Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B35A6DC3A6ABCF290D29C2E39B56C6F5917F85263DF0EA260387941E1FB69C6/0/3138362e322e3234302e302f32322d3234203d3e203532343038.roa
File:                     3138362e322e3234302e302f32322d3234203d3e203532343038.roa (raw, json)
Hash identifier:          2GR8tFjo+sHMSpet6qIChUhNf505zKprD75GNnN2btU=
Subject key identifier:   61:FF:B9:F2:64:CA:8F:53:22:B3:79:DA:D0:8F:F2:30:F7:FA:9B:0E
Certificate issuer:       /CN=A90C0F970C264F38A28A9E968987ACE91722E09C
Certificate serial:       3A4BF0A5EF8875CC9A17CB692FC9F832F89B6093
Authority key identifier: A9:0C:0F:97:0C:26:4F:38:A2:8A:9E:96:89:87:AC:E9:17:22:E0:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A90C0F970C264F38A28A9E968987ACE91722E09C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B35A6DC3A6ABCF290D29C2E39B56C6F5917F85263DF0EA260387941E1FB69C6/0/3138362e322e3234302e302f32322d3234203d3e203532343038.roa
Signing time:             Tue 05 Mar 2024 17:47:03 +0000
ROA not before:           Tue 05 Mar 2024 17:42:03 +0000
ROA not after:            Tue 04 Mar 2025 17:47:03 +0000
asID:                     52408
IP address blocks:        186.2.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B35A6DC3A6ABCF290D29C2E39B56C6F5917F85263DF0EA260387941E1FB69C6/0/A90C0F970C264F38A28A9E968987ACE91722E09C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B35A6DC3A6ABCF290D29C2E39B56C6F5917F85263DF0EA260387941E1FB69C6/0/A90C0F970C264F38A28A9E968987ACE91722E09C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A90C0F970C264F38A28A9E968987ACE91722E09C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4b:f0:a5:ef:88:75:cc:9a:17:cb:69:2f:c9:f8:32:f8:9b:60:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90C0F970C264F38A28A9E968987ACE91722E09C
        Validity
            Not Before: Mar  5 17:42:03 2024 GMT
            Not After : Mar  4 17:47:03 2025 GMT
        Subject: CN=61FFB9F264CA8F5322B379DAD08FF230F7FA9B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:b4:9c:1b:6a:06:8a:46:f4:29:08:be:ce:
                    25:3e:1e:43:29:e9:f3:7c:08:f2:f7:7b:65:5c:43:
                    77:67:84:a4:f2:5e:58:60:1b:c2:69:a1:a4:2a:7d:
                    85:86:32:c5:d8:49:09:b5:2a:d1:1e:0d:95:7e:5c:
                    90:ac:b3:7f:b1:4f:99:16:01:3f:36:a4:d8:6e:fd:
                    ca:fc:8a:f8:29:5d:c4:10:bd:91:d1:32:24:df:dc:
                    52:d0:bc:7a:fb:9c:25:26:ea:21:07:66:85:68:f8:
                    b8:b4:c6:28:94:bd:94:5d:a7:ae:71:62:7b:b8:bf:
                    71:9c:35:20:e6:84:2a:38:15:44:46:34:cf:1e:23:
                    5a:55:a2:5b:c4:88:bf:49:37:9c:38:f2:b9:7e:4f:
                    c7:f9:c2:5a:68:79:76:f9:a9:fb:f5:77:43:b5:1e:
                    91:f1:cb:f7:49:d1:4b:08:68:13:8f:49:a6:75:51:
                    32:74:54:60:e1:97:9f:f7:0e:11:7f:82:9f:34:1d:
                    b1:86:2b:5a:20:bb:71:ee:3c:b7:ee:50:38:54:ff:
                    63:e1:40:c5:f6:ef:65:ae:29:a1:f5:d6:73:36:be:
                    80:3c:b1:c5:95:b4:6e:41:b7:f3:66:ed:f7:d8:6e:
                    77:64:fb:d9:ca:90:3a:49:f3:3c:ee:48:1b:6e:79:
                    e0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FF:B9:F2:64:CA:8F:53:22:B3:79:DA:D0:8F:F2:30:F7:FA:9B:0E
            X509v3 Authority Key Identifier:
                keyid:A9:0C:0F:97:0C:26:4F:38:A2:8A:9E:96:89:87:AC:E9:17:22:E0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B35A6DC3A6ABCF290D29C2E39B56C6F5917F85263DF0EA260387941E1FB69C6/0/A90C0F970C264F38A28A9E968987ACE91722E09C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A90C0F970C264F38A28A9E968987ACE91722E09C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B35A6DC3A6ABCF290D29C2E39B56C6F5917F85263DF0EA260387941E1FB69C6/0/3138362e322e3234302e302f32322d3234203d3e203532343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:64:bf:34:58:7f:bc:ab:18:82:4f:a2:f1:5b:38:22:2a:81:
         a4:21:0e:b2:a1:a4:7b:3f:63:36:07:c6:e1:a5:d0:f2:18:be:
         94:6c:6f:9d:97:52:a6:fc:23:1e:94:77:66:ff:82:7a:3c:c0:
         e2:21:45:0c:d5:06:a7:29:b5:08:4e:af:5f:4c:0b:95:62:e6:
         b1:45:f7:d5:f9:cd:fa:fc:1d:db:4f:f7:00:e0:86:64:e6:97:
         d1:43:b6:76:b6:3d:d8:dc:7f:5f:80:fa:c6:93:42:b0:69:f8:
         3e:36:38:2d:cb:3a:da:a6:c8:5e:b3:2f:ad:9f:ed:0b:c2:e7:
         22:75:a6:d8:4f:be:23:21:e9:45:69:79:9b:1a:7a:ed:ff:b9:
         43:4b:a5:a0:a1:0b:84:a2:2c:b8:9d:f7:a4:24:d4:5e:9f:e0:
         b9:fc:cd:94:0d:6b:5f:d4:9b:d5:8d:ec:48:ed:a6:ae:ce:94:
         74:fa:f7:06:41:9d:99:c2:6a:3b:00:07:8e:18:53:81:63:80:
         df:7c:5c:9c:2a:e5:cb:df:06:6c:05:01:0e:2f:95:d8:08:66:
         e9:d0:00:7c:c8:61:25:56:b7:69:2c:c2:68:d1:03:37:7b:35:
         6e:d4:46:9e:7b:9e:6e:ff:6f:b2:78:a4:5d:54:85:a5:22:b4:
         4e:55:bc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:58:21 2024 by rpki-client on console-fra.rpki-client.org