Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231352e302f32342d3234203d3e203236363137.roa
File:                     3138362e3138392e3231352e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          hNWmq38n7w4Zi/eMoJ5ANg9p+HbpmoER3JXYWjwMmfk=
Subject key identifier:   22:F4:1C:D1:3D:C7:DD:8E:DD:96:74:76:CF:A4:CC:E8:34:17:F6:F6
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       49B03076431AAA2C87908F461086391E34EBF46C
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231352e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 05 Mar 2024 17:56:01 +0000
ROA not before:           Tue 05 Mar 2024 17:51:01 +0000
ROA not after:            Tue 04 Mar 2025 17:56:01 +0000
asID:                     26617
IP address blocks:        186.189.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b0:30:76:43:1a:aa:2c:87:90:8f:46:10:86:39:1e:34:eb:f4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:01 2024 GMT
            Not After : Mar  4 17:56:01 2025 GMT
        Subject: CN=22F41CD13DC7DD8EDD967476CFA4CCE83417F6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e9:8c:30:08:31:df:ff:12:34:dc:1f:a9:8a:
                    92:21:b4:b5:44:75:2c:ca:6a:1b:a4:5c:06:0d:d4:
                    bf:17:1b:b5:61:b7:10:a5:0b:4b:ef:f4:df:35:2a:
                    75:ff:84:be:b6:a8:bc:9a:84:c7:9b:fd:b1:f4:4b:
                    ba:60:f5:7b:a6:a7:ec:a3:73:31:87:b1:71:b8:81:
                    11:84:4d:fa:3e:b2:dd:a5:f2:41:2e:62:8e:84:03:
                    1e:1a:31:71:f2:ed:f2:d9:24:4d:56:ec:26:0e:ab:
                    b6:f7:c9:50:f5:25:64:c5:3d:b1:8d:38:6d:9a:88:
                    8f:25:4e:bd:7f:35:5a:4c:61:d0:fd:de:a4:fa:5b:
                    d8:de:f5:cb:39:20:81:eb:95:97:46:80:d5:93:70:
                    00:45:a9:e7:ca:3a:6e:10:46:fd:e1:a1:d7:c6:d0:
                    cb:27:17:7d:e5:94:5b:31:e1:8f:e0:08:0d:91:0c:
                    97:ab:46:39:11:a4:ed:1a:15:f0:bb:3c:fd:04:10:
                    3e:76:c8:4a:b5:5d:9f:e1:97:4b:cf:48:1e:0c:2b:
                    3a:36:9c:22:6e:2a:49:30:48:69:49:b9:59:d0:84:
                    44:f4:2f:15:00:fc:21:61:84:92:36:a5:44:9c:d7:
                    46:32:c0:36:36:1d:7c:06:af:1b:12:7a:10:ad:39:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:1C:D1:3D:C7:DD:8E:DD:96:74:76:CF:A4:CC:E8:34:17:F6:F6
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231352e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:2a:8a:89:b5:e0:26:a5:e2:25:39:b8:8a:b4:89:ef:6e:c3:
         90:19:a5:7a:af:6d:5f:63:cf:a8:46:b9:a0:2c:8a:c7:25:ca:
         9b:d6:54:5a:71:cb:15:07:7d:e3:59:75:99:a2:c2:59:76:21:
         02:a8:98:56:8c:17:21:4d:a5:1c:4e:83:1a:26:6c:c9:3e:75:
         aa:c4:22:73:2d:04:05:44:7e:fc:7d:28:2a:94:d0:c5:95:fe:
         d1:e1:06:23:3d:40:e5:12:e4:f6:f8:6f:a2:f3:33:2b:a7:62:
         2b:68:2a:e8:c7:33:d5:9f:04:fc:6c:df:84:4c:bd:be:e5:d9:
         24:37:c2:68:e5:c2:32:c6:c1:c1:3a:b0:2d:9d:25:84:57:d3:
         ac:5b:3e:6e:2c:8c:d0:09:c1:85:90:90:16:29:54:b1:48:4e:
         d9:d5:28:a9:f9:5c:18:78:c7:1e:04:90:77:95:93:42:c0:2a:
         d2:f4:85:90:e8:c6:59:04:7a:f5:6f:79:2f:0c:7a:30:a6:82:
         9b:28:6d:b6:04:0a:79:7e:17:7d:51:e3:17:89:0d:38:43:38:
         d6:f9:bd:de:de:cc:0a:10:ba:d3:3e:42:82:97:ef:bc:a7:95:
         5d:0a:de:8e:5b:b1:be:45:aa:93:60:a4:98:4e:1a:db:ba:f9:
         be:5a:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:11:12 2024 by rpki-client on console-ams.rpki-client.org