Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C06A3ADEB087B55AE44DCC0734CACC44857784EF58E633A7A10DE1FF2B7B4BE/0/3138362e352e3234302e302f32302d3234203d3e20323632323239.roa
File:                     3138362e352e3234302e302f32302d3234203d3e20323632323239.roa (raw, json)
Hash identifier:          3HGIhPMSzJ2Fbgg5DFr8463XJEWEqVoU4RKCSb3WEYU=
Subject key identifier:   76:C6:D2:C9:05:B1:75:59:71:A2:72:0D:9F:3B:52:54:7D:C7:4D:B0
Certificate issuer:       /CN=ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A
Certificate serial:       3D0C9703A34D135CCC671C53CB55188AC15DC6EE
Authority key identifier: EC:F5:A8:99:DE:0F:EE:8D:12:C3:9B:98:D7:EB:8F:A8:D5:DF:DB:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C06A3ADEB087B55AE44DCC0734CACC44857784EF58E633A7A10DE1FF2B7B4BE/0/3138362e352e3234302e302f32302d3234203d3e20323632323239.roa
Signing time:             Tue 05 Mar 2024 17:59:52 +0000
ROA not before:           Tue 05 Mar 2024 17:54:52 +0000
ROA not after:            Tue 04 Mar 2025 17:59:52 +0000
asID:                     262229
IP address blocks:        186.5.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C06A3ADEB087B55AE44DCC0734CACC44857784EF58E633A7A10DE1FF2B7B4BE/0/ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C06A3ADEB087B55AE44DCC0734CACC44857784EF58E633A7A10DE1FF2B7B4BE/0/ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0c:97:03:a3:4d:13:5c:cc:67:1c:53:cb:55:18:8a:c1:5d:c6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A
        Validity
            Not Before: Mar  5 17:54:52 2024 GMT
            Not After : Mar  4 17:59:52 2025 GMT
        Subject: CN=76C6D2C905B1755971A2720D9F3B52547DC74DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:9a:c6:6d:3a:f8:26:57:11:3f:b6:06:d2:
                    c1:a3:d9:8d:00:8b:f5:a6:2a:88:94:25:55:5a:e5:
                    1b:dd:e2:de:55:cc:69:6f:80:5f:d7:21:ae:9d:65:
                    74:59:5b:87:88:ea:a6:d6:71:9c:78:3c:e8:3c:42:
                    98:14:11:1d:7e:92:c8:7b:97:3c:c5:3a:bb:c0:31:
                    2a:d5:8c:db:e3:b0:2f:ff:67:de:4d:dc:61:ee:0d:
                    08:15:83:78:b2:41:19:c5:62:cf:d8:73:c6:35:a1:
                    3c:fc:e1:2b:c6:9d:80:48:52:dd:10:52:c3:24:b0:
                    59:05:54:92:2a:e1:c8:71:74:5d:ad:b3:a4:0d:22:
                    b1:4a:6c:9f:11:83:dc:80:41:ce:64:df:27:40:1d:
                    8b:4a:ef:16:12:b2:3b:84:f9:f7:d7:15:85:58:ec:
                    48:09:c6:72:77:fd:89:6e:95:f5:02:f9:63:36:1e:
                    a3:9f:c8:84:43:fc:c9:ad:d6:8e:7a:db:0b:dc:a2:
                    a9:c4:3b:68:d9:3a:a2:4d:f7:57:2b:45:45:fa:b6:
                    cb:c2:a4:c5:49:d0:1d:c1:d5:c9:49:00:16:1f:3e:
                    c8:2a:6a:cc:0a:7f:6b:12:f0:9b:a5:c7:03:aa:24:
                    17:5c:33:fd:08:06:c1:da:28:27:4e:c6:a5:6b:13:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C6:D2:C9:05:B1:75:59:71:A2:72:0D:9F:3B:52:54:7D:C7:4D:B0
            X509v3 Authority Key Identifier:
                keyid:EC:F5:A8:99:DE:0F:EE:8D:12:C3:9B:98:D7:EB:8F:A8:D5:DF:DB:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C06A3ADEB087B55AE44DCC0734CACC44857784EF58E633A7A10DE1FF2B7B4BE/0/ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C06A3ADEB087B55AE44DCC0734CACC44857784EF58E633A7A10DE1FF2B7B4BE/0/3138362e352e3234302e302f32302d3234203d3e20323632323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c3:31:af:79:a1:40:68:72:48:85:09:04:3c:04:f7:86:2a:5e:
         25:c4:3a:26:80:45:e5:60:8d:1c:c8:ec:ea:5c:b6:e7:e6:97:
         7f:0d:9e:63:d7:42:25:a0:a0:0d:55:42:9d:4e:9b:5a:78:b7:
         41:16:ed:f6:d7:53:bd:0c:f2:c0:6a:f6:d9:99:46:c2:a5:bf:
         25:bf:d6:57:aa:10:4c:32:e8:6b:d5:c4:e6:28:98:dc:2e:e8:
         dc:ff:f2:9f:e2:e4:0d:6c:c3:9f:56:ea:09:c5:bc:23:31:24:
         fe:b5:ce:25:96:d2:dd:e9:0a:d8:05:a0:d0:0c:dd:7f:e5:e0:
         11:38:ed:8d:78:a7:ae:a7:ab:71:3f:7e:66:c0:12:c6:7a:8a:
         92:1f:e2:e4:b4:62:4d:92:c9:98:de:e9:ee:f8:20:bb:11:ef:
         ca:4e:b0:46:f6:68:fb:1c:ee:50:02:23:05:fa:2b:08:07:58:
         a7:05:2e:66:33:d8:c6:78:9e:d1:bd:30:3b:08:b6:cb:08:02:
         4e:d0:2e:a7:76:a2:99:e8:2c:51:ad:c7:1e:c5:8e:75:8c:b5:
         e3:05:9b:5e:57:00:86:16:5c:b5:7d:d7:26:0b:bb:e2:05:9c:
         4e:5e:f2:d5:ed:07:80:7b:55:cd:39:fa:6a:46:58:91:af:b4:
         b4:8c:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org