Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139382e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3139382e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          VrQnTh/zahA98qjWSa9b5Ut2AqmYpi2+6NO3XuOzndo=
Subject key identifier:   F0:E0:89:E1:03:23:28:33:0C:4C:90:1E:BB:83:7E:AB:6A:C1:96:71
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       6C17083F8A92442CF80BA50BA4023E9A2CBD5FB9
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139382e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 16 Oct 2024 17:25:00 +0000
ROA not before:           Wed 16 Oct 2024 17:20:00 +0000
ROA not after:            Wed 15 Oct 2025 17:25:00 +0000
asID:                     22927
IP address blocks:        186.141.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:17:08:3f:8a:92:44:2c:f8:0b:a5:0b:a4:02:3e:9a:2c:bd:5f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Oct 16 17:20:00 2024 GMT
            Not After : Oct 15 17:25:00 2025 GMT
        Subject: CN=F0E089E1032328330C4C901EBB837EAB6AC19671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:98:d1:de:b6:df:9d:62:c4:5e:4b:a8:87:
                    33:3d:34:94:f0:af:8c:0a:aa:cd:26:d1:1b:49:fb:
                    d8:f1:9f:b5:ba:64:3b:29:e2:ff:8e:99:52:5c:29:
                    ac:21:08:89:20:9b:0b:a8:c2:a6:d7:f4:84:31:ef:
                    e3:e1:d2:c4:88:c2:6e:82:d6:92:b1:a5:4c:ca:df:
                    02:26:25:15:7a:b2:bf:5a:94:be:c1:e7:3c:15:4d:
                    95:72:44:c1:db:2f:e6:46:11:c4:23:40:07:3b:9b:
                    cb:ba:26:7f:76:8e:44:26:a9:d7:3f:0b:37:26:a7:
                    8b:c5:44:fc:76:a6:3f:46:47:c3:b6:24:90:52:fc:
                    01:b5:e1:ac:c5:12:b1:60:89:1b:25:a5:b7:2d:d0:
                    1c:24:90:e9:25:2a:b1:98:71:78:04:73:e7:cb:88:
                    83:f0:7a:9c:68:75:a1:2f:40:93:28:c4:f7:ef:54:
                    a2:ba:c0:63:50:66:5a:31:ae:83:05:53:45:fc:cb:
                    bb:e4:42:28:4c:b1:74:e4:ba:79:52:e1:b7:f0:6a:
                    29:19:75:14:50:28:5e:24:94:2f:e5:e8:28:45:d1:
                    29:8c:4b:59:03:fd:02:9b:ea:5f:0a:d6:e4:ad:bb:
                    a7:b7:6d:e8:e8:6e:bd:8d:a6:e7:f6:74:62:a0:3e:
                    18:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E0:89:E1:03:23:28:33:0C:4C:90:1E:BB:83:7E:AB:6A:C1:96:71
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139382e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:57:56:4e:50:ef:ee:4b:81:71:1e:1e:28:32:5c:f3:cc:f6:
         ed:d6:45:9a:03:46:69:59:bb:3b:18:97:c9:1c:fc:ca:0e:24:
         e4:e8:bb:a2:99:cb:9a:2d:f7:ba:fd:3c:74:24:15:00:4b:04:
         eb:57:50:1f:bf:57:30:a6:9a:be:70:82:f8:f3:e9:38:47:79:
         d8:ed:86:16:b6:37:a1:7f:5f:58:cd:01:7b:72:1d:5e:81:65:
         38:da:9a:f3:13:17:7a:74:d1:b4:34:0b:6e:9f:9b:f8:3e:9c:
         a1:d4:cc:8e:59:5b:a3:da:83:2f:15:6f:03:4d:9a:87:e5:48:
         75:7c:d2:20:27:72:c0:6b:6d:60:d5:fa:d4:fb:db:f9:c2:71:
         a4:1c:02:fb:62:a9:67:5a:33:d6:71:8f:c5:23:a5:03:4f:6a:
         85:af:47:b2:2d:56:c8:8b:4c:4e:8a:af:67:d2:34:11:bc:fa:
         a5:9f:0f:5f:ad:88:9e:26:4d:4c:e7:e1:32:6a:6b:53:64:29:
         b4:42:36:38:12:ed:8c:74:c0:e3:f8:24:b0:ba:23:e6:2c:e3:
         0a:05:08:c5:64:1b:16:b9:a7:a8:00:91:1a:b5:cb:05:b0:dc:
         ba:e9:aa:1c:c7:d0:3a:48:06:b3:b6:dd:55:77:ac:a3:9a:7e:
         e2:68:e2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org