Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3138362e3139302e3233322e302f32342d3234203d3e20323634363435.roa
File:                     3138362e3139302e3233322e302f32342d3234203d3e20323634363435.roa (raw, json)
Hash identifier:          BHB1JHhZpSkoG54KZP9pKgtgEOd7Zn2FR76bGvK/gV0=
Subject key identifier:   AA:A8:7F:EE:50:7E:68:4F:04:B1:F2:A8:DE:7A:6D:6D:FA:BD:5A:E5
Certificate issuer:       /CN=25C15E195BF2ED33877938F33D7C7B208AE94115
Certificate serial:       6552EFB05DFE49A610F43171625AFA80E7919CA9
Authority key identifier: 25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3138362e3139302e3233322e302f32342d3234203d3e20323634363435.roa
Signing time:             Tue 23 Jul 2024 15:50:05 +0000
ROA not before:           Tue 23 Jul 2024 15:45:05 +0000
ROA not after:            Tue 22 Jul 2025 15:50:05 +0000
asID:                     264645
IP address blocks:        186.190.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl
                          rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:52:ef:b0:5d:fe:49:a6:10:f4:31:71:62:5a:fa:80:e7:91:9c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C15E195BF2ED33877938F33D7C7B208AE94115
        Validity
            Not Before: Jul 23 15:45:05 2024 GMT
            Not After : Jul 22 15:50:05 2025 GMT
        Subject: CN=AAA87FEE507E684F04B1F2A8DE7A6D6DFABD5AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:db:97:00:bf:83:17:4b:86:42:8f:e8:df:48:
                    34:eb:4d:34:f3:92:29:0d:d8:e9:9f:68:e0:8b:60:
                    2e:77:58:75:7d:7e:83:f9:c4:dc:e9:5e:35:a2:5c:
                    67:72:42:a6:6b:26:34:59:f5:d9:13:91:09:c3:88:
                    dd:1e:e3:63:7e:a9:4c:4c:8c:cf:b5:34:b2:21:c9:
                    44:a3:c1:0a:25:e9:63:41:10:e8:c2:d5:58:c2:66:
                    b2:27:f6:2c:ff:9c:24:b7:e6:88:ec:43:c5:18:a5:
                    da:35:f4:7d:33:a6:9d:db:53:97:b4:f4:a2:a3:5f:
                    f7:24:75:c7:0b:01:28:b2:11:d9:45:d2:77:a7:e5:
                    9c:55:b5:88:81:b9:16:b7:39:88:9b:d7:e1:de:24:
                    e0:d0:15:14:82:75:8a:8e:ab:b2:8d:af:16:86:e0:
                    3b:67:e6:fb:06:39:cb:d0:80:d0:84:4a:bc:89:a4:
                    11:7e:78:21:8b:21:7e:2e:86:53:34:66:67:8c:bd:
                    50:30:5a:a9:4d:2e:3f:72:37:41:94:77:7b:ee:15:
                    5f:ba:1c:c3:69:46:46:a4:3f:38:2d:b0:6c:d3:76:
                    f8:ee:71:a8:b6:a7:ba:fe:e6:52:f2:18:1a:82:7a:
                    54:6f:76:48:f5:1d:35:33:77:f4:db:ad:30:68:cd:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A8:7F:EE:50:7E:68:4F:04:B1:F2:A8:DE:7A:6D:6D:FA:BD:5A:E5
            X509v3 Authority Key Identifier:
                keyid:25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3138362e3139302e3233322e302f32342d3234203d3e20323634363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:00:5d:e8:a1:bb:20:76:27:95:f4:ec:5b:ee:c4:ac:83:4a:
         6c:6d:85:df:f4:0e:de:c1:4d:57:c1:af:a0:d2:d5:a8:4b:c1:
         89:24:11:27:d5:f6:21:28:c8:1f:0a:e7:2a:a7:e9:cc:49:f3:
         b1:47:fb:2a:45:83:8a:6b:5b:ca:8d:b9:2c:97:3d:df:a4:50:
         72:ea:f1:00:e9:ce:78:15:90:aa:54:03:0c:39:d2:35:bf:db:
         c6:a1:2f:d5:b9:3f:13:5f:13:fd:8f:06:9a:96:82:6c:b4:0a:
         99:32:91:06:ae:c0:df:5e:d5:d5:df:57:73:9e:59:55:42:a6:
         87:62:dd:3d:e6:77:12:c1:5b:db:58:6d:89:57:2f:b9:dd:3d:
         e0:5f:08:c0:59:62:f4:8e:bd:0b:13:ff:04:77:cc:88:eb:0a:
         63:94:79:87:28:7d:b7:92:68:18:6c:2c:02:ba:9b:f2:bf:c6:
         c0:42:e5:74:db:a0:e5:fb:1b:20:64:65:ad:80:50:89:fe:45:
         54:cf:c8:2b:c0:ed:91:20:4b:a2:fd:c9:0b:26:08:05:ec:e1:
         34:9a:7f:cb:e7:28:aa:56:12:c9:7f:ed:c6:ab:b4:c0:69:fd:
         fd:ef:97:7a:2d:d9:38:82:67:1c:be:56:da:cb:81:1e:5d:f7:
         b9:32:2b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:30 2024 by rpki-client on console-fra.rpki-client.org