Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139372e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3139372e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          pfeGcKoimmyP2I1RHYEkX4rzNZumK6C2FhxoxCfaCzA=
Subject key identifier:   FE:D5:91:CA:42:61:ED:F6:66:EC:98:5B:09:F4:13:72:AD:A0:C7:29
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       02E795CD7C54FC456450E49C5EFD7C900CC93FDD
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139372e302f32342d3234203d3e203232393237.roa
Signing time:             Thu 11 Jul 2024 14:40:00 +0000
ROA not before:           Thu 11 Jul 2024 14:35:00 +0000
ROA not after:            Thu 10 Jul 2025 14:40:00 +0000
asID:                     22927
IP address blocks:        186.143.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e7:95:cd:7c:54:fc:45:64:50:e4:9c:5e:fd:7c:90:0c:c9:3f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jul 11 14:35:00 2024 GMT
            Not After : Jul 10 14:40:00 2025 GMT
        Subject: CN=FED591CA4261EDF666EC985B09F41372ADA0C729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:14:d7:ba:5b:07:9e:c5:03:57:22:31:c2:ee:
                    d0:b6:9f:1a:2e:59:65:8c:6f:7d:e7:ab:6a:0c:0c:
                    11:66:6d:af:c8:0e:3c:df:14:f9:b6:01:ac:46:7a:
                    8f:6e:b8:7a:04:33:b1:e5:60:4e:4b:59:00:c6:77:
                    8c:5e:69:25:9e:9c:37:3b:f3:ca:f9:64:f5:a0:c1:
                    33:3c:7d:a7:5f:5a:1c:4d:a8:0a:34:18:27:70:fa:
                    a4:d2:4d:c7:a2:03:59:f2:11:5b:6b:b1:06:72:e5:
                    a4:38:7d:d1:d3:58:c3:a2:56:28:7e:84:64:bd:69:
                    01:b7:68:1c:3e:78:ce:96:b9:fd:c0:a6:9f:b8:c6:
                    48:fb:71:4f:75:49:58:c6:f8:a8:68:67:33:41:49:
                    bd:58:05:d6:80:e1:ab:c6:45:71:23:92:38:cc:19:
                    65:12:b3:83:93:ef:d0:db:04:13:8c:96:a1:df:9d:
                    27:45:73:43:e0:6c:2a:67:fd:63:3b:ab:df:4f:2e:
                    54:a6:ba:18:6a:7b:eb:8b:53:43:5a:72:d6:6c:af:
                    1e:0e:ae:ae:4c:3a:40:e4:95:0f:ff:de:76:b1:0b:
                    3b:7a:53:23:c5:c9:ac:99:85:74:bd:fa:a7:ea:25:
                    71:98:e6:e7:ea:cf:96:09:c9:97:33:1e:29:bf:30:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D5:91:CA:42:61:ED:F6:66:EC:98:5B:09:F4:13:72:AD:A0:C7:29
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139372e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:96:60:c1:e9:49:24:b2:02:2c:52:df:28:89:a1:9c:e7:16:
         9f:08:21:aa:bd:31:9e:29:f1:e5:4a:94:ab:c3:16:77:03:ff:
         07:6a:5c:b2:22:f5:25:db:80:69:c4:be:44:34:f6:64:81:b1:
         93:d5:f1:82:73:72:8b:1a:ec:db:5f:c8:72:9a:88:e1:7d:04:
         b7:64:f5:9b:83:48:52:f0:df:8c:e8:af:b9:42:d4:15:f5:e6:
         ee:6f:75:c2:f3:29:61:52:72:97:80:05:4a:65:e8:c3:6e:ad:
         9a:80:7a:1b:ab:0b:19:6c:68:cb:20:19:9a:07:82:4e:de:39:
         f3:9e:76:2e:98:0b:f4:21:5f:0a:43:73:22:84:f3:2d:41:a1:
         6c:74:52:58:70:5a:37:c4:06:b8:f7:47:99:2a:0d:a1:5e:11:
         b0:c8:4e:fd:3b:cc:43:9a:df:fc:29:65:a7:c3:50:ce:a5:97:
         ce:ac:e2:42:bd:ab:3d:de:46:08:ee:9e:ea:6f:ec:b2:a3:b1:
         e6:8e:22:a4:6d:5f:46:d4:7f:aa:cf:0d:e1:ef:d9:f8:03:46:
         07:73:d6:b4:35:4a:63:6e:2b:8c:6d:f8:da:23:93:9a:1c:5e:
         67:c5:46:55:b8:54:07:ae:49:0b:3d:a4:50:26:33:25:cc:b4:
         4e:d3:7a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org