Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139372e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3139372e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          /40pTkBfAeYexDnnI3wt2bTGQa0sPje5f2H3tMmh0dk=
Subject key identifier:   F8:54:45:AE:5F:7D:EE:D7:CB:94:83:99:24:C8:7D:D3:BF:D0:1E:10
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       4532D83D7555F8291C9ACE4710C2BADB7B715918
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139372e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 16 Oct 2024 17:25:01 +0000
ROA not before:           Wed 16 Oct 2024 17:20:01 +0000
ROA not after:            Wed 15 Oct 2025 17:25:01 +0000
asID:                     22927
IP address blocks:        186.141.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:32:d8:3d:75:55:f8:29:1c:9a:ce:47:10:c2:ba:db:7b:71:59:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Oct 16 17:20:01 2024 GMT
            Not After : Oct 15 17:25:01 2025 GMT
        Subject: CN=F85445AE5F7DEED7CB94839924C87DD3BFD01E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d5:9b:90:0d:4f:25:3c:77:3b:76:bd:1a:bc:
                    d1:a4:ff:88:a5:37:32:79:c0:43:dd:cb:cb:30:1d:
                    d1:a3:c8:2a:ff:bc:1b:85:94:17:38:dc:8c:a5:6e:
                    c4:f8:85:95:99:a1:64:e0:7e:b5:95:81:7e:82:38:
                    4f:0f:01:45:cf:3d:b3:36:a6:5b:27:fe:ee:1c:5e:
                    a9:80:cc:b3:7c:ce:ca:ac:38:f8:fe:cf:3f:0c:ec:
                    4e:27:af:26:c5:50:24:50:79:86:3c:3e:63:eb:dc:
                    e3:ed:16:c8:1b:17:43:b0:fb:ff:22:ec:c5:b0:93:
                    c0:70:62:96:e1:bf:5a:c1:a3:08:c4:08:10:03:17:
                    c7:3a:88:15:35:ea:43:00:92:ab:84:d9:56:ac:e2:
                    b5:0b:06:73:e9:67:39:14:d0:c9:fa:c7:69:8e:9f:
                    5e:9d:df:8f:3d:96:ce:42:dd:b1:78:0b:a9:dd:be:
                    51:22:30:a6:07:f3:69:15:59:31:0a:21:3b:b3:0b:
                    30:25:46:48:70:82:0d:a4:29:e0:29:6f:c0:04:c3:
                    a0:83:05:32:6d:9b:7a:59:4d:6e:51:0f:d9:6c:5a:
                    3f:0f:b9:49:63:49:74:ca:ea:97:01:a3:b9:e5:8d:
                    04:d0:cd:38:9a:f1:70:39:d1:a0:62:81:e4:8a:bb:
                    27:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:54:45:AE:5F:7D:EE:D7:CB:94:83:99:24:C8:7D:D3:BF:D0:1E:10
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139372e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:0f:8a:d9:96:a1:24:37:bf:84:26:b5:9d:68:c2:90:f1:07:
         8e:02:09:3c:8a:c6:b6:3f:85:0a:3a:39:83:31:a1:15:00:cb:
         a0:69:b4:78:12:55:f9:49:00:8c:9f:6b:24:0c:a9:12:e2:5a:
         68:6e:7c:1a:8e:12:b8:c6:af:3c:6d:34:7f:96:fe:38:9e:89:
         ba:18:98:66:d9:09:44:d8:28:b1:d6:3f:e2:79:11:6a:00:2d:
         8b:81:a4:c2:14:f7:e9:cd:da:1c:d2:cc:b7:b8:0b:98:2e:cf:
         c7:67:64:69:42:73:a9:ab:3e:3d:ef:5e:6c:0e:d5:2e:6a:62:
         d0:ba:70:8b:55:0e:27:db:2c:7d:fa:19:4e:28:88:c1:aa:93:
         5a:3b:5f:85:35:8d:fe:b5:35:46:eb:5a:fa:d7:b1:86:ac:fd:
         f0:0d:68:3a:e6:57:a1:a9:f4:30:ee:61:7f:52:ce:0b:f5:cc:
         b8:67:1b:78:03:55:ea:f3:a4:82:c9:c5:1a:0c:ec:68:58:d1:
         25:ff:8b:d5:e3:71:42:54:7e:8f:c4:7e:d3:b4:e3:85:ba:f8:
         a9:d4:e4:55:13:f4:2b:8a:09:4e:66:f7:bf:ac:8f:60:fb:b4:
         8c:fa:ac:7d:9a:73:16:13:cd:55:e8:1c:ab:2b:13:cf:7e:88:
         b3:26:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org