Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3138362e3139302e3233352e302f32342d3234203d3e203237363630.roa
File:                     3138362e3139302e3233352e302f32342d3234203d3e203237363630.roa (raw, json)
Hash identifier:          PocJfg05d43ES/IGzIAZ+J5sgCvEnFBvbSyTRvTNTCw=
Subject key identifier:   BE:6C:02:6E:30:50:B2:AB:27:F3:56:08:1D:6F:6F:D8:92:4C:37:E4
Certificate issuer:       /CN=25C15E195BF2ED33877938F33D7C7B208AE94115
Certificate serial:       5971DDDCA27F693137A826D6622654CDBD8FAE8B
Authority key identifier: 25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3138362e3139302e3233352e302f32342d3234203d3e203237363630.roa
Signing time:             Tue 23 Jul 2024 15:50:04 +0000
ROA not before:           Tue 23 Jul 2024 15:45:04 +0000
ROA not after:            Tue 22 Jul 2025 15:50:04 +0000
asID:                     27660
IP address blocks:        186.190.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl
                          rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:71:dd:dc:a2:7f:69:31:37:a8:26:d6:62:26:54:cd:bd:8f:ae:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C15E195BF2ED33877938F33D7C7B208AE94115
        Validity
            Not Before: Jul 23 15:45:04 2024 GMT
            Not After : Jul 22 15:50:04 2025 GMT
        Subject: CN=BE6C026E3050B2AB27F356081D6F6FD8924C37E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:fb:cf:11:f3:0d:59:34:b8:ff:fb:44:f7:
                    d5:13:c5:5b:6e:b8:cc:b6:95:c2:10:ca:0c:3e:dc:
                    34:53:59:c9:15:8d:b1:03:b6:34:b4:7a:59:20:34:
                    7d:4d:21:07:39:c3:04:b4:43:8e:1f:9f:6b:0e:e9:
                    0c:5b:8c:12:39:0e:5d:c8:16:42:4e:6f:f2:45:ee:
                    a0:c0:87:79:9a:24:0d:75:5d:f8:d4:21:6c:b7:83:
                    80:a1:1f:8a:1b:7f:bb:a3:c2:dd:e1:51:46:b5:e0:
                    e4:a6:a2:1a:f3:dc:b6:5f:ea:a6:85:73:c0:c6:a6:
                    1a:b9:2c:4c:4c:2a:fc:41:48:c0:5e:1b:40:23:a2:
                    a1:6c:03:0f:61:a4:16:86:9f:af:ab:31:44:0f:31:
                    fb:01:4c:9f:1e:05:b4:68:7f:8b:dc:59:86:8c:f0:
                    39:ea:62:35:86:2d:9f:f9:40:c2:13:dc:2d:30:07:
                    22:f1:e7:38:56:d7:a7:97:1d:a6:75:09:9c:cd:bb:
                    cb:05:1d:71:9b:56:d7:5a:c7:20:41:60:9c:4e:b4:
                    c8:63:57:e6:30:00:bf:80:06:73:96:35:94:90:6b:
                    d9:b2:af:8b:ff:5d:f5:e0:f8:dc:c5:7a:6f:0d:bb:
                    73:6f:c5:4a:a7:01:42:a6:e0:a3:67:a6:6f:ec:21:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6C:02:6E:30:50:B2:AB:27:F3:56:08:1D:6F:6F:D8:92:4C:37:E4
            X509v3 Authority Key Identifier:
                keyid:25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3138362e3139302e3233352e302f32342d3234203d3e203237363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:e4:f0:08:0d:a4:ff:0a:cd:f3:93:7c:ce:01:b5:b5:cf:ab:
         fc:79:40:2d:4a:17:ec:f6:5f:9b:59:c8:b2:6d:fb:de:e0:e8:
         1f:ff:f1:bd:fb:74:f6:f5:24:b3:a2:a6:77:5d:76:24:f1:7f:
         14:2d:c0:00:8c:5b:b2:9d:1e:4a:26:1f:bc:60:63:2f:d4:48:
         74:79:d4:c3:5a:dd:0a:7a:b9:0d:ac:3e:e2:2d:29:83:c9:75:
         c4:26:7b:0b:e3:83:aa:fc:9e:3e:8e:42:25:16:07:16:ca:58:
         9a:26:55:b6:60:93:db:e8:4d:7a:2a:16:78:c0:f1:16:2b:84:
         1c:be:57:c7:e5:3b:49:4e:c4:90:dc:0c:34:66:3b:93:42:7b:
         88:5d:8d:f4:8b:84:4d:c1:10:3f:6c:be:02:b4:35:e3:d0:dd:
         a6:19:09:56:61:cc:07:ad:a5:95:ae:56:81:12:29:9a:6f:4a:
         bc:3c:7b:33:c4:a4:48:56:ca:15:58:31:79:99:39:2a:98:14:
         b1:73:79:e8:8a:e6:a2:54:97:40:4f:6f:23:44:8b:b2:23:82:
         99:52:28:7a:e2:ee:ac:c0:13:6a:3d:4a:dd:c8:c2:6a:a3:cb:
         63:00:aa:67:00:90:98:2c:fd:cc:04:c6:14:41:97:5e:95:2a:
         6c:42:d2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 17:01:07 2024 by rpki-client on console-fra.rpki-client.org