Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/3138362e302e3136302e302f32302d3239203d3e203532323535.roa
File:                     3138362e302e3136302e302f32302d3239203d3e203532323535.roa (raw, json)
Hash identifier:          h66pmHPT8sFmNsNSnWLQH5LbZtqjB4ACmtoILjYJoe8=
Subject key identifier:   27:93:28:79:AF:26:EA:1D:37:7F:4A:C9:EE:8A:60:77:8E:D4:2C:95
Certificate issuer:       /CN=07A392B2A81913D27F04B16E33DA798EA5E4B8A3
Certificate serial:       10B2188842FEAEECBE24514AFD5DE7B5542D94CC
Authority key identifier: 07:A3:92:B2:A8:19:13:D2:7F:04:B1:6E:33:DA:79:8E:A5:E4:B8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/3138362e302e3136302e302f32302d3239203d3e203532323535.roa
Signing time:             Thu 04 Jul 2024 19:05:00 +0000
ROA not before:           Thu 04 Jul 2024 19:00:00 +0000
ROA not after:            Thu 03 Jul 2025 19:05:00 +0000
asID:                     52255
IP address blocks:        186.0.160.0/20 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b2:18:88:42:fe:ae:ec:be:24:51:4a:fd:5d:e7:b5:54:2d:94:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A392B2A81913D27F04B16E33DA798EA5E4B8A3
        Validity
            Not Before: Jul  4 19:00:00 2024 GMT
            Not After : Jul  3 19:05:00 2025 GMT
        Subject: CN=27932879AF26EA1D377F4AC9EE8A60778ED42C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:48:00:90:92:98:f6:70:a6:fb:29:de:b1:27:
                    a4:97:f2:4d:95:6f:03:f8:29:a3:32:d4:1b:45:fe:
                    89:1f:ae:0c:56:55:e9:15:84:b0:b4:fe:ee:d1:c8:
                    be:87:57:e7:ef:9d:d4:53:e6:aa:81:3d:62:e8:a6:
                    cd:29:96:68:f2:75:4b:ea:d1:a9:2e:f4:f7:d9:6d:
                    d3:ac:2e:75:71:dd:a9:9b:e6:f8:dd:a5:8f:45:37:
                    1f:d6:9d:29:40:e4:32:fe:1a:97:67:96:19:74:25:
                    1d:96:b7:9a:62:a7:11:48:c4:86:43:f6:bd:56:65:
                    72:5d:bd:03:7d:06:85:44:86:82:26:55:60:73:0b:
                    57:16:58:87:62:2f:81:ce:6d:ad:92:e3:f7:e2:ae:
                    67:a6:49:3a:d6:7a:06:00:98:f5:3a:fd:9c:ba:82:
                    8f:fe:77:a9:9f:ab:61:a4:66:21:14:ad:6e:bb:08:
                    6f:47:e6:a3:19:ca:f8:6c:13:ca:42:21:30:59:49:
                    70:9a:3b:74:af:13:29:f6:be:89:80:97:5a:4c:12:
                    e1:34:83:c1:12:32:fa:d0:05:b5:a2:df:9b:da:14:
                    a4:17:76:01:38:fb:78:87:4d:ad:99:95:1f:ae:50:
                    90:46:80:e3:4c:1b:1b:1d:41:f1:92:c1:b8:54:3a:
                    98:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:93:28:79:AF:26:EA:1D:37:7F:4A:C9:EE:8A:60:77:8E:D4:2C:95
            X509v3 Authority Key Identifier:
                keyid:07:A3:92:B2:A8:19:13:D2:7F:04:B1:6E:33:DA:79:8E:A5:E4:B8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/3138362e302e3136302e302f32302d3239203d3e203532323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:c1:72:e7:8b:de:28:4f:21:d5:66:d7:ac:a7:73:5b:f3:6c:
         2d:02:a8:cf:61:b2:df:78:1b:6b:20:c8:c0:2f:07:51:e5:bf:
         43:b4:9d:a2:dc:eb:34:18:a6:ec:98:ab:e2:93:50:82:f8:7e:
         59:a2:80:4c:8e:bc:ab:91:1d:2f:33:d9:a8:8b:49:9f:57:b6:
         73:ea:1c:0e:45:94:10:f8:9c:55:07:d3:cd:24:1c:81:ab:14:
         71:89:b9:71:0b:c7:fc:9a:5e:e4:70:1a:9e:4f:5e:99:44:1b:
         1f:ce:13:78:3b:80:12:1f:6f:52:51:f9:0f:db:c4:fa:4b:76:
         13:6a:98:88:01:98:66:20:4a:db:c7:a8:4c:54:88:f7:f0:b7:
         54:3d:df:e9:14:be:eb:a7:1f:06:c8:aa:84:a6:b6:22:72:f2:
         59:62:4f:82:95:68:bc:07:be:42:33:95:f1:3a:a6:cb:44:3d:
         30:47:bf:64:9b:fa:aa:89:73:6e:0f:31:f1:3c:c5:fb:0f:d4:
         f9:77:25:bf:32:9b:5d:f4:0d:1e:d3:3d:bc:28:8a:f0:f4:a5:
         3a:c2:85:77:3a:92:57:f9:3e:b1:1f:1b:6b:46:ce:4e:5c:f1:
         7a:b2:9b:8b:0b:a0:e2:41:be:3f:ba:49:c1:e2:65:0a:58:26:
         19:f3:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org