Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3136362e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3136362e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          rotA1PBDRZcGLLDepxZ9cLpD6MoZS10EOuBPYrUx5Dw=
Subject key identifier:   0A:D1:21:8F:71:DD:13:29:1C:1A:73:6D:CA:3B:86:2F:00:B6:75:44
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       4D439A55C9CBD80A1F828F7509CC869EBB6303B3
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3136362e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 05 Mar 2024 18:07:40 +0000
ROA not before:           Tue 05 Mar 2024 18:02:40 +0000
ROA not after:            Tue 04 Mar 2025 18:07:40 +0000
asID:                     22927
IP address blocks:        186.143.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:43:9a:55:c9:cb:d8:0a:1f:82:8f:75:09:cc:86:9e:bb:63:03:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:40 2024 GMT
            Not After : Mar  4 18:07:40 2025 GMT
        Subject: CN=0AD1218F71DD13291C1A736DCA3B862F00B67544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:70:a0:c0:8e:9c:e7:11:19:08:5e:da:ae:4c:
                    3e:91:1e:8f:ad:28:1b:c5:be:7f:6f:e8:a5:93:4e:
                    05:e7:0b:f2:bf:7a:5f:93:bb:75:73:ba:1f:28:6d:
                    38:9d:3a:4d:89:55:63:08:54:a2:92:0d:39:b0:1c:
                    29:d1:03:bd:94:4e:79:75:f5:3a:61:46:14:16:a9:
                    73:be:6b:d1:98:f2:ba:a3:f5:6d:c1:9b:3c:47:89:
                    37:04:f4:64:7c:10:10:f0:ef:ea:ea:b3:d7:28:a9:
                    61:8a:14:89:43:db:c9:72:19:93:fe:08:48:a8:f9:
                    4b:1f:7b:90:d8:e9:72:e9:7f:7f:3a:51:48:19:f1:
                    41:9e:7c:7b:1d:bb:d6:15:b2:ab:47:24:fb:1f:8d:
                    d4:d9:ed:f7:ac:5d:6c:7f:25:8a:1f:a0:d2:95:87:
                    f3:f3:48:46:28:42:6f:0c:e0:65:39:8a:6c:9a:9e:
                    32:f2:ec:0d:c2:48:48:30:a5:88:dd:99:33:ca:96:
                    36:00:fa:40:b7:b4:6f:32:7f:98:3c:76:bf:b3:97:
                    78:a3:1e:c5:d1:23:c7:af:75:d7:f9:ee:12:b8:3e:
                    79:66:e7:32:c1:ae:86:d5:44:52:7e:30:de:48:bc:
                    77:2c:82:bb:1a:c5:1b:df:a9:6b:53:91:f2:cc:6b:
                    25:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D1:21:8F:71:DD:13:29:1C:1A:73:6D:CA:3B:86:2F:00:B6:75:44
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3136362e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:3e:87:7f:b7:c3:4e:ea:57:3c:d2:89:e9:c3:47:65:e5:41:
         15:9b:44:a3:35:53:98:eb:ab:d6:93:73:d0:c4:56:d2:83:84:
         98:c4:6c:74:3a:96:c5:30:0e:44:ae:7e:0f:5f:51:59:7b:ed:
         d6:1f:f1:c6:a9:11:e4:75:a4:1b:cc:76:0b:fb:8a:c0:b1:81:
         0e:46:ed:0b:20:c3:d7:ff:fb:1c:ab:e0:a3:2e:c0:03:4a:ac:
         95:07:e5:9c:07:ce:c1:55:fe:0c:24:2b:d1:d7:29:88:38:f2:
         53:df:9e:82:ce:2d:05:c4:37:2a:73:1a:9b:a8:1e:55:fa:08:
         75:17:35:1d:84:b2:a4:08:9d:2a:cc:4f:c3:68:25:4b:10:e5:
         8b:ab:fa:e6:a1:b6:a8:70:63:77:0b:9d:ec:c1:56:77:21:4c:
         8d:73:2f:fc:c8:1d:61:a3:08:4a:38:13:5a:d0:5b:bc:37:71:
         36:0d:21:cc:b1:1d:62:19:8e:b6:2c:ae:25:27:a1:06:af:b1:
         4c:29:53:ba:c2:a2:75:de:0a:f9:83:d5:d5:c1:06:6c:62:1e:
         1f:30:77:ce:94:df:69:0f:bb:84:6a:52:ab:e1:2b:55:be:8c:
         0a:bc:6f:09:b0:40:4d:1f:f9:55:46:e7:a0:c5:65:8f:4d:8d:
         c1:18:2f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org