Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133352e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3133352e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          mertVVayseqWuFE6gl5sqgLiZ9iuyTvIwXKkvcO6mZM=
Subject key identifier:   B6:B7:37:BB:FC:95:95:50:13:8C:14:9F:4C:1E:4F:BC:7B:E3:AA:C3
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       5A4FFEF02A769D042F59290BCAB9594218871392
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133352e302f32342d3234203d3e203232393237.roa
Signing time:             Fri 22 Nov 2024 20:25:00 +0000
ROA not before:           Fri 22 Nov 2024 20:20:00 +0000
ROA not after:            Fri 21 Nov 2025 20:25:00 +0000
asID:                     22927
IP address blocks:        186.141.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4f:fe:f0:2a:76:9d:04:2f:59:29:0b:ca:b9:59:42:18:87:13:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Nov 22 20:20:00 2024 GMT
            Not After : Nov 21 20:25:00 2025 GMT
        Subject: CN=B6B737BBFC959550138C149F4C1E4FBC7BE3AAC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:5e:64:d8:f8:36:f5:bb:d9:35:b8:c7:21:
                    ac:ac:d8:c7:e5:ed:9d:6f:8f:13:b2:0f:5e:d4:9a:
                    d8:08:d2:c7:20:9e:20:68:2f:7d:3e:bd:21:4b:15:
                    35:a0:15:6e:cb:75:9e:08:c8:e9:3e:42:42:a1:52:
                    8d:18:38:bd:25:67:d7:90:11:d1:70:d6:1f:84:6d:
                    99:78:a7:24:fb:63:4c:f3:62:37:02:5c:e0:df:fb:
                    07:92:34:fd:b2:e4:01:ad:60:e0:93:76:29:00:a5:
                    27:32:26:62:46:a0:49:29:3f:48:ca:72:68:08:db:
                    ae:34:8a:32:6c:b6:95:d1:f3:78:90:7d:a1:ef:0f:
                    cc:99:d9:4e:e5:38:b1:7d:e9:48:07:6d:63:95:2b:
                    d8:31:63:eb:07:4f:92:21:46:05:04:88:45:2d:97:
                    fd:00:1d:17:76:e3:0b:1c:a1:89:9f:52:d9:1e:f3:
                    ea:c1:e6:4e:67:79:3d:6e:18:a3:e1:0a:96:ee:46:
                    cc:13:7f:e1:d5:79:1e:46:f9:4e:04:8e:d5:38:1c:
                    39:11:d4:34:6c:ee:bb:a8:a9:12:0b:0e:75:a3:77:
                    01:22:3f:26:c4:86:fb:57:91:44:67:80:25:f4:01:
                    2f:c5:6b:2b:2f:48:24:12:3f:32:a2:73:7a:50:7d:
                    10:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:37:BB:FC:95:95:50:13:8C:14:9F:4C:1E:4F:BC:7B:E3:AA:C3
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133352e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:e7:0b:43:22:48:0e:31:6b:a6:f1:7d:b2:b3:be:7c:fc:51:
         66:f2:60:fb:c5:12:18:93:e8:39:20:60:4d:1b:fc:d8:93:c8:
         a5:e6:86:a9:7e:60:ce:41:94:b6:43:94:22:9c:78:1f:37:9c:
         52:00:49:d3:4d:63:b5:ff:13:0e:6f:e2:8a:0a:30:35:ad:38:
         93:c5:72:4d:ed:5b:81:ce:05:e5:6f:45:b2:8a:5a:dd:3e:ac:
         11:a0:88:c0:f8:58:23:83:18:de:53:85:39:07:5e:94:0a:e6:
         77:03:b0:2b:36:a2:7c:77:64:67:c7:59:76:4c:83:8f:4d:5c:
         8f:13:5f:ba:3e:bb:cb:af:4c:30:71:c0:4c:7a:80:13:c4:55:
         59:6e:42:88:11:d3:67:86:39:ac:ac:61:4c:e5:33:86:6f:6b:
         96:a1:e7:ff:5b:54:f1:e1:c1:a9:4c:db:b9:b9:b9:a0:16:27:
         6a:57:ee:32:c4:b6:e7:b4:0f:10:ac:b9:57:94:0d:e7:91:23:
         c2:53:cc:58:d1:c0:dd:1e:18:d1:e0:ad:15:20:e4:fd:49:bf:
         41:39:18:27:51:5b:fc:ea:b8:d5:25:09:a7:01:fa:07:71:94:
         96:14:1e:74:36:3c:45:d9:92:48:a6:3a:4a:49:15:19:1f:b5:
         5f:65:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:58 2024 by rpki-client on console-ams.rpki-client.org