Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133382e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3133382e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          0p7+/VkWf2xCSIG/84hrVOoiqHMo5NDQfwfug5ExswI=
Subject key identifier:   EF:D6:EE:5C:16:42:7B:DF:8E:79:FA:A8:0B:F5:E4:A5:75:C4:4C:01
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       35BC488E5957B0B8C4A6270F7D2AB452303B7ED3
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133382e302f32342d3234203d3e203232393237.roa
Signing time:             Fri 22 Nov 2024 20:25:00 +0000
ROA not before:           Fri 22 Nov 2024 20:20:00 +0000
ROA not after:            Fri 21 Nov 2025 20:25:00 +0000
asID:                     22927
IP address blocks:        186.141.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bc:48:8e:59:57:b0:b8:c4:a6:27:0f:7d:2a:b4:52:30:3b:7e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Nov 22 20:20:00 2024 GMT
            Not After : Nov 21 20:25:00 2025 GMT
        Subject: CN=EFD6EE5C16427BDF8E79FAA80BF5E4A575C44C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:da:1d:53:0d:67:36:23:35:80:7c:e2:4c:fa:
                    19:20:4b:7d:48:ce:34:0b:e4:e2:e9:b9:57:36:0f:
                    47:a7:cd:67:97:0c:3f:09:42:5b:7a:9b:27:4f:c0:
                    d5:3e:2b:00:a6:96:eb:7e:76:32:8e:0f:44:13:59:
                    ef:da:67:c1:80:72:7c:69:e4:c1:42:5d:37:e2:da:
                    05:38:b8:77:25:40:d0:49:3e:33:bc:b2:24:c4:64:
                    e0:be:ec:85:70:fc:22:f1:ad:6b:de:56:b6:d3:48:
                    53:68:8c:0b:35:de:71:ca:6a:47:5a:38:fa:c9:ad:
                    c0:51:82:91:19:46:0e:43:59:22:11:c3:d2:93:9d:
                    a7:d1:83:c6:74:ae:2a:66:de:a6:73:35:a2:c6:c8:
                    69:6d:49:be:f8:d0:9f:aa:67:55:1e:48:8b:f5:91:
                    2c:0b:ba:02:95:ab:b8:49:6d:45:82:f0:58:45:cf:
                    ed:61:f7:29:ce:22:46:85:5a:8a:59:10:8d:ce:3a:
                    b9:77:47:09:36:44:c2:bb:48:e6:f8:78:97:8b:f7:
                    a6:22:f8:4f:66:be:e8:ff:2f:7a:71:1e:b7:c2:58:
                    e5:9e:ae:d5:20:6c:72:75:83:e5:a5:da:d7:aa:05:
                    12:0f:65:54:d8:15:01:ab:e5:41:1e:9a:bf:0a:86:
                    f5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D6:EE:5C:16:42:7B:DF:8E:79:FA:A8:0B:F5:E4:A5:75:C4:4C:01
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133382e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:9c:9a:12:7f:65:2f:85:24:48:19:20:e9:af:71:52:29:
         c7:72:05:38:d2:96:4c:ff:38:87:03:4d:89:28:02:ef:5b:04:
         ea:cd:43:fa:6b:0c:ec:2f:a9:fb:d1:23:3e:dd:41:a6:a6:31:
         41:d3:5f:91:5f:7d:8a:29:db:78:aa:ac:7c:f7:4c:0c:c4:6b:
         15:25:38:87:5a:57:93:eb:4c:d7:4e:65:f1:17:2a:92:49:68:
         6c:90:a2:a2:4a:67:d3:3d:df:42:8e:b3:93:c5:55:87:bd:43:
         30:52:65:fe:bd:b6:f3:7e:da:99:d9:f6:81:7b:a9:2c:88:1d:
         4c:5c:9b:5e:f6:72:77:c2:cb:f2:8b:a3:a1:8b:ed:73:1c:08:
         72:f8:d4:dc:39:f5:69:d0:75:cf:1f:5b:27:83:26:77:a4:19:
         a5:52:3e:92:39:90:2d:63:94:49:09:40:df:76:d1:71:66:8b:
         29:ac:6c:07:d0:d0:64:95:23:96:af:c5:cb:54:6e:2a:9a:b9:
         e5:ea:f2:f4:c4:1f:b1:5f:74:0c:9a:bd:2b:f5:95:f6:a0:f8:
         44:38:dd:a8:bb:57:c9:4a:5d:a5:47:33:68:65:82:f6:5f:bb:
         d1:7d:83:d8:6a:ce:af:1f:ef:3d:0b:c1:77:6b:50:fb:17:02:
         5f:f8:a6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:34:17 2024 by rpki-client on console-fra.rpki-client.org