Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3132382e302f31382d3234203d3e203532323537.roa
File:                     3138362e33332e3132382e302f31382d3234203d3e203532323537.roa (raw, json)
Hash identifier:          XRnFrf+SjchDxkIIjnKWURG6ArLi26IinJM2PRCNUqM=
Subject key identifier:   61:13:E8:A2:57:55:E4:9B:C3:04:FE:0E:F6:EE:78:AC:D1:C3:02:AD
Certificate issuer:       /CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
Certificate serial:       38164ED8A8FE6A85DDFFB62F84D9BC938064771E
Authority key identifier: 63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3132382e302f31382d3234203d3e203532323537.roa
Signing time:             Tue 05 Mar 2024 18:04:28 +0000
ROA not before:           Tue 05 Mar 2024 17:59:28 +0000
ROA not after:            Tue 04 Mar 2025 18:04:28 +0000
asID:                     52257
IP address blocks:        186.33.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:16:4e:d8:a8:fe:6a:85:dd:ff:b6:2f:84:d9:bc:93:80:64:77:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
        Validity
            Not Before: Mar  5 17:59:28 2024 GMT
            Not After : Mar  4 18:04:28 2025 GMT
        Subject: CN=6113E8A25755E49BC304FE0EF6EE78ACD1C302AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dc:24:c1:5a:30:63:9f:36:8b:e5:cb:e8:ab:
                    d4:56:1c:8b:a8:51:c2:b9:bb:5f:7a:e4:aa:f0:a8:
                    1c:3f:26:c7:44:82:b0:0d:67:42:60:c3:f6:68:a1:
                    45:80:05:1e:73:5e:19:10:a7:b9:42:18:86:48:2c:
                    0b:40:c8:c4:1e:e1:90:f5:62:c5:12:2b:be:37:7e:
                    ce:9c:9c:14:5c:4f:fd:40:cc:e6:6e:16:70:bf:62:
                    f3:79:0b:1a:74:2e:f7:d3:a8:6d:a5:0f:da:17:f8:
                    b5:31:70:5a:a7:a3:6a:c7:59:af:f6:a6:be:4f:b1:
                    5e:d6:a7:6f:7f:f6:6d:f1:de:a3:e1:27:f6:fc:03:
                    a6:49:b4:a6:4c:9b:1b:d9:fd:bb:b2:c1:50:4b:4a:
                    7c:56:e5:26:a5:31:68:5b:d3:21:05:64:70:e1:19:
                    33:7e:c5:77:03:e8:b9:d9:f9:60:e8:73:09:e1:63:
                    e4:a8:33:26:b5:1a:16:7e:0f:3c:ef:a4:96:ec:fc:
                    b9:1f:6c:a0:03:5a:0d:39:54:b0:e0:a6:6f:55:5f:
                    ed:8c:ba:7e:f4:5b:0e:74:10:88:ba:8c:68:9f:99:
                    ca:27:92:35:98:96:26:40:27:f7:b5:7a:f1:45:d9:
                    1f:bf:51:3d:7a:f7:b3:ce:b3:5a:c6:50:6c:ad:21:
                    b4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:13:E8:A2:57:55:E4:9B:C3:04:FE:0E:F6:EE:78:AC:D1:C3:02:AD
            X509v3 Authority Key Identifier:
                keyid:63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3132382e302f31382d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         43:09:67:bb:56:e0:2f:e6:1f:80:fd:06:a9:e8:3f:d1:3a:02:
         05:c2:5f:92:9e:ad:f7:80:c3:4b:21:72:60:53:34:db:23:8e:
         f4:ed:c2:54:f4:78:f4:cd:6e:23:3e:cb:9b:fd:d3:2b:93:f7:
         7c:eb:83:72:43:b0:f9:e1:6f:29:d8:94:99:93:95:1d:95:56:
         68:7d:b9:7e:69:c0:8b:e8:7a:de:53:92:38:61:78:9a:3c:77:
         4c:db:85:88:48:01:73:0a:8a:83:af:58:7f:fc:c6:ab:67:fd:
         2b:67:d0:6b:53:e3:2f:43:c6:05:90:a7:b2:34:1a:a5:89:ad:
         de:fa:c2:c0:4d:95:69:cc:38:63:85:fd:61:9f:df:2a:ff:76:
         7e:c4:58:65:02:90:7c:74:a2:cd:78:27:7b:bf:32:b6:29:d1:
         35:9e:c3:ec:13:5c:f1:63:ae:18:f0:53:c6:fe:07:15:b8:7c:
         d3:a0:48:ff:7e:53:f3:81:05:f6:8e:01:94:08:28:cf:9e:2e:
         0f:f7:2a:7f:bf:51:45:f8:89:3e:af:0a:76:98:8a:90:76:bb:
         6f:6f:39:be:d4:92:a4:77:b9:83:ce:6e:96:03:46:17:a8:3c:
         4d:02:b6:04:04:f6:bb:d1:30:a1:e5:86:07:1a:9c:eb:c6:60:
         8d:99:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:25 2024 by rpki-client on console-ams.rpki-client.org