Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3136332e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3136332e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          gw3jWC8uI4305ZVO83Z3SBfRkFuUr6nTn32R6O4cl20=
Subject key identifier:   F2:47:44:D5:29:35:26:D8:6A:C0:2E:4C:02:16:A0:94:D0:E0:7D:39
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       4721BF270533E110A8F3C47AE695533FE6520590
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3136332e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 05 Mar 2024 18:07:43 +0000
ROA not before:           Tue 05 Mar 2024 18:02:43 +0000
ROA not after:            Tue 04 Mar 2025 18:07:43 +0000
asID:                     22927
IP address blocks:        186.143.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:21:bf:27:05:33:e1:10:a8:f3:c4:7a:e6:95:53:3f:e6:52:05:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:43 2024 GMT
            Not After : Mar  4 18:07:43 2025 GMT
        Subject: CN=F24744D5293526D86AC02E4C0216A094D0E07D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e9:72:87:2a:08:bd:91:35:14:2a:ea:5f:5f:
                    ae:ff:1e:ee:86:df:5f:55:50:4c:38:f6:d4:1e:63:
                    44:29:bc:b3:6d:53:83:de:8f:5b:61:56:d5:df:5c:
                    18:b8:93:73:2f:34:49:ba:eb:ba:6a:60:20:9f:7a:
                    fc:5a:cb:27:06:0b:72:0b:b5:77:f4:a6:bf:b8:b7:
                    54:b8:45:00:f3:d0:20:eb:26:1d:c5:97:37:d8:49:
                    43:fd:a2:ce:8e:3a:e2:3d:45:32:f0:17:0c:8c:65:
                    5b:ad:4d:ec:30:98:f8:24:4c:26:47:ad:2e:b1:0c:
                    4c:8e:ed:23:b3:d5:5d:14:26:ec:4a:d8:15:95:4c:
                    08:09:9c:ff:83:14:b3:bf:8a:f5:c7:c6:bf:8c:a8:
                    0e:b2:34:9f:c7:2f:ab:76:d4:73:29:fe:c5:a3:7e:
                    0a:ea:b4:57:21:40:f0:d1:36:bc:af:fc:f5:0d:c5:
                    48:07:04:c2:12:54:13:2b:3e:f3:91:5e:da:ff:da:
                    aa:71:90:3b:2d:38:3a:09:35:f8:e0:3c:36:b8:7d:
                    0f:aa:03:84:66:ec:97:1b:5f:52:59:e4:ac:ba:e3:
                    ee:1e:2d:30:fa:9d:95:fa:a2:02:aa:af:63:80:af:
                    b4:89:d6:37:77:3b:0a:29:de:88:41:0b:54:3e:38:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:47:44:D5:29:35:26:D8:6A:C0:2E:4C:02:16:A0:94:D0:E0:7D:39
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3136332e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:83:31:e9:df:99:bb:15:b5:b3:c2:27:a1:38:cd:c8:23:79:
         b0:02:df:aa:3d:a8:a8:0e:cb:54:10:5b:54:b0:b4:f6:91:bf:
         4a:3c:7f:5e:b5:8b:00:a4:b3:3c:a4:05:8e:fe:a1:1d:b2:b9:
         0c:e1:c5:76:70:25:46:dd:d7:e4:51:83:84:74:21:00:c9:45:
         03:56:83:dc:0d:6b:56:77:6f:2e:68:0f:14:61:dc:5d:d0:f2:
         19:1f:b6:e3:2d:cd:28:ec:2b:1b:99:e4:32:2e:a6:12:8c:f0:
         4d:0f:b0:52:04:98:cb:bd:04:3a:b1:c7:01:41:ea:42:26:2c:
         a4:8b:e1:a0:24:ce:ad:26:3d:58:ce:37:5b:75:d3:2b:eb:8a:
         a5:6c:60:30:ff:ee:1f:2e:68:a0:57:25:5e:a1:ab:1a:dd:f7:
         d6:9f:a7:85:36:81:e7:f9:81:a4:57:80:43:5b:ff:2c:58:b7:
         97:ff:cd:9b:39:c6:95:19:fe:a3:eb:8a:eb:53:51:46:98:88:
         9f:30:38:aa:df:e5:75:df:89:8f:a3:4a:37:72:d7:29:9f:a3:
         21:1e:10:23:d4:49:48:ca:db:67:f3:6a:68:06:7b:47:78:17:
         25:62:b3:54:df:74:35:9a:66:a4:c3:5b:10:21:82:1f:6c:b2:
         1f:1f:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org