Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232372e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3232372e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          uR6zP9TZnZEGT3QYappT4CG7Ky2D7hl91eRYTFCNH28=
Subject key identifier:   EE:24:75:75:3C:76:CD:62:8E:D6:44:33:06:65:07:2B:E2:0F:6C:5D
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       0AF1AF8BD0EC2D5E44627A51270443763743F3D8
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232372e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 05 Mar 2024 18:07:41 +0000
ROA not before:           Tue 05 Mar 2024 18:02:41 +0000
ROA not after:            Tue 04 Mar 2025 18:07:41 +0000
asID:                     22927
IP address blocks:        186.141.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f1:af:8b:d0:ec:2d:5e:44:62:7a:51:27:04:43:76:37:43:f3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:41 2024 GMT
            Not After : Mar  4 18:07:41 2025 GMT
        Subject: CN=EE2475753C76CD628ED644330665072BE20F6C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:49:51:5f:bb:4e:0c:bb:98:d4:2f:6b:02:
                    86:a5:28:11:3c:c2:e8:46:5d:58:cd:cf:94:f5:46:
                    56:ac:65:5b:92:a4:b8:70:0e:14:d1:f1:b7:52:01:
                    39:b8:41:a5:67:bd:2e:8f:c2:c8:f8:28:83:0a:6b:
                    8f:cd:75:eb:eb:f7:64:13:27:32:f2:99:83:57:5a:
                    48:2d:e9:d4:76:3a:9c:67:75:11:b0:74:0e:75:68:
                    5d:b6:f3:da:2c:d0:75:46:90:45:09:c8:c3:90:97:
                    d7:63:46:b9:a1:b0:0f:25:fa:31:04:31:67:a5:54:
                    7b:4f:12:7d:f5:20:16:d2:98:02:8f:60:cf:b3:17:
                    f0:3f:45:2a:3c:94:26:09:29:2d:9b:1e:e6:0e:36:
                    f4:08:34:0d:f7:ab:30:12:64:f3:95:40:6a:40:9b:
                    53:7a:77:26:68:8c:20:06:32:9a:ff:eb:b4:90:3a:
                    ec:c8:29:2d:ff:5a:22:de:d0:96:46:4b:8c:ed:71:
                    24:80:1e:fe:0b:f8:ed:bb:54:3c:9c:43:01:fc:e4:
                    1c:5e:15:bc:49:cc:f4:92:80:7d:3f:32:02:6a:62:
                    cc:85:e5:3c:38:cd:00:0e:39:7b:e9:fa:28:dc:80:
                    70:4d:70:41:25:c8:ea:ac:b5:3c:8c:02:67:e2:bf:
                    c5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:24:75:75:3C:76:CD:62:8E:D6:44:33:06:65:07:2B:E2:0F:6C:5D
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232372e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:9d:39:7c:4d:ea:b4:3b:41:8b:dc:57:a0:f3:af:c7:aa:49:
         72:2d:ff:da:09:83:36:58:94:94:09:49:79:bf:df:51:28:79:
         20:30:6e:a5:f6:0e:d1:d7:c0:09:07:2c:e7:15:be:f7:a4:0f:
         37:d3:f8:7b:f1:de:a9:b7:4f:c0:bd:dd:0a:d7:82:b5:ae:a6:
         3e:7a:1a:c1:78:dc:53:53:d3:20:6c:21:2a:60:5e:1d:d5:1f:
         9f:f7:3d:8c:ee:2d:23:f2:c1:05:0c:be:18:2f:e8:a2:5e:92:
         1f:fe:c4:cf:27:c2:f8:e9:ba:96:41:7a:df:a3:d8:70:78:de:
         e9:ff:87:e7:8c:c7:2a:c5:85:3e:20:c9:58:d3:02:35:5e:00:
         da:9f:09:8a:28:4d:d7:cf:68:22:a9:48:a5:f2:ac:bf:aa:3b:
         10:8e:49:b2:2d:15:2d:74:9c:1a:39:21:16:16:5c:ee:2b:1e:
         07:d0:5c:30:2b:d1:f1:d4:0b:40:a6:08:00:a5:d1:56:5a:f6:
         57:43:dd:91:77:f0:20:c4:5b:a7:95:9b:40:78:ad:ed:ae:19:
         62:dd:f0:27:6e:2c:f2:af:56:63:2e:26:06:94:00:cd:52:25:
         6d:18:34:35:67:03:59:3d:8d:36:c3:e1:5a:c1:4d:8b:a5:33:
         53:e9:d9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:58 2024 by rpki-client on console-ams.rpki-client.org