Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3138362e312e302e302f31382d3234203d3e203138383430.roa
File:                     3138362e312e302e302f31382d3234203d3e203138383430.roa (raw, json)
Hash identifier:          xSBeRtwekh5Fr/rN1hKs0hma1maEBBQoUGe1Roob7Cw=
Subject key identifier:   80:99:7F:AF:F6:2A:6E:52:27:A7:22:28:93:25:A8:36:8B:40:DB:D1
Certificate issuer:       /CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
Certificate serial:       09AB5FC36BF17C3747BCBB2C59BE313A30EF8B96
Authority key identifier: 0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3138362e312e302e302f31382d3234203d3e203138383430.roa
Signing time:             Tue 05 Mar 2024 17:46:02 +0000
ROA not before:           Tue 05 Mar 2024 17:41:02 +0000
ROA not after:            Tue 04 Mar 2025 17:46:02 +0000
asID:                     18840
IP address blocks:        186.1.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ab:5f:c3:6b:f1:7c:37:47:bc:bb:2c:59:be:31:3a:30:ef:8b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
        Validity
            Not Before: Mar  5 17:41:02 2024 GMT
            Not After : Mar  4 17:46:02 2025 GMT
        Subject: CN=80997FAFF62A6E5227A722289325A8368B40DBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:a7:e6:ce:9d:de:31:2e:75:cd:bb:a4:2d:
                    33:fb:57:67:a7:c5:16:7e:4c:78:d5:49:36:e3:b9:
                    22:19:7f:b2:f1:d9:3e:c8:2a:8e:64:4a:e0:9a:7a:
                    9e:f0:9e:ed:9d:fd:18:4c:45:db:15:9d:e1:e9:97:
                    e0:07:c7:a3:5f:9a:ff:bb:5a:d1:ab:78:ab:71:b1:
                    78:d6:66:ae:65:06:91:6e:64:cd:bf:7f:85:f1:4b:
                    30:9e:ff:df:21:ed:dc:f9:28:0b:10:14:b1:c0:a6:
                    e0:cb:fc:6b:6e:56:94:78:1a:cb:d0:52:e3:85:51:
                    b2:01:99:32:a2:a8:90:6a:a3:56:9e:dc:2e:0c:81:
                    9b:4c:f7:a4:3d:5c:b2:b3:b2:14:df:25:b7:1a:f5:
                    97:2e:e6:0a:e3:e3:f5:c1:fa:09:25:e1:d0:96:b9:
                    25:f8:9f:21:5d:db:13:c9:50:cc:c5:87:2c:23:a2:
                    31:2b:f0:c0:6d:a2:68:93:0f:7a:b3:07:44:7e:c2:
                    6d:e3:e1:1a:7e:5f:50:46:6e:2b:97:4a:f7:dd:70:
                    1c:b6:97:91:22:a8:e1:38:2b:a2:8d:8c:c9:64:d4:
                    bf:62:35:79:0e:a3:a5:ca:70:2d:86:59:31:48:e7:
                    55:48:35:b1:ba:98:47:7c:bf:3b:51:5b:28:90:47:
                    32:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:99:7F:AF:F6:2A:6E:52:27:A7:22:28:93:25:A8:36:8B:40:DB:D1
            X509v3 Authority Key Identifier:
                keyid:0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3138362e312e302e302f31382d3234203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:8b:8a:22:af:b5:02:cb:72:dc:a1:62:5e:2c:57:1c:b2:b3:
         ca:86:a6:c2:f3:15:38:71:22:ea:0b:fa:d3:99:71:5b:66:6c:
         e1:42:13:24:44:46:f9:d3:96:04:d1:b4:06:07:44:dd:c9:37:
         de:30:6c:69:ca:d7:44:a4:81:87:9a:3d:13:b2:51:5d:ce:a1:
         0b:26:9c:44:37:df:9e:41:c7:30:4e:6e:c3:3f:02:15:64:7a:
         cb:83:f3:ff:b2:da:af:94:c1:6d:bf:c7:10:65:39:72:3d:52:
         94:67:24:9e:20:4b:12:0c:b0:01:b6:f2:37:52:5c:ba:6f:fa:
         28:f3:7f:b4:5d:02:16:96:2b:54:e0:75:a0:16:95:dd:d9:cb:
         bd:73:d5:b1:75:94:4a:cf:fb:a3:c4:7f:74:18:08:75:09:af:
         2e:52:ed:3c:ed:fc:94:83:24:c7:7f:62:9c:5b:91:54:8f:92:
         77:fa:fd:88:5a:43:0f:c7:b4:b2:7b:ac:7e:7d:6f:c4:5f:60:
         6d:bc:f2:fd:2e:75:56:0d:f7:3f:25:b0:89:1e:72:da:4b:96:
         f8:c1:41:a3:ed:0e:d0:9f:fd:bc:45:b5:75:0a:e1:82:18:24:
         14:f9:4d:71:fc:dc:16:d4:ea:cf:4f:2d:3e:af:b8:06:72:ec:
         47:04:e1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:32:31 2024 by rpki-client on console-fra.rpki-client.org