Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3133352e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3133352e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          DKf6UGJ/aKgZ9OkfURi6Cm7PX1tsfuORNm5m4NkiHfE=
Subject key identifier:   52:94:CB:46:2E:B1:38:78:F9:F3:7F:9A:8B:DA:C6:89:F7:4D:EC:C2
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       62FB8A40D367E688D1E151857EB292FD46B4B3A4
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3133352e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 04 Dec 2024 18:30:01 +0000
ROA not before:           Wed 04 Dec 2024 18:25:01 +0000
ROA not after:            Wed 03 Dec 2025 18:30:01 +0000
asID:                     22927
IP address blocks:        186.143.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Dec 2024 13:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fb:8a:40:d3:67:e6:88:d1:e1:51:85:7e:b2:92:fd:46:b4:b3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Dec  4 18:25:01 2024 GMT
            Not After : Dec  3 18:30:01 2025 GMT
        Subject: CN=5294CB462EB13878F9F37F9A8BDAC689F74DECC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:59:53:16:88:e0:66:6a:ed:c8:99:5a:85:
                    70:de:5a:95:40:04:78:c9:6b:36:f9:76:3e:6e:97:
                    86:bb:65:46:9f:32:71:d8:d5:51:57:c7:33:bd:52:
                    c9:45:96:4b:a8:29:2c:09:69:4b:96:7c:4a:1f:70:
                    e0:3c:c9:43:53:e6:61:ae:b8:75:02:e3:48:a7:75:
                    5f:56:e9:b3:4a:91:80:a7:f0:21:16:95:e0:af:00:
                    31:bd:9c:d3:47:9e:c7:1d:28:5d:fe:c2:b9:47:f5:
                    69:63:f1:87:16:aa:45:67:e7:71:53:88:23:75:e5:
                    96:b7:3b:73:54:d8:06:a7:58:25:2e:a3:f2:b0:c1:
                    85:51:fc:b7:2a:84:26:8c:6c:07:72:d1:19:0e:7e:
                    b1:0e:66:3f:52:f5:09:90:76:35:4d:1d:02:f9:04:
                    cc:04:91:b4:24:ca:9a:f6:59:48:12:2c:c6:a0:13:
                    1a:4c:fd:99:78:d2:14:1d:df:23:75:c8:13:2d:50:
                    1b:d4:7d:84:fd:82:74:79:49:b4:e5:0e:47:ea:7a:
                    79:4b:11:2b:35:30:ff:62:fe:f1:c8:6f:99:1c:a4:
                    2f:f3:6e:c0:50:91:22:74:60:ec:07:a3:a8:ba:64:
                    9b:65:0a:e9:05:6f:1b:0f:ec:35:e3:9e:89:42:87:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:94:CB:46:2E:B1:38:78:F9:F3:7F:9A:8B:DA:C6:89:F7:4D:EC:C2
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3133352e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:3d:a8:54:d4:9f:17:e9:8f:40:62:95:ac:79:c4:61:4b:6b:
         71:6f:08:33:a8:04:cf:35:ef:7e:d2:69:42:e4:c3:ed:c0:95:
         ef:23:61:3c:ae:55:8e:00:e3:33:15:5d:0b:f5:b2:14:7d:28:
         ec:41:47:f8:63:49:29:d3:e1:60:7c:d4:a1:37:9e:d8:08:92:
         d8:68:7a:1b:f6:40:f2:b7:34:ed:7e:a7:0c:39:e2:66:f6:7e:
         b7:65:94:ab:6f:a8:0a:86:8e:d2:4b:b7:f2:49:6b:53:24:a2:
         a3:71:09:49:f7:38:14:48:d3:a7:a8:19:5a:31:cb:6b:6a:31:
         28:59:95:c5:5f:a2:5b:47:2e:75:56:4d:01:ef:37:85:49:f7:
         7b:3e:15:2c:14:34:9e:2c:e5:2f:3a:3b:5e:99:3e:43:14:b5:
         87:0e:18:8f:d0:13:1e:96:ef:aa:f1:2b:fe:64:74:25:0a:90:
         63:fc:ce:6f:dc:8f:15:2a:98:7e:4c:a5:12:a0:64:52:ed:d8:
         56:4a:ca:b8:7f:57:57:7f:f1:f1:ff:ff:fc:14:00:d5:9b:92:
         4d:d4:3c:45:2b:fa:dd:64:a0:6a:e6:e5:60:c1:09:46:5f:94:
         2f:e7:38:95:f1:6b:31:b4:73:d1:cb:14:36:11:2d:5f:11:87:
         7e:1c:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 23 22:57:01 2024 by rpki-client on console-fra.rpki-client.org