Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e39362e302f31392d3234203d3e203237373733.roa
File:                     3138362e33322e39362e302f31392d3234203d3e203237373733.roa (raw, json)
Hash identifier:          7xeSkUTFtZuHwal3HhfFwkG9HJaMSJ8q1m+dr2AoFBk=
Subject key identifier:   64:67:36:2D:4D:F2:2D:4F:A2:23:60:DC:39:31:B6:1B:97:B4:3D:93
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       3F1E74F89A77A5FAE162B6957874BC1A01983EA7
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e39362e302f31392d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:40 +0000
ROA not before:           Tue 05 Mar 2024 18:05:40 +0000
ROA not after:            Tue 04 Mar 2025 18:10:40 +0000
asID:                     27773
IP address blocks:        186.32.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1e:74:f8:9a:77:a5:fa:e1:62:b6:95:78:74:bc:1a:01:98:3e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:40 2024 GMT
            Not After : Mar  4 18:10:40 2025 GMT
        Subject: CN=6467362D4DF22D4FA22360DC3931B61B97B43D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:2d:c3:48:6d:ac:3d:d9:31:ce:e2:5c:af:
                    be:45:5a:5d:25:70:dc:fd:64:53:b8:55:76:22:d8:
                    54:f1:42:a7:dd:c7:7a:83:00:e7:1e:60:c5:ba:62:
                    fb:95:8b:64:03:f1:21:2f:c1:7f:2e:29:bd:bf:29:
                    3b:39:24:32:4a:02:5b:f1:78:74:cb:ed:fe:11:7f:
                    3e:be:ae:76:0d:4c:bc:c0:2b:96:05:d7:38:b4:85:
                    b3:b7:80:12:69:ec:17:7e:e2:10:28:d7:7e:44:0c:
                    49:3c:56:a3:7f:50:9b:34:d9:53:17:3b:2d:19:ae:
                    06:f5:ed:f6:38:0e:01:a9:61:5d:e8:6a:ab:88:d9:
                    85:d8:5f:35:4b:ef:55:99:4e:65:48:24:ba:10:a8:
                    42:3b:f5:b7:4a:44:1d:f8:c3:20:ba:31:65:6f:5a:
                    e5:0d:04:ab:f8:8b:0f:55:48:90:1a:05:6e:aa:4b:
                    63:37:3b:aa:10:3f:3f:69:b4:2a:01:d9:75:47:2d:
                    74:1d:b8:da:87:59:b5:4d:86:20:53:7a:ef:c3:0e:
                    b3:17:a0:74:ba:75:5c:de:67:26:91:08:3e:7a:50:
                    46:d4:2c:65:a9:48:19:d8:10:ee:5f:d8:9e:c3:3f:
                    0f:9e:68:e4:c2:b5:22:5b:ee:22:80:79:59:3f:0b:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:67:36:2D:4D:F2:2D:4F:A2:23:60:DC:39:31:B6:1B:97:B4:3D:93
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e39362e302f31392d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:d0:51:bc:0e:d5:c9:dd:51:9f:92:d5:80:5d:6b:4c:77:27:
         da:23:1e:6f:84:bd:cf:64:15:ca:11:d3:50:9c:1e:33:ff:ed:
         2f:52:c6:14:ed:14:87:2d:57:75:4e:e6:88:6f:bb:08:fc:ed:
         7b:c0:82:30:36:59:35:f9:04:57:f8:a4:f4:e4:01:2c:06:82:
         c2:a1:e7:bd:dc:14:4f:a4:26:ce:62:ad:78:b6:1c:ad:8a:2d:
         80:b4:30:bd:06:0b:a4:30:07:f4:d3:79:3b:bd:4a:ae:d5:bd:
         ab:24:f1:1c:c9:04:64:a6:f9:35:87:2a:1e:11:aa:32:43:77:
         54:6c:06:3e:f7:aa:c1:fc:78:cd:43:fe:09:c6:28:43:59:cd:
         f8:93:e7:e7:cd:85:43:d1:03:02:1d:63:1d:18:c4:33:36:88:
         d0:f1:0d:25:8e:1c:79:3c:3b:9a:79:64:14:83:5a:42:83:0e:
         8c:f6:be:12:9c:18:c2:38:42:c6:a3:09:53:38:36:a7:8a:69:
         6c:83:c2:ac:94:75:13:10:80:a3:08:24:e7:8d:3f:e2:7e:25:
         65:a1:9f:64:bf:a0:35:f7:5f:f8:a6:b2:40:0a:e1:1d:84:c5:
         ea:cf:bd:7f:89:a2:92:5c:ae:27:3e:ea:96:5f:f0:a9:2a:ec:
         7d:c3:c0:f3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUPx50+Jp3pfrhYraVeHS8GgGYPqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNDAzMDUxODA1NDBaFw0yNTAzMDQxODEwNDBaMDMxMTAvBgNV
BAMTKDY0NjczNjJENERGMjJENEZBMjIzNjBEQzM5MzFCNjFCOTdCNDNEOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yC3DSG2sPdkxzuJcr75FWl0l
cNz9ZFO4VXYi2FTxQqfdx3qDAOceYMW6YvuVi2QD8SEvwX8uKb2/KTs5JDJKAlvx
eHTL7f4Rfz6+rnYNTLzAK5YF1zi0hbO3gBJp7Bd+4hAo135EDEk8VqN/UJs02VMX
Oy0Zrgb17fY4DgGpYV3oaquI2YXYXzVL71WZTmVIJLoQqEI79bdKRB34wyC6MWVv
WuUNBKv4iw9VSJAaBW6qS2M3O6oQPz9ptCoB2XVHLXQduNqHWbVNhiBTeu/DDrMX
oHS6dVzeZyaRCD56UEbULGWpSBnYEO5f2J7DPw+eaOTCtSJb7iKAeVk/CwU9AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUZGc2LU3yLU+iI2DcOTG2G5e0PZMwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzgzNjJlMzMzMjJlMzkzNjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzczNzM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW6IGAwDQYJ
KoZIhvcNAQELBQADggEBACfQUbwO1cndUZ+S1YBda0x3J9ojHm+Evc9kFcoR01Cc
HjP/7S9SxhTtFIctV3VO5ohvuwj87XvAgjA2WTX5BFf4pPTkASwGgsKh573cFE+k
Js5irXi2HK2KLYC0ML0GC6QwB/TTeTu9Sq7Vvask8RzJBGSm+TWHKh4RqjJDd1Rs
Bj73qsH8eM1D/gnGKENZzfiT5+fNhUPRAwIdYx0YxDM2iNDxDSWOHHk8O5p5ZBSD
WkKDDoz2vhKcGMI4QsajCVM4NqeKaWyDwqyUdRMQgKMIJOeNP+J+JWWhn2S/oDX3
X/imskAK4R2ExerPvX+JopJcric+6pZf8Kkq7H3DwPM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org