Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/3138362e3139342e3136302e302f32322d3232203d3e20323730303331.roa
File:                     3138362e3139342e3136302e302f32322d3232203d3e20323730303331.roa (raw, json)
Hash identifier:          2OoJJUvy/2IinWb0feWijSdGBx7d4Qc+Izb+Pz6uRM4=
Subject key identifier:   95:0A:5E:DC:6A:30:27:59:47:F4:55:AA:11:29:77:77:95:D7:FD:7C
Certificate issuer:       /CN=0E87CA1A33782833150C7C0561C3E8EC5CBEAB37
Certificate serial:       6C31B168B25C3AC7417B9CA47576703AED87BBDF
Authority key identifier: 0E:87:CA:1A:33:78:28:33:15:0C:7C:05:61:C3:E8:EC:5C:BE:AB:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/3138362e3139342e3136302e302f32322d3232203d3e20323730303331.roa
Signing time:             Tue 05 Mar 2024 18:06:43 +0000
ROA not before:           Tue 05 Mar 2024 18:01:43 +0000
ROA not after:            Tue 04 Mar 2025 18:06:43 +0000
asID:                     270031
IP address blocks:        186.194.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:31:b1:68:b2:5c:3a:c7:41:7b:9c:a4:75:76:70:3a:ed:87:bb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E87CA1A33782833150C7C0561C3E8EC5CBEAB37
        Validity
            Not Before: Mar  5 18:01:43 2024 GMT
            Not After : Mar  4 18:06:43 2025 GMT
        Subject: CN=950A5EDC6A30275947F455AA1129777795D7FD7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:be:45:6f:19:17:9e:76:3b:41:08:4d:e8:
                    bd:73:bf:aa:53:2b:b0:3a:2d:24:6b:99:a5:3e:e2:
                    e8:db:4a:6f:95:03:45:44:09:c5:4b:4e:a2:59:26:
                    57:81:c0:3c:6b:bb:02:f2:4e:4b:b0:46:1e:c7:fb:
                    4b:2e:c2:6c:ed:cf:ab:b1:94:63:69:f0:4b:22:1e:
                    02:48:85:30:13:59:ce:77:cc:2a:20:39:37:50:dc:
                    7b:e6:f2:f8:4d:1f:44:50:23:2a:c3:73:91:75:c3:
                    c9:0f:cb:9c:b4:97:ff:ab:8f:dd:6a:44:1b:84:f2:
                    1a:bf:9c:6c:17:d6:bc:be:a8:d3:5c:c6:62:46:35:
                    42:b4:8e:b5:21:e3:12:dc:d9:30:08:04:20:e0:6c:
                    fd:12:f6:7f:2e:94:74:cf:20:b4:88:90:d1:8a:5a:
                    36:bb:60:ab:cb:52:77:0a:97:7a:77:61:10:54:61:
                    9b:62:d8:b3:44:16:f9:0b:18:0b:dd:62:ba:f8:c5:
                    ed:48:b0:8c:eb:0c:0b:45:ec:ac:f2:91:6d:d9:ab:
                    62:14:6f:b3:bc:11:d2:45:32:92:30:30:4e:c5:86:
                    ff:c2:f5:97:b5:86:be:8d:44:bb:cc:e2:79:46:ce:
                    a6:ef:75:d0:e8:70:ff:a5:1f:4e:e8:f9:47:f1:91:
                    a5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0A:5E:DC:6A:30:27:59:47:F4:55:AA:11:29:77:77:95:D7:FD:7C
            X509v3 Authority Key Identifier:
                keyid:0E:87:CA:1A:33:78:28:33:15:0C:7C:05:61:C3:E8:EC:5C:BE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/3138362e3139342e3136302e302f32322d3232203d3e20323730303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:7a:73:1e:1a:0a:a9:ae:8a:f7:c5:8c:47:a1:6e:32:94:f6:
         61:83:30:37:b6:ff:71:ca:f2:e9:15:d6:12:7f:43:32:ff:d0:
         66:e2:4e:4b:ec:fe:f9:96:c4:f6:a0:ac:7a:1c:fe:19:c1:a0:
         dd:73:a2:a1:f5:16:ab:e8:30:6a:a7:ba:94:13:d2:5a:e9:4c:
         ee:18:2c:68:f0:8b:ec:75:85:4b:bc:95:13:32:97:aa:74:19:
         c3:31:6c:11:5c:0c:7e:12:97:0a:3c:10:2d:58:b9:6b:be:c8:
         56:ed:a8:a3:d4:97:ed:c3:42:fb:e0:3c:b3:e3:85:32:7c:3e:
         6b:07:69:d2:3c:ad:0f:42:a4:44:0c:b5:aa:46:87:de:92:5c:
         d4:98:18:87:7c:89:93:bc:2c:36:8c:1e:41:d5:25:da:01:33:
         d4:14:7d:6d:1c:4a:13:1a:64:09:57:d2:bd:80:97:be:bb:77:
         93:04:fd:82:1f:ac:ea:14:88:42:6e:8c:4d:4e:32:98:10:ea:
         d4:fc:e8:2e:74:38:c1:2f:ee:4c:27:39:04:cd:d6:35:7f:04:
         91:e1:00:03:6d:ce:18:07:9a:a2:90:bb:b6:40:f2:07:89:26:
         32:a9:95:ad:6c:a4:ec:44:4f:ec:fa:2c:e8:e8:de:b3:93:85:
         0b:b1:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org