Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e37322e302f32312d3234203d3e203237373733.roa
File:                     3138362e33322e37322e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          lWWANY3LhQqkGlhgOPEsntSbqjFncTk+VM3rd76W4i0=
Subject key identifier:   E8:E6:15:95:1A:F8:37:92:65:45:A7:D5:05:E3:FA:7D:B9:15:68:7A
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       212951498D7405637188B49C57BCD516022D80A0
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e37322e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:43 +0000
ROA not before:           Tue 05 Mar 2024 18:05:43 +0000
ROA not after:            Tue 04 Mar 2025 18:10:43 +0000
asID:                     27773
IP address blocks:        186.32.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:29:51:49:8d:74:05:63:71:88:b4:9c:57:bc:d5:16:02:2d:80:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:43 2024 GMT
            Not After : Mar  4 18:10:43 2025 GMT
        Subject: CN=E8E615951AF837926545A7D505E3FA7DB915687A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:30:16:a2:76:6f:8f:5b:21:1b:ec:e6:33:
                    97:91:e8:28:8a:66:65:1c:f8:25:f0:ff:3a:69:60:
                    3a:6a:29:ae:d3:9a:9b:b0:38:91:2a:f3:64:ad:6e:
                    3b:07:d2:5e:79:aa:ad:35:67:84:e6:92:a4:82:76:
                    a7:d7:04:aa:42:87:35:a3:74:d9:1d:d3:86:cc:fc:
                    f3:2a:44:bf:e4:c3:0e:75:8d:19:46:5a:c6:80:db:
                    dd:93:e1:fd:06:4e:51:9d:b6:c1:39:b6:ff:90:74:
                    20:92:41:dc:d6:dc:db:1e:f9:a5:6e:4c:34:0a:b2:
                    7d:86:f5:f7:4f:d3:f4:f7:3f:64:50:62:db:b1:1c:
                    cf:0a:fe:9e:18:9b:eb:7a:87:40:c0:33:d1:66:36:
                    9b:03:3c:0e:e7:41:81:e0:28:f7:8d:e5:2f:11:ce:
                    85:e6:52:fb:ee:f4:74:dc:4f:c2:dd:f9:71:ba:d3:
                    c8:3d:2e:f5:8e:60:20:98:7d:52:c8:cf:a2:9e:e2:
                    f1:27:cb:a5:12:57:ef:0b:f1:81:67:ed:4f:8c:79:
                    60:09:eb:49:82:11:21:cc:ee:f9:dc:e6:d3:7b:14:
                    b4:80:60:17:10:b0:ad:b8:74:e5:04:5d:fe:5e:64:
                    30:5d:77:d7:c4:f3:bb:eb:5f:c3:17:f7:26:bf:5a:
                    23:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E6:15:95:1A:F8:37:92:65:45:A7:D5:05:E3:FA:7D:B9:15:68:7A
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e37322e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:d5:1f:59:2c:f6:e7:0d:e7:eb:f0:22:81:8a:14:cd:69:
         ba:68:70:e7:db:a4:3b:79:d7:b0:f2:55:aa:14:60:cc:a2:1a:
         54:a4:73:66:57:f4:cb:26:a1:88:3f:9b:fe:6f:9c:ac:3e:38:
         a9:55:f2:e0:74:6a:0e:cc:42:e0:d4:ef:74:26:50:a7:79:78:
         b0:35:7d:2b:5d:0f:ba:ce:48:3d:62:af:1c:30:e7:2d:b0:11:
         b6:05:b6:8c:30:77:3a:e7:fe:30:84:68:80:2a:5b:3c:a1:f9:
         86:45:83:5b:f0:c4:d0:e6:f5:89:9a:38:c0:29:a5:7a:59:fa:
         ed:3f:31:e6:ce:0f:8a:7d:da:1e:cb:18:35:5e:66:50:8f:e8:
         51:f3:9e:1a:83:7c:16:e4:1a:01:52:1b:e2:88:af:7b:28:7d:
         7c:85:78:55:42:25:d5:b9:b5:53:92:5e:29:41:49:7c:05:99:
         e0:de:75:9c:a5:7d:f0:81:6b:53:b4:5e:a1:a7:b4:72:30:55:
         21:13:18:e0:bc:4f:df:1f:fc:b8:36:97:94:39:05:c9:0b:11:
         7c:96:99:60:81:37:21:b6:cc:57:6d:d4:2c:6c:c2:8f:73:ec:
         4f:88:e9:e1:80:3d:a6:48:fb:0e:57:b4:be:6d:4d:ad:bb:95:
         15:5b:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org