Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS262182.roa
File:                     AS262182.roa (raw, json)
Hash identifier:          c0WqyMC1Twk0zz6f3inoVf4fVOkRFMYGR9QMIukkBUk=
Subject key identifier:   3C:87:25:EB:E8:0B:DB:F2:8B:99:09:3F:23:4D:F0:B2:DD:2D:A7:9C
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       46417A0DC282DBEF8DBEFCA8F37E0070AFC6B6FD
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS262182.roa
Signing time:             Tue 05 Mar 2024 17:55:23 +0000
ROA not before:           Tue 05 Mar 2024 17:50:23 +0000
ROA not after:            Tue 04 Mar 2025 17:55:23 +0000
asID:                     262182
IP address blocks:        186.118.186.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:41:7a:0d:c2:82:db:ef:8d:be:fc:a8:f3:7e:00:70:af:c6:b6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Mar  5 17:50:23 2024 GMT
            Not After : Mar  4 17:55:23 2025 GMT
        Subject: CN=3C8725EBE80BDBF28B99093F234DF0B2DD2DA79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:79:66:e5:b8:c9:88:fc:67:76:71:58:1f:
                    80:ad:5a:69:02:40:b6:d6:30:93:63:ae:be:75:5a:
                    23:66:0a:36:b9:06:c8:fb:76:b1:bc:71:5a:dd:c5:
                    ec:d1:4f:d1:3e:d4:34:33:48:f2:7e:8f:15:e8:71:
                    58:b8:ab:4c:a9:66:33:83:41:29:10:09:77:09:4d:
                    02:cc:22:9e:03:04:d7:5e:6c:f1:51:7f:2e:0b:07:
                    9a:ed:0a:a3:1d:f2:8d:49:f9:ed:db:40:c1:7c:e8:
                    6c:7f:d2:69:ad:10:91:8d:53:8a:28:94:ea:59:e2:
                    99:f5:ff:8a:aa:d8:a3:a6:1d:42:8e:74:54:8f:3f:
                    71:11:db:ae:b7:03:18:80:e0:12:ca:0a:9e:bf:c7:
                    7c:52:03:8b:a7:e0:f1:90:0f:8b:db:e7:c4:7f:80:
                    11:21:85:da:e5:32:1b:9c:51:2d:d2:2c:d1:81:3b:
                    3b:25:e5:2b:0d:a8:a2:38:29:3b:6a:57:61:48:ed:
                    d3:ff:1b:9b:61:ba:d8:86:55:ac:38:03:fb:1e:c0:
                    fe:a7:89:9a:87:27:28:06:5f:61:2c:cd:1b:51:fd:
                    4a:ff:b8:dc:c9:09:47:9f:e7:00:95:6d:08:d7:41:
                    6d:6d:db:50:87:32:83:1c:a8:85:22:c6:ef:56:f8:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:87:25:EB:E8:0B:DB:F2:8B:99:09:3F:23:4D:F0:B2:DD:2D:A7:9C
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS262182.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.118.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:ca:e0:af:7a:c6:f5:eb:d3:fd:30:c5:02:2a:ab:c0:47:
         a6:a0:b3:6d:15:54:f1:5c:b6:26:af:b0:1e:c0:f5:c3:de:02:
         42:61:c4:46:c3:38:f9:19:9c:ad:44:da:1e:3f:9e:b5:d4:95:
         bf:7f:0f:ef:ba:4b:4e:ea:7e:7e:be:76:92:d9:0a:00:40:1b:
         99:f4:76:f6:3c:0e:09:4b:87:02:ea:79:e9:e3:a2:63:6c:7c:
         aa:7b:dc:bc:3b:5c:fa:22:f1:26:e6:42:d4:02:cf:0e:3a:2f:
         82:31:ab:75:32:82:cd:14:d7:c7:99:ad:7d:74:eb:2b:0d:97:
         37:18:61:1a:1c:11:aa:2f:68:6e:0e:29:ba:b8:29:60:e9:4b:
         f5:d3:37:a5:dd:28:a0:b0:65:a9:1c:21:77:b5:6d:40:8a:7e:
         b1:85:07:d0:85:58:d3:19:37:a0:d1:d0:18:81:f6:2d:41:88:
         3f:90:63:b1:0a:63:72:a0:48:e6:19:55:db:cb:ec:cb:c8:c4:
         e8:58:58:90:b3:6d:20:1d:d8:53:f9:48:30:a4:c9:37:86:c5:
         17:21:9c:40:dd:8a:d1:a2:df:7f:87:0d:19:08:ac:62:a7:68:
         37:d1:1c:10:3f:d9:0e:02:ce:19:83:cb:ca:4f:f1:d1:dc:5d:
         b3:68:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org