Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3230312e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3230312e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          E9M375KbWg5IZH+zm3QyeUwmtefaNJ3TNrKTEpMElpc=
Subject key identifier:   8E:C0:6E:E9:2B:A4:A7:3F:F4:8A:12:4C:5B:40:08:63:A3:17:1F:53
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       5D8D0D8A285A62B233CCF36A5EF88B6AC6125DA8
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3230312e302f32342d3234203d3e203232393237.roa
Signing time:             Thu 11 Jul 2024 14:40:01 +0000
ROA not before:           Thu 11 Jul 2024 14:35:01 +0000
ROA not after:            Thu 10 Jul 2025 14:40:01 +0000
asID:                     22927
IP address blocks:        186.143.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8d:0d:8a:28:5a:62:b2:33:cc:f3:6a:5e:f8:8b:6a:c6:12:5d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jul 11 14:35:01 2024 GMT
            Not After : Jul 10 14:40:01 2025 GMT
        Subject: CN=8EC06EE92BA4A73FF48A124C5B400863A3171F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:68:fb:6b:b4:f0:e7:e5:a1:11:c4:2d:05:a1:
                    be:d1:65:08:60:61:e3:cf:dd:cf:f1:0c:02:46:3e:
                    32:84:38:13:42:89:a5:15:4c:77:69:67:97:4e:d6:
                    69:43:4f:63:24:be:ca:b9:62:3b:33:14:dd:7a:d3:
                    ab:03:11:f9:a4:30:17:8d:c4:91:16:1d:c4:bc:83:
                    79:9f:01:1a:06:00:e9:c0:e8:93:77:37:d8:92:87:
                    b8:51:74:89:3b:26:4a:3b:7f:a8:78:d2:06:a5:f7:
                    71:1a:09:d3:ec:b7:11:b8:bc:59:8e:54:76:4f:11:
                    ae:17:03:4d:a0:ed:9a:d7:d8:bf:7a:ed:35:17:58:
                    b1:71:a9:de:09:3b:c4:da:80:e0:62:6d:11:cd:1f:
                    d2:3f:c7:31:17:45:95:76:56:7b:4e:57:1a:f2:56:
                    0b:57:bc:e6:5a:1e:95:91:0e:53:b4:23:a7:ca:bb:
                    a3:b7:69:cf:ed:78:d5:df:49:f3:f4:f6:70:e7:51:
                    a3:9e:ee:02:9b:28:f7:e7:d5:7d:bb:b5:7f:15:f3:
                    fe:43:59:8f:3e:ee:62:ce:97:87:68:76:3a:bb:fb:
                    2c:a0:3f:2d:fd:f5:4f:9e:2b:44:c7:86:0f:54:f4:
                    ad:8c:f0:34:0e:70:82:f7:f7:31:08:05:f1:d9:3c:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C0:6E:E9:2B:A4:A7:3F:F4:8A:12:4C:5B:40:08:63:A3:17:1F:53
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3230312e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:b3:71:3a:de:ab:00:b1:f7:06:fd:cb:88:46:7e:d8:69:bf:
         58:93:ea:a9:53:45:62:ad:bb:33:f8:e7:fa:78:60:91:f3:9b:
         93:c1:3f:93:07:4f:f8:12:47:05:83:15:23:85:c0:fa:0e:c8:
         ed:61:11:aa:61:a4:70:62:94:08:3f:37:7b:12:36:79:8b:a7:
         c8:32:9c:3a:82:6c:60:fc:aa:95:55:9c:72:89:3d:c6:6c:81:
         44:ad:92:66:90:7c:de:d9:76:03:f5:a5:b1:62:ea:72:94:6c:
         c7:d2:c0:f7:15:92:c9:6a:8e:df:72:c9:07:f1:b1:25:78:6a:
         fb:1e:4f:00:df:26:cb:b3:ce:d4:6f:68:46:ee:58:79:ab:fe:
         8b:b8:36:19:85:d5:52:3d:6c:a7:e2:e4:d8:92:c8:97:3b:80:
         4f:36:ed:db:e5:e8:0d:0c:04:b0:0d:fe:4c:35:ba:cf:d8:a4:
         79:0e:8f:bd:0e:30:d5:f1:58:07:c5:4c:df:f5:3b:44:8d:45:
         1e:e5:71:bc:0d:34:0a:07:aa:00:8b:0a:07:69:e0:72:26:4b:
         89:9e:70:0e:e0:13:5e:67:c0:ef:e5:86:4c:50:c2:c4:58:d7:
         9f:97:23:9f:72:c4:97:3c:ed:d3:f8:76:d0:5a:a2:01:6e:fb:
         7b:29:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org