Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232382e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3232382e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          9Pp6CimU0OhNESVuMQB3RVskA7XyZuIBpsAC7PbA8CE=
Subject key identifier:   BF:44:37:02:46:FF:3E:55:3F:9C:76:C6:7A:C1:16:7D:8A:DC:B7:E4
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       7204A63A4EA806AD34D17B57E7526E77C0705B0C
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232382e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 05 Mar 2024 18:07:43 +0000
ROA not before:           Tue 05 Mar 2024 18:02:43 +0000
ROA not after:            Tue 04 Mar 2025 18:07:43 +0000
asID:                     22927
IP address blocks:        186.141.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:04:a6:3a:4e:a8:06:ad:34:d1:7b:57:e7:52:6e:77:c0:70:5b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:43 2024 GMT
            Not After : Mar  4 18:07:43 2025 GMT
        Subject: CN=BF44370246FF3E553F9C76C67AC1167D8ADCB7E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:88:fb:e6:50:d9:f5:83:96:36:a9:b2:19:
                    e7:e7:89:51:a0:90:21:7f:aa:ec:d2:43:46:55:eb:
                    c5:57:10:c8:11:f4:52:58:dc:49:b5:4e:33:1c:68:
                    d4:0e:d6:41:05:b1:ee:3b:d1:15:43:b7:94:71:94:
                    3c:81:1a:5f:0b:f4:ee:38:b5:b8:69:a5:0d:14:8a:
                    4b:5f:c9:a2:d8:78:d1:76:7f:fa:5d:2f:6e:01:08:
                    f7:87:47:81:26:f4:23:8c:20:0f:8b:5f:af:4a:75:
                    b7:bb:19:23:42:f6:c2:62:53:ea:a2:35:12:bb:38:
                    ee:ff:ac:da:8e:5d:b2:7b:5a:5a:51:d6:25:e6:c4:
                    4f:ca:c7:d4:d5:25:93:11:a5:8a:88:30:8c:32:72:
                    ec:3d:90:7d:51:84:ed:28:20:fd:d3:56:9c:4a:ea:
                    a4:77:cf:25:ce:58:4f:1a:de:87:1c:b5:2f:a7:ba:
                    8f:13:11:cc:fd:f6:e0:58:ad:6f:11:15:5c:a4:ee:
                    32:71:6e:e8:69:62:c7:cc:6f:42:fd:6a:b7:53:93:
                    91:a2:88:10:19:06:aa:a1:10:c0:44:0e:d1:f2:03:
                    35:3e:79:a9:c6:e4:01:58:15:d1:8d:a9:cd:ae:ab:
                    95:53:10:20:ad:4f:7b:09:1e:23:b3:bc:d4:26:ee:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:44:37:02:46:FF:3E:55:3F:9C:76:C6:7A:C1:16:7D:8A:DC:B7:E4
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232382e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:64:2b:9c:51:ef:a0:63:49:6e:86:df:cf:cc:d2:5a:de:53:
         d3:f9:3e:56:fa:cd:af:35:72:9a:32:40:98:6b:df:e7:06:ba:
         83:b1:94:db:68:0f:18:7b:9c:4a:13:00:f3:39:07:b6:10:a2:
         2d:b1:80:3c:cf:4e:f3:13:18:3d:1d:d8:ca:d9:15:92:67:24:
         82:32:d7:49:31:9b:03:e0:f5:92:f2:09:e4:8c:8a:ff:83:ff:
         c7:cf:70:d6:44:1f:b0:5e:87:8e:29:20:66:94:f8:58:a2:7e:
         6d:85:32:9e:d3:91:1f:8e:a9:f2:cd:2c:af:9b:61:74:b9:23:
         35:0f:d8:52:94:2c:27:db:5b:5d:f7:db:84:7a:ab:cd:bd:ef:
         b6:b9:c0:c9:3c:cc:72:a0:7d:67:52:59:a6:b1:49:4a:1c:e0:
         48:17:38:e8:c6:a2:22:4c:7f:5d:83:99:2b:f8:8f:5d:6f:22:
         db:4e:fa:d3:03:99:40:59:4e:a6:21:7a:29:e9:c4:bb:e0:25:
         31:ed:6c:b8:9f:ad:05:ec:35:d1:dc:9b:62:8c:76:d5:22:4c:
         78:91:e4:50:2d:70:8b:97:d4:4d:22:18:06:ed:57:fe:e7:93:
         c3:e1:f9:18:17:b9:d5:82:a1:1f:6e:94:71:15:e0:84:3f:cd:
         33:33:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:47:41 2024 by rpki-client on console-fra.rpki-client.org