Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31372d3137203d3e203238303234.roa
File:                     3138362e322e302e302f31372d3137203d3e203238303234.roa (raw, json)
Hash identifier:          KsoZkAGXfgIB6wGNrRmiYSP0JYvigYiGpQXAeH9aajc=
Subject key identifier:   18:89:66:9E:B8:46:13:6A:EB:CF:8A:C8:FF:74:5C:5F:BE:58:44:9F
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       53751BAFAD27875FB72D4472AB7FFDE13E3E5074
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31372d3137203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:10 +0000
ROA not before:           Tue 05 Mar 2024 17:51:10 +0000
ROA not after:            Tue 04 Mar 2025 17:56:10 +0000
asID:                     28024
IP address blocks:        186.2.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:75:1b:af:ad:27:87:5f:b7:2d:44:72:ab:7f:fd:e1:3e:3e:50:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:10 2024 GMT
            Not After : Mar  4 17:56:10 2025 GMT
        Subject: CN=1889669EB846136AEBCF8AC8FF745C5FBE58449F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d4:93:1c:23:e9:5b:20:f1:86:f0:fe:af:ad:
                    fd:79:ec:89:03:ff:50:49:98:ac:4d:92:7d:2c:e4:
                    2f:06:11:79:c8:7e:59:36:8a:84:90:c8:a9:b2:2b:
                    5c:85:7f:2d:ae:e0:cd:eb:54:80:01:8c:6c:70:4b:
                    c8:d4:90:a8:db:48:44:62:23:2f:85:14:2b:61:09:
                    77:6f:68:e4:e6:7f:9e:d2:76:85:57:e4:c0:f0:13:
                    cb:8d:d6:ad:8d:c7:ee:60:7e:63:27:ee:65:03:37:
                    cc:18:3e:1c:4a:2a:8d:99:ec:6f:c8:a6:58:2a:e5:
                    01:0e:9f:43:90:60:1b:ec:3a:55:69:98:dd:2c:fd:
                    3b:67:1e:a9:b2:b2:53:ce:e5:01:e1:95:d5:7b:96:
                    b8:c5:70:ee:f2:e1:62:33:03:53:07:12:28:67:00:
                    eb:79:22:cd:53:12:34:d5:38:82:51:46:94:12:16:
                    54:70:ce:5f:db:e2:3b:82:74:21:23:e8:dc:b4:9e:
                    14:74:16:4d:a6:ee:f4:5f:bd:1e:16:96:6d:26:5f:
                    2c:b1:09:70:72:48:fb:74:9b:1b:40:a5:79:95:c2:
                    1e:02:46:06:9d:90:38:de:e8:f9:c3:87:c8:57:44:
                    27:37:ef:8a:e0:48:b5:15:4e:0b:32:da:f9:9e:ae:
                    98:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:89:66:9E:B8:46:13:6A:EB:CF:8A:C8:FF:74:5C:5F:BE:58:44:9F
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31372d3137203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3e:cf:fb:84:b6:a2:3f:a0:34:40:54:3e:83:cf:cb:3e:e1:97:
         73:ee:c5:01:67:07:17:9b:f1:99:e5:5a:3b:eb:8f:38:72:8a:
         25:e2:fa:66:d2:91:1d:27:9a:93:84:e2:61:4e:fc:29:11:cb:
         57:c7:47:d1:f9:33:cd:7c:dc:71:a2:f5:8f:d3:06:ab:d9:f0:
         23:96:f9:9e:29:5f:52:02:31:63:f5:21:0d:2a:a9:41:e9:91:
         fe:fd:5f:f3:59:d0:ef:b8:1f:c9:99:4d:11:fc:68:52:3b:c9:
         71:d6:e4:2c:b3:92:8c:15:aa:a2:a9:c2:9b:48:70:1e:d3:4f:
         a4:b5:17:57:86:0b:bd:3f:71:36:2d:62:32:12:23:ca:a0:11:
         00:04:f2:9d:f2:f5:07:5b:33:3f:b5:9c:73:be:f8:9b:4d:d1:
         e3:45:5e:40:a8:a3:ea:bd:da:41:d2:99:88:fe:03:0b:ec:74:
         bb:d6:f9:68:85:20:dc:aa:ff:77:c0:95:4f:48:aa:82:85:c4:
         29:cf:39:bf:4b:7a:f5:6c:61:22:cb:d3:ca:a1:ec:6b:f9:ed:
         7d:9d:72:35:c0:47:4b:97:66:df:b3:dc:18:b0:79:d5:17:2b:
         86:31:d9:c4:60:db:13:8d:51:18:7e:61:81:23:37:70:e9:28:
         fd:6e:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org