Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3138362e3135392e36342e302f31392d3139203d3e203237363935.roa
File:                     3138362e3135392e36342e302f31392d3139203d3e203237363935.roa (raw, json)
Hash identifier:          972+1pLNGGt27LAmR/c0NyyK+XfzhxmjS9HHnwj8pUM=
Subject key identifier:   89:5C:52:29:8F:28:75:00:6D:90:B7:68:96:13:6E:B7:C0:AC:EC:1C
Certificate issuer:       /CN=29144D8070C44852403F550F31DEC53EBF48A61F
Certificate serial:       5277AE83A334BD7E2B2D1A667B63255BBA2B98DF
Authority key identifier: 29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3138362e3135392e36342e302f31392d3139203d3e203237363935.roa
Signing time:             Tue 05 Mar 2024 18:02:55 +0000
ROA not before:           Tue 05 Mar 2024 17:57:55 +0000
ROA not after:            Tue 04 Mar 2025 18:02:55 +0000
asID:                     27695
IP address blocks:        186.159.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:77:ae:83:a3:34:bd:7e:2b:2d:1a:66:7b:63:25:5b:ba:2b:98:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29144D8070C44852403F550F31DEC53EBF48A61F
        Validity
            Not Before: Mar  5 17:57:55 2024 GMT
            Not After : Mar  4 18:02:55 2025 GMT
        Subject: CN=895C52298F2875006D90B76896136EB7C0ACEC1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0b:4c:d4:1f:1e:b0:7d:91:ab:ed:1e:af:58:
                    67:11:d8:7b:df:57:f1:0c:f1:22:a8:ee:d7:e3:ce:
                    a9:c6:2e:7a:2b:84:6c:31:a9:e2:15:0d:59:d7:64:
                    e6:51:09:93:9d:d2:42:56:9d:4b:da:9b:ec:84:dd:
                    d6:39:28:53:38:99:24:29:2b:6f:8a:f0:89:f5:19:
                    8e:aa:de:c3:b8:72:a1:b8:af:a5:21:3a:95:07:e5:
                    fe:94:67:e3:53:2b:26:44:24:6e:69:47:b3:d0:c7:
                    ee:a8:2c:91:4c:34:2f:7c:bc:e4:e3:24:32:5e:9e:
                    84:c8:8c:7a:5a:18:4e:a6:7b:e7:3c:34:83:d3:70:
                    9b:44:7d:9b:e5:be:bd:7c:fc:50:bb:8b:8d:47:7d:
                    3b:ef:62:79:4e:9a:5e:d2:40:c2:bd:c3:d9:d4:98:
                    30:30:a5:a9:d1:01:5f:b2:b0:5a:2c:51:a1:dd:0e:
                    01:68:1c:9f:17:dd:54:6e:a5:a8:11:9f:e3:68:49:
                    88:14:e8:bd:8e:8d:4b:3f:21:e5:11:e7:cf:8b:8d:
                    6f:28:39:2c:dc:67:f1:fa:ff:22:4f:ba:05:99:61:
                    a4:8e:07:91:54:aa:b0:c3:89:c9:79:8e:d7:b3:9b:
                    eb:ed:7c:36:ea:7c:92:ad:40:5c:e7:9b:31:50:e2:
                    6e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5C:52:29:8F:28:75:00:6D:90:B7:68:96:13:6E:B7:C0:AC:EC:1C
            X509v3 Authority Key Identifier:
                keyid:29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3138362e3135392e36342e302f31392d3139203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         38:2a:67:c4:05:3b:cf:a6:6f:c6:0d:41:19:3c:a2:44:bb:74:
         98:90:bd:47:98:66:b0:fa:55:52:be:8b:6c:95:3a:10:6d:73:
         7d:11:f3:f7:fc:a9:1c:ad:42:2e:b6:d4:5c:3b:d7:a9:20:a3:
         59:83:52:a0:84:14:b0:70:86:95:e6:4e:61:5f:7e:8a:ae:ca:
         22:c5:7f:86:87:ed:8f:95:a9:77:d5:04:0c:a2:51:6a:b6:94:
         5a:5c:f3:ce:f2:87:5d:b4:f5:5d:f1:d5:d0:ec:17:d0:74:96:
         4a:ff:09:02:9e:46:d8:0d:e6:52:ca:23:5f:d7:84:f5:79:11:
         6a:c7:b6:a6:55:05:89:21:61:7e:e1:91:7a:5d:23:0f:34:c6:
         82:a6:54:77:c7:ed:31:db:41:c5:53:bf:2a:b6:8c:a2:a0:96:
         f7:7a:b3:90:10:10:03:12:1c:0f:e1:40:76:b1:65:27:bf:c0:
         3e:96:10:c1:1b:2b:be:9a:0f:02:a7:b7:fe:e0:18:8c:98:3e:
         40:39:79:e0:7b:99:39:6d:27:e7:0b:22:a9:21:f5:f0:0a:db:
         27:03:1b:09:75:71:29:63:17:dd:3b:8f:96:3a:a6:1a:73:4d:
         ce:f6:b7:9b:65:f4:7a:50:40:45:a4:ba:7f:58:05:36:3a:f5:
         44:c1:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:51 2024 by rpki-client on console-ams.rpki-client.org