Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139392e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3139392e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          zu02SfovlRbQMVXVtUcuPzSKOsk90CiwjmMq/3GP2VY=
Subject key identifier:   09:F6:96:57:CF:4D:C1:E1:07:45:61:75:34:DB:05:72:76:74:2A:0A
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       4FD81100E4ECE41C090EBED1EB2760E46D67D6D6
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139392e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 16 Oct 2024 17:25:01 +0000
ROA not before:           Wed 16 Oct 2024 17:20:01 +0000
ROA not after:            Wed 15 Oct 2025 17:25:01 +0000
asID:                     22927
IP address blocks:        186.141.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d8:11:00:e4:ec:e4:1c:09:0e:be:d1:eb:27:60:e4:6d:67:d6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Oct 16 17:20:01 2024 GMT
            Not After : Oct 15 17:25:01 2025 GMT
        Subject: CN=09F69657CF4DC1E10745617534DB057276742A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bd:f5:cf:1d:a0:fe:70:a3:0b:bc:f1:9b:3e:
                    06:fa:eb:c0:7d:73:a1:1a:f2:65:1b:42:25:7a:48:
                    7c:19:61:08:9a:d7:89:0e:8a:6a:c8:49:1a:d5:90:
                    cf:e9:d8:b7:1b:1c:7e:b1:fd:69:92:bb:7f:16:15:
                    66:95:de:fe:c1:92:d1:8c:49:37:5f:7f:53:41:c0:
                    f7:e9:53:ef:54:a8:b9:92:4d:33:3c:34:85:64:c2:
                    ec:ea:9e:08:7f:5b:65:81:91:49:62:f4:05:33:55:
                    3c:7f:07:a2:3b:4a:58:c5:52:45:25:2c:ca:3a:59:
                    cb:97:5e:a5:33:d3:26:a9:09:06:e0:33:13:e5:1a:
                    ea:45:bc:76:b1:c7:ef:bb:ae:8e:67:b1:ce:a8:62:
                    7a:c8:2c:25:4f:51:9e:29:05:74:2d:60:53:d1:94:
                    27:3f:9a:68:34:6f:d6:b1:27:08:c0:85:7f:b9:e5:
                    47:82:e7:4c:b5:11:cb:13:e9:85:fe:ca:b9:66:f4:
                    23:94:ac:50:dd:e0:7e:7a:5f:86:26:83:dd:3a:91:
                    b3:af:2c:8a:b3:b4:4b:d0:04:29:8b:67:62:da:4a:
                    34:5b:4b:80:c3:60:c9:3c:b4:92:d1:0f:35:3c:2f:
                    9d:1b:08:a0:55:d6:1e:63:3c:75:f8:6d:be:c2:16:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F6:96:57:CF:4D:C1:E1:07:45:61:75:34:DB:05:72:76:74:2A:0A
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3139392e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:44:96:9c:24:ce:bb:db:aa:80:e7:8a:7b:f8:f0:12:e4:ee:
         21:29:b4:ac:1a:1b:a9:fe:79:00:9a:5f:16:d1:b5:09:04:24:
         88:ac:bc:7b:10:bd:2a:bf:2d:83:5d:dc:70:46:1e:d9:b0:1c:
         1a:1d:a5:59:da:d9:f5:57:bb:59:d8:e2:2a:e5:02:8a:ea:77:
         10:fb:1d:fd:0f:85:d1:8f:f5:d7:2f:20:92:bd:a0:2e:11:34:
         8e:c5:05:d3:d7:42:69:ec:49:e3:92:1e:f5:b6:b9:32:87:3a:
         60:c4:71:cf:d8:28:ce:5a:f3:e6:07:9b:28:b4:ca:f3:25:01:
         5a:1b:75:15:a7:51:31:4a:60:3d:0e:46:9d:60:cf:07:a8:24:
         f8:33:c4:83:5d:02:e8:ea:1b:b3:2a:47:33:f3:24:5c:cb:3f:
         85:22:22:66:26:4a:02:1e:ff:a3:34:47:2a:6e:b1:0f:dc:77:
         f0:12:f3:a7:6a:d9:3c:3e:b0:83:e7:e0:43:7d:9a:76:67:1f:
         58:9c:51:1e:cd:d7:ac:43:f1:3b:18:0e:38:1b:68:b0:b5:52:
         4b:68:cb:f6:a5:69:17:18:17:e3:c8:40:72:63:89:57:4f:6a:
         42:d5:91:90:96:e5:b3:3b:5a:91:97:29:7f:d4:99:84:0e:ce:
         38:29:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org