Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231332e302f32342d3234203d3e203233323433.roa
File:                     3138362e3138392e3231332e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          PKiVqhBWnsR0CVU/ndIAOLn5QvSNgLIYwebqJxLPlNA=
Subject key identifier:   DA:E9:6D:A8:70:2E:20:73:54:22:BB:07:E5:2A:EB:EF:84:D8:A3:86
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       5418C581EDCDA0FEDD181FCB682DC972C922773B
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231332e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:03 +0000
ROA not before:           Tue 05 Mar 2024 17:51:03 +0000
ROA not after:            Tue 04 Mar 2025 17:56:03 +0000
asID:                     23243
IP address blocks:        186.189.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:18:c5:81:ed:cd:a0:fe:dd:18:1f:cb:68:2d:c9:72:c9:22:77:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:03 2024 GMT
            Not After : Mar  4 17:56:03 2025 GMT
        Subject: CN=DAE96DA8702E20735422BB07E52AEBEF84D8A386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:f2:a0:39:19:cc:89:3d:02:5e:fe:e3:72:
                    a9:48:5b:c6:6a:1a:c9:9b:9e:62:1f:d4:4f:10:43:
                    ca:ac:97:42:b0:00:fa:44:ee:9c:9f:11:82:51:48:
                    ec:6a:45:d2:23:24:da:52:c1:0c:81:79:c1:d8:98:
                    38:a0:1f:5d:49:46:54:d4:20:8f:a2:d9:3f:29:1e:
                    a0:c0:b6:48:4f:ee:b4:0f:9e:8e:c5:6a:a9:21:c3:
                    70:18:f0:26:3f:85:6a:d3:7c:13:fb:63:83:03:8b:
                    3a:44:03:c9:45:4d:97:fb:7c:96:70:a4:de:2f:c6:
                    79:14:23:5b:43:79:46:80:fe:f2:c0:fb:fe:9a:18:
                    f2:38:17:2f:54:fd:f9:8e:9d:4d:e6:e5:ba:2b:60:
                    12:50:67:48:2e:5b:94:de:5c:09:a8:9f:c6:b2:7b:
                    e7:08:99:cd:9c:f7:31:97:94:52:39:d3:11:14:fb:
                    92:6e:78:aa:f4:63:3c:a3:80:51:c5:a1:de:c8:9e:
                    4c:27:a8:84:cc:e0:b9:f5:bf:15:35:22:7c:28:c6:
                    a3:01:89:33:06:f7:83:f1:81:56:9f:d5:1e:eb:52:
                    da:60:57:e3:ee:25:70:3a:6a:68:19:a5:a1:fe:8d:
                    a2:75:ce:72:ce:fc:94:2e:d4:9b:19:1a:00:e0:72:
                    b5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E9:6D:A8:70:2E:20:73:54:22:BB:07:E5:2A:EB:EF:84:D8:A3:86
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231332e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:1f:27:53:a2:9c:12:8c:96:da:a1:40:23:bc:07:21:e7:
         15:ee:81:6c:32:dc:53:51:42:be:be:b6:4c:9d:59:b1:5e:ed:
         af:3a:cc:b9:1a:97:78:63:78:de:99:a8:d8:84:32:30:55:54:
         78:b8:fe:f2:92:da:56:9c:bf:9b:39:ba:c7:84:73:d0:ad:4e:
         04:99:9c:f1:44:9c:bc:6a:00:98:b4:8c:1c:5a:94:96:82:1f:
         43:5c:7e:10:89:3e:6f:78:ed:a3:b1:a5:ad:ea:8b:fa:d0:14:
         80:1c:70:e8:1d:c8:d8:f8:f1:7e:47:28:40:dc:e7:c8:08:51:
         0c:fd:a4:85:55:07:38:86:b1:62:b4:49:65:0e:1f:11:9b:b1:
         d1:16:22:b2:73:c7:3b:12:65:14:19:17:33:45:8d:5c:e3:a7:
         85:75:43:dc:28:38:94:96:62:6f:14:2b:0b:e3:9f:dc:bd:14:
         f6:77:4f:64:fe:59:91:7d:cb:de:5d:e0:96:b3:83:ac:3a:38:
         6e:6e:6b:cf:54:be:76:e2:02:a4:2c:47:3f:e3:70:42:a8:ea:
         78:82:aa:ce:94:e2:90:08:19:5c:81:ff:11:47:f5:c0:29:0f:
         5f:89:98:e7:d0:0e:bb:52:92:99:09:1a:53:a5:5a:dc:7c:a6:
         83:06:6c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org