Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3138362e3137392e302e302f31382d3138203d3e203532333933.roa
File:                     3138362e3137392e302e302f31382d3138203d3e203532333933.roa (raw, json)
Hash identifier:          918jFX6OAK2JZ+hl716cMXqY3p8kFmr/nBaqjiOhKj4=
Subject key identifier:   C6:CC:A9:44:C2:32:B2:7B:72:D1:91:B3:94:FF:68:02:CC:11:5E:C9
Certificate issuer:       /CN=DB11B7707911064B45F88A13AD77795D0BCE5CC6
Certificate serial:       7C91AEEF7E083C1BAB7E1B3DC38A09CA92C0361B
Authority key identifier: DB:11:B7:70:79:11:06:4B:45:F8:8A:13:AD:77:79:5D:0B:CE:5C:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3138362e3137392e302e302f31382d3138203d3e203532333933.roa
Signing time:             Tue 05 Mar 2024 17:42:13 +0000
ROA not before:           Tue 05 Mar 2024 17:37:13 +0000
ROA not after:            Tue 04 Mar 2025 17:42:13 +0000
asID:                     52393
IP address blocks:        186.179.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 07:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:91:ae:ef:7e:08:3c:1b:ab:7e:1b:3d:c3:8a:09:ca:92:c0:36:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB11B7707911064B45F88A13AD77795D0BCE5CC6
        Validity
            Not Before: Mar  5 17:37:13 2024 GMT
            Not After : Mar  4 17:42:13 2025 GMT
        Subject: CN=C6CCA944C232B27B72D191B394FF6802CC115EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e8:29:f9:38:f9:bf:96:c1:bf:89:4e:a2:e6:
                    02:03:94:ac:44:23:c5:41:a9:7a:ec:f6:a5:6d:ae:
                    b1:c1:a5:34:f1:3e:29:be:81:42:87:0b:61:c0:76:
                    95:00:a2:91:92:9e:ec:7e:7f:06:a2:c8:32:9d:f9:
                    c3:be:06:02:ed:8c:06:2c:54:46:71:d2:56:51:ed:
                    b5:88:8d:b1:ec:14:41:1e:af:9f:d3:04:a7:d9:4d:
                    e3:99:e7:6e:5b:69:b5:c4:9a:28:65:db:c5:d2:37:
                    37:6e:37:ad:34:34:c8:30:48:27:e0:a9:05:bc:dd:
                    b8:99:89:d8:b3:2f:80:c8:5d:00:4c:d5:81:ea:e1:
                    54:84:ee:17:5e:4b:e3:52:bb:33:b7:d3:9f:0b:9a:
                    d8:7c:b7:4e:64:a9:59:d6:71:0a:08:0a:1c:b7:c4:
                    9e:0d:24:3a:97:e3:8d:77:cb:3a:56:bc:17:6e:09:
                    be:c5:55:9a:db:aa:87:0e:87:fa:02:6b:d7:d1:9d:
                    d3:e0:f1:7b:73:7b:70:e5:7f:09:e5:9a:b0:27:c0:
                    b1:03:39:4a:17:83:9e:9d:4a:40:6b:07:86:08:a7:
                    60:2f:80:b4:bd:03:4f:76:8d:7d:94:72:56:b5:6a:
                    45:5a:1d:bc:ca:ec:7e:e4:fa:72:4e:fa:a0:02:9c:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CC:A9:44:C2:32:B2:7B:72:D1:91:B3:94:FF:68:02:CC:11:5E:C9
            X509v3 Authority Key Identifier:
                keyid:DB:11:B7:70:79:11:06:4B:45:F8:8A:13:AD:77:79:5D:0B:CE:5C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3138362e3137392e302e302f31382d3138203d3e203532333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         43:a9:39:72:57:59:0c:26:7c:4a:62:8f:9d:82:ee:f7:a4:46:
         33:db:68:22:ea:80:1f:57:2d:77:cf:5b:2c:c6:20:ee:20:1c:
         7f:d7:63:51:a2:3c:40:51:d8:d3:b3:f8:a5:a2:56:c5:22:9e:
         93:3d:7c:c5:8e:4c:a3:18:0b:1c:41:c9:0a:ca:d1:3e:0c:f9:
         05:85:1a:8a:6c:99:8f:d3:21:14:03:9b:ae:19:51:05:60:57:
         39:74:6c:d1:5b:85:5c:2f:47:f4:56:75:19:e5:7f:c4:04:96:
         b5:11:10:f2:1c:62:ad:21:c0:8f:ce:7f:f4:e5:6b:a9:c5:2d:
         0e:cd:19:bd:99:a9:bb:d1:fa:a6:f7:84:38:05:4c:91:7d:cb:
         6c:2e:83:a3:a6:1b:c1:7b:f2:cc:87:17:2d:35:6f:5d:a1:f6:
         10:0d:aa:46:86:b1:d7:ab:d8:5f:9b:03:4a:ed:ad:f9:00:8a:
         75:9a:2d:70:9d:c8:04:4d:11:2a:47:c2:1b:35:6e:d8:09:12:
         75:74:72:97:79:b9:9d:e2:22:47:6f:ad:3b:6d:f7:30:48:7a:
         94:29:a5:c7:95:0b:dd:b4:56:3f:da:81:e2:ff:94:eb:01:e2:
         3c:5c:d9:17:76:ff:8c:fd:75:52:45:c0:99:b7:2f:aa:27:47:
         08:4a:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:34:27 2024 by rpki-client on console-ams.rpki-client.org