Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31382d3138203d3e203238303234.roa
File:                     3138362e322e302e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          h3wdtiwQ7JrE6Tgj22vjFiPnYzA7kolqzUDXE6Qif88=
Subject key identifier:   5D:42:EE:10:1D:5A:A8:B0:A3:F1:81:EE:16:BC:DE:2A:54:85:37:5B
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       414A6CB12243A41617672E86AA11C1132A3745E8
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:02 +0000
ROA not before:           Tue 05 Mar 2024 17:51:02 +0000
ROA not after:            Tue 04 Mar 2025 17:56:02 +0000
asID:                     28024
IP address blocks:        186.2.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4a:6c:b1:22:43:a4:16:17:67:2e:86:aa:11:c1:13:2a:37:45:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:02 2024 GMT
            Not After : Mar  4 17:56:02 2025 GMT
        Subject: CN=5D42EE101D5AA8B0A3F181EE16BCDE2A5485375B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:a6:a9:82:82:0b:49:2f:3f:98:7a:36:be:
                    aa:35:d8:17:59:67:70:c6:f9:84:69:3f:27:25:30:
                    bc:6a:cf:37:b8:02:d7:99:a2:cb:be:81:96:f8:76:
                    d9:33:24:bc:50:f6:5a:f1:5e:39:85:89:cc:18:3e:
                    3b:d6:55:2b:ac:e5:88:f1:99:88:ba:3f:a8:df:af:
                    41:ab:86:9b:34:4e:9e:74:ed:7b:20:54:e7:82:ee:
                    b7:ae:9d:2b:98:64:2e:27:aa:38:46:00:16:83:2d:
                    53:62:24:1f:63:d6:36:58:41:78:b5:e8:7a:69:bc:
                    8d:38:79:c6:53:e0:67:cc:be:67:88:4d:1c:90:7e:
                    d5:d8:2b:9c:4f:a4:ed:b3:b4:a6:29:11:af:81:3a:
                    77:d6:15:18:d6:7d:4f:7e:04:44:3c:a7:b5:69:cb:
                    e6:13:20:bb:c0:0a:95:74:a6:15:85:1b:b7:19:98:
                    9f:1f:bc:f4:d6:b7:5d:42:43:81:cf:98:e1:9d:21:
                    f6:3a:89:97:c7:22:1d:67:bd:43:12:b3:d3:a0:42:
                    30:a1:3d:c5:e8:74:5e:64:2d:f2:71:73:a1:fc:37:
                    ac:55:e8:ed:da:98:44:17:4b:c5:8d:94:59:38:12:
                    d5:71:7b:68:e8:62:75:5c:e2:d9:12:0a:63:6e:81:
                    cf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:42:EE:10:1D:5A:A8:B0:A3:F1:81:EE:16:BC:DE:2A:54:85:37:5B
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7c:6f:36:c1:a8:19:27:ed:27:50:f9:68:e9:d3:44:8d:25:e0:
         b6:3e:5d:17:17:70:fc:2b:fe:0a:0b:4c:a0:f9:a1:1e:b0:b4:
         c3:2a:be:1a:30:6f:20:3e:fa:82:77:e6:8c:e6:6e:e3:ee:31:
         48:a0:a9:69:99:80:27:33:e1:40:f8:9c:6e:d7:62:d7:6e:89:
         a0:b9:22:73:d0:51:37:d0:ac:4c:c2:b2:bf:50:21:0b:6e:fb:
         6e:2f:04:9a:02:cb:b8:ed:a2:a2:17:37:3b:1d:a0:ba:fc:40:
         dc:3c:33:cd:19:bd:80:09:4d:c0:61:0f:f6:50:0f:bc:74:18:
         32:d9:e1:f6:50:39:81:4c:5b:96:82:92:35:87:57:1a:f9:9f:
         a7:da:5a:30:b3:8a:27:1a:b3:cb:6b:ef:78:7d:85:34:50:71:
         76:21:52:e9:ae:48:9f:ad:1e:7f:06:cf:1e:c8:b3:10:5a:d2:
         29:ca:d3:9e:fe:e1:24:a9:89:f6:5c:e3:aa:f4:8d:de:4e:3c:
         3d:49:ad:67:93:88:d6:6d:ab:38:67:68:58:cf:88:bd:1a:e0:
         97:9c:58:d6:6f:51:8b:41:20:d1:1a:a8:4b:97:55:58:53:5c:
         39:46:e2:04:93:1d:9f:48:1e:d1:38:f5:22:83:5a:bf:63:37:
         be:49:29:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org