Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e39362e302f31392d3139203d3e203238303234.roa
File:                     3138362e322e39362e302f31392d3139203d3e203238303234.roa (raw, json)
Hash identifier:          TkP48Fy5sCkPviuJvqfhzpovekhObAHrqVFeP8pWW48=
Subject key identifier:   CF:C2:E7:39:65:75:16:13:A8:91:E3:13:61:C2:37:24:1F:42:3C:8B
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       56743D9AAE8124FA1DE7618827827394F9307521
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e39362e302f31392d3139203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:13 +0000
ROA not before:           Tue 05 Mar 2024 17:51:13 +0000
ROA not after:            Tue 04 Mar 2025 17:56:13 +0000
asID:                     28024
IP address blocks:        186.2.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:74:3d:9a:ae:81:24:fa:1d:e7:61:88:27:82:73:94:f9:30:75:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:13 2024 GMT
            Not After : Mar  4 17:56:13 2025 GMT
        Subject: CN=CFC2E73965751613A891E31361C237241F423C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:e0:91:8c:39:45:06:83:f5:eb:fe:38:b5:
                    da:c0:e7:5a:8a:de:86:58:64:c2:e3:d6:b1:07:ff:
                    9d:2f:3e:4e:ad:67:b5:fa:1f:ff:d4:f7:e7:0e:7c:
                    66:06:7b:ed:86:08:f4:ea:8b:b6:7a:f3:c3:b9:54:
                    fc:a2:5f:54:4a:a1:4b:4a:5f:06:fe:58:c9:01:e5:
                    05:31:5c:70:cf:58:84:d1:07:e9:ad:1f:59:36:45:
                    c2:36:be:79:5d:c6:37:fa:3d:3e:7c:52:e3:3d:31:
                    51:a7:3f:b2:f5:3f:3a:26:83:7e:22:e7:86:ab:61:
                    83:8a:e9:c8:60:0a:2d:69:c0:ac:db:55:b1:82:94:
                    92:d1:7d:8c:d3:e1:be:9b:21:d6:4a:9f:c2:96:66:
                    f1:2f:d9:62:fe:fb:a3:58:91:c7:b6:96:14:15:10:
                    26:a3:7c:9f:dc:6f:36:3a:3a:b9:dc:30:23:f2:25:
                    7d:5d:a5:e0:c4:79:eb:a5:45:97:a0:c6:f8:ef:07:
                    ca:83:d7:ef:85:ae:da:8e:e1:0a:a0:e6:64:f4:46:
                    c2:f1:9f:38:26:69:fb:62:82:92:f5:a1:74:d5:17:
                    84:8c:f5:ec:18:63:75:f6:7f:d5:a4:95:4e:21:4c:
                    27:f4:7b:b0:26:46:73:30:5f:38:26:a5:b9:1d:ec:
                    fd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C2:E7:39:65:75:16:13:A8:91:E3:13:61:C2:37:24:1F:42:3C:8B
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138362e322e39362e302f31392d3139203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:88:03:2f:d5:83:72:56:57:ca:1b:26:6a:dd:70:a4:22:3d:
         e9:17:47:b1:54:77:a9:74:89:b1:b4:9e:e7:20:92:2d:dd:80:
         3b:76:0e:a0:5b:c7:ba:f3:0b:bc:87:84:df:b8:6e:d1:59:0d:
         12:14:f5:b4:26:7c:81:0e:87:22:d6:ab:ff:89:a5:ac:f4:b9:
         28:81:94:04:da:0f:ef:8d:c1:ad:76:0c:73:bc:d0:be:d1:08:
         77:92:44:5d:2e:f9:85:6e:9d:d4:8c:2a:c9:4d:44:1e:b1:68:
         4a:77:84:58:dc:e4:ee:c0:06:8c:ac:2d:d7:b6:57:a8:d9:b7:
         e8:92:06:04:d0:17:ae:7c:14:57:3e:2d:3c:64:62:bb:95:37:
         1d:62:26:8d:5b:93:26:54:e2:e5:ff:dd:93:33:00:1f:bb:37:
         16:27:6f:0b:5a:fc:ae:dd:48:a3:b2:07:63:53:2b:c2:ef:28:
         7b:f4:d0:07:ec:31:f0:37:0b:99:6a:77:c3:42:6b:0d:cd:e2:
         a3:76:62:a6:b4:72:d5:29:8e:1b:53:3c:39:b8:57:8e:9b:a5:
         e2:1e:1d:33:d9:8d:c5:22:07:b3:3c:96:49:ca:9a:03:34:41:
         f0:2b:89:00:3e:f7:e6:d3:70:16:d8:9a:48:e2:49:bf:a0:45:
         c3:d1:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:00:33 2024 by rpki-client on console-fra.rpki-client.org