:46:63:c1:9e:80:a9:87:5d:be:15:a0:4c:dd:f4:69:2b:dc:
         72:c1:7d:2a:8b:fa:13:5f:c1:78:cc:5d:ac:4e:88:43:2c:82:
         22:72:2c:cc:04:89:09:a8:20:13:a8:40:31:81:96:a3:21:c0:
         68:78:d2:8d:79:21:44:ab:0d:03:9c:49:cd:ab:e1:46:a8:a2:
         f3:69:00:22:f3:9d:75:dc:97:d2:43:56:e6:b5:18:c3:92:0b:
         33:95:57:0a:e7:94:b8:dd:fa:60:41:b5:59:41:57:de:ef:31:
         ae:ed:06:7b:b7:83:78:12:4f:c3:8b:0a:2d:33:6b:97:44:33:
         b7:bc:e2:e1:a0:1b:68:e7:7b:a4:76:49:41:f4:19:f2:de:3a:
         1b:d3:69:55:38:23:0b:07:1b:f2:cd:b6:c0:4f:40:f7:21:cc:
         41:8c:68:9d:b6:73:14:f4:57:50:a7:30:c0:11:19:3e:38:59:
         9a:b5:4f:db:68:d1:2d:4d:4e:58:39:aa:32:61:81:45:02:59:
         2e:44:e0:44:4f:b7:73:55:25:ad:bf:1c:b5:99:38:dd:5a:22:
         7a:81:0c:52:d5:35:ed:cc:32:17:ae:4c:29:73:b7:49:7b:12:
         ab:41:f6:a7:49:59:ad:e7:35:85:8a:bd:2f:c1:21:0e:29:fe:
         d4:5f:24:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:48:08 2024 by rpki-client on console-ams.rpki-client.org