Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3138362e34332e302e302f31372d3137203d3e203237363935.roa
File:                     3138362e34332e302e302f31372d3137203d3e203237363935.roa (raw, json)
Hash identifier:          99tvU7/zMZ39kvORrddX6oc/YAEUlOIDYI4hOeYNmxE=
Subject key identifier:   85:89:BD:26:77:52:8A:B0:48:83:3A:98:77:5A:03:B3:91:4A:26:D7
Certificate issuer:       /CN=29144D8070C44852403F550F31DEC53EBF48A61F
Certificate serial:       4F86DE1F7AE166E7DA91A0A19ADFD576F2FBBF72
Authority key identifier: 29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3138362e34332e302e302f31372d3137203d3e203237363935.roa
Signing time:             Tue 05 Mar 2024 18:02:54 +0000
ROA not before:           Tue 05 Mar 2024 17:57:54 +0000
ROA not after:            Tue 04 Mar 2025 18:02:54 +0000
asID:                     27695
IP address blocks:        186.43.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:86:de:1f:7a:e1:66:e7:da:91:a0:a1:9a:df:d5:76:f2:fb:bf:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29144D8070C44852403F550F31DEC53EBF48A61F
        Validity
            Not Before: Mar  5 17:57:54 2024 GMT
            Not After : Mar  4 18:02:54 2025 GMT
        Subject: CN=8589BD2677528AB048833A98775A03B3914A26D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:53:ba:6b:56:53:cf:75:6f:cf:0e:b1:d4:
                    5a:50:c3:9d:27:cd:b6:9f:6a:8c:9c:c0:75:4a:29:
                    bf:b4:19:7d:83:fa:c0:e2:ac:d2:81:56:24:16:9b:
                    31:52:38:46:44:ff:58:6c:17:5e:87:50:6e:7e:6f:
                    3f:ca:87:31:a8:e6:34:0a:e8:25:96:5e:b8:c5:2c:
                    41:c3:7a:46:eb:fe:d3:aa:6d:05:db:bf:d7:bf:19:
                    04:66:c6:ea:6d:60:d0:b5:65:a2:94:e7:5d:c3:b1:
                    f2:5a:74:a1:d8:96:73:8a:f3:eb:2b:1c:44:b1:cf:
                    ba:8d:0a:fa:c3:cb:13:06:9a:07:e0:4d:aa:a3:75:
                    86:e9:5f:2c:7a:e1:52:78:b9:c9:2a:b7:80:23:6e:
                    98:46:38:09:10:04:a7:9b:19:cc:2f:75:dc:ff:4e:
                    33:71:2f:a2:e4:1e:6c:58:84:46:1c:fb:c2:d4:af:
                    f9:9a:a7:19:0e:ed:a7:47:44:a1:b5:3f:4b:a8:ad:
                    ba:a4:a3:91:49:c2:a8:64:51:05:d8:78:64:41:7f:
                    7e:91:6e:da:79:d1:b2:09:81:d2:53:4b:f0:00:eb:
                    26:c9:46:82:3d:59:90:37:2c:98:11:2c:6c:3e:a3:
                    52:e8:e8:07:85:36:e5:b5:ce:39:5c:2f:94:a0:9d:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:89:BD:26:77:52:8A:B0:48:83:3A:98:77:5A:03:B3:91:4A:26:D7
            X509v3 Authority Key Identifier:
                keyid:29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3138362e34332e302e302f31372d3137203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.43.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         66:1e:37:47:66:f2:4f:a7:fb:0c:72:70:47:6b:3b:9d:0d:9f:
         5b:df:6b:09:90:35:bb:d5:2a:80:b8:75:57:c9:ba:a5:34:59:
         f4:4e:25:96:36:03:44:b7:3e:46:f0:fa:61:44:f8:a4:00:83:
         75:c2:f7:c2:04:e8:21:12:ae:68:d2:5c:57:c6:59:4a:66:01:
         3e:68:c5:db:b8:1d:2b:03:18:d5:4d:5b:17:cb:6b:18:2d:84:
         9c:50:b4:a0:e2:5c:e3:2d:54:2b:3d:15:17:d7:e1:30:7c:34:
         5a:e6:57:66:2b:37:95:0f:31:93:2b:f6:88:4e:5f:c5:cd:0e:
         75:94:8d:95:8e:c9:6f:f3:f0:87:56:00:a1:af:5f:58:48:42:
         b3:87:ce:97:20:0f:fe:a1:db:12:c6:8e:92:db:93:dd:7b:98:
         91:be:5f:ba:c1:92:0c:40:db:3e:0a:2e:b4:f2:cc:3b:87:52:
         8b:2f:92:37:06:c1:4d:3f:4e:5f:33:70:28:fc:d3:e0:e0:3e:
         e7:92:c1:75:8a:e1:b1:d1:ff:32:32:72:ef:d6:43:5f:3f:a1:
         52:a5:6f:15:eb:7a:eb:83:ff:8f:d4:d9:5f:e7:fc:1a:80:bb:
         a0:ae:af:da:49:38:e2:36:33:a5:b0:d3:02:b2:07:17:ca:2e:
         e2:ce:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:56:07 2024 by rpki-client on console-fra.rpki-client.org