Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31392d3139203d3e203238303234.roa
File:                     3138362e322e302e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          iZUP8YAcQZ+o1ys3nPOt3/pWW5wVTd0IYrDNAw1Oijg=
Subject key identifier:   B4:56:D7:91:F9:C7:36:64:81:1A:11:C3:09:0A:5A:7E:77:A1:22:FA
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       6715D8C7D91BF9343ADC458E275ACB515EAF7676
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:07 +0000
ROA not before:           Tue 05 Mar 2024 17:51:07 +0000
ROA not after:            Tue 04 Mar 2025 17:56:07 +0000
asID:                     28024
IP address blocks:        186.2.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:15:d8:c7:d9:1b:f9:34:3a:dc:45:8e:27:5a:cb:51:5e:af:76:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:07 2024 GMT
            Not After : Mar  4 17:56:07 2025 GMT
        Subject: CN=B456D791F9C73664811A11C3090A5A7E77A122FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:71:4f:93:11:89:1f:27:31:e1:bc:f6:ec:
                    e5:00:b6:37:cf:f3:a6:5e:2d:a9:bc:e1:a9:cf:f0:
                    08:61:a8:96:ee:49:ff:4a:56:b8:ac:13:ea:fc:6d:
                    a6:a8:19:ae:e5:23:bc:11:87:df:e0:34:28:31:06:
                    aa:ec:6b:9c:62:ff:32:ff:31:13:b6:7c:76:23:39:
                    8d:19:98:8b:4b:45:97:6c:73:10:62:79:89:41:01:
                    fa:24:78:33:a4:37:d9:aa:93:17:d1:e3:b0:47:23:
                    7e:20:7c:d4:e0:42:93:7b:3c:36:ef:38:1a:18:11:
                    8b:1a:da:b0:88:46:f4:1b:44:7d:11:cb:da:02:7b:
                    65:f6:27:b0:aa:ee:7b:2e:f2:2c:2b:38:c8:30:e7:
                    ae:06:fb:a4:e4:fd:69:c4:d3:b4:7d:c6:b1:3d:b9:
                    d9:83:de:27:6a:05:f0:dc:d2:d5:f0:dc:e3:5d:c6:
                    16:14:34:a8:5c:92:87:17:d3:55:79:03:07:4c:e4:
                    15:0d:87:95:b9:35:d6:f0:fa:e4:86:98:eb:af:bb:
                    23:e6:94:93:67:5a:d4:d4:95:4f:c9:35:3e:31:c5:
                    49:5b:bd:e3:29:67:f9:fb:76:d3:e4:63:8e:7f:28:
                    ba:b4:72:3d:3e:bc:01:cf:03:cb:fc:3e:26:7e:6a:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:56:D7:91:F9:C7:36:64:81:1A:11:C3:09:0A:5A:7E:77:A1:22:FA
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e302e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:41:d0:35:42:76:9c:a2:a4:24:ed:bd:37:5a:85:89:4c:16:
         4e:f1:bf:e8:d7:9d:89:26:f5:c9:c4:a3:2e:bf:17:50:0f:b5:
         b1:78:16:ca:59:db:81:73:bd:ec:e1:8d:34:0b:23:0a:6a:16:
         a5:db:20:b7:c8:4d:7d:64:0c:e5:af:4a:0c:4f:a7:16:2e:32:
         99:2a:55:ff:b9:b8:af:e7:0a:c9:29:74:6a:da:ad:93:41:10:
         ca:8d:1e:3a:5f:ef:6f:aa:24:00:5f:01:79:f2:a3:51:a3:e9:
         b7:54:7c:53:95:f8:0a:56:d1:c2:fe:12:c6:e7:45:f3:91:21:
         07:0e:9a:a7:bc:98:1b:30:98:c5:59:b5:26:94:64:a5:e7:77:
         a7:6f:d6:d1:ee:1d:91:56:76:1f:91:7f:2a:1c:92:02:c2:98:
         7f:7a:1c:f6:25:43:cf:44:76:f7:d8:bf:73:52:0c:50:e6:b8:
         ca:33:cd:65:c1:2b:4d:f5:1a:40:33:38:a2:fd:57:66:2c:be:
         74:e2:26:24:db:47:b7:0a:df:72:f0:56:a8:22:31:c3:4c:01:
         e8:66:31:87:67:07:5c:d9:95:79:d8:94:9f:ae:f0:88:5a:f5:
         0d:18:30:f6:4c:06:e3:06:70:de:a0:53:36:25:a4:82:13:f1:
         06:43:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:10:28 2024 by rpki-client on console-ams.rpki-client.org