Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3230382e302f32302d3230203d3e20323632313839.roa
File:                     3138362e312e3230382e302f32302d3230203d3e20323632313839.roa (raw, json)
Hash identifier:          dsvbhjS8IxjTMWaS95kFueSKIGNcdPPwhPIrF2ry38o=
Subject key identifier:   A6:4C:A9:2B:AB:8B:F5:4A:6F:EF:A8:C6:2A:EA:06:57:FA:F5:5B:DA
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       0607C14373E634AFFB05268B29B4D34D7CFABF49
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3230382e302f32302d3230203d3e20323632313839.roa
Signing time:             Tue 05 Mar 2024 17:56:05 +0000
ROA not before:           Tue 05 Mar 2024 17:51:05 +0000
ROA not after:            Tue 04 Mar 2025 17:56:05 +0000
asID:                     262189
IP address blocks:        186.1.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:07:c1:43:73:e6:34:af:fb:05:26:8b:29:b4:d3:4d:7c:fa:bf:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Mar  5 17:51:05 2024 GMT
            Not After : Mar  4 17:56:05 2025 GMT
        Subject: CN=A64CA92BAB8BF54A6FEFA8C62AEA0657FAF55BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:9f:8a:fd:5b:e0:d4:f3:30:78:a5:f5:93:
                    ea:cc:7c:60:b8:b3:77:42:57:4d:90:d0:bc:0b:96:
                    3b:e2:a2:0e:eb:db:80:c6:66:16:d4:e3:c9:be:44:
                    de:d1:97:b7:45:69:77:e9:0c:f1:27:9f:3b:11:cf:
                    90:ee:bc:9e:74:4d:e2:45:b4:e8:a3:a9:d0:f7:89:
                    72:36:e0:a9:d1:b0:a2:5a:fa:3d:b1:08:02:6a:71:
                    c0:a1:08:92:14:4c:0e:c2:8e:ab:db:cc:25:29:3a:
                    59:ba:06:e3:57:ca:e3:e3:d0:f2:ca:b3:d7:0d:6f:
                    7f:3e:af:86:f3:04:2d:02:b3:09:c3:01:9b:16:76:
                    31:87:44:07:9d:27:0f:33:0d:ce:8e:0a:e1:3a:05:
                    c1:92:dd:b1:c4:d5:28:59:6e:a9:c5:b5:d1:9c:e2:
                    8e:6c:41:8c:42:c9:c9:7d:d5:e1:16:c3:1b:af:df:
                    36:a0:31:d6:14:ea:56:6a:9a:d8:cd:2f:64:96:dd:
                    02:06:77:e7:1f:4a:33:0b:1f:44:7d:8c:96:f5:33:
                    0a:55:1d:06:84:67:dc:f3:b6:0d:c9:0d:15:56:fc:
                    f5:7b:c6:57:ce:9e:bc:34:e4:53:8a:d5:05:ed:a7:
                    28:3a:3b:22:04:82:93:8b:03:69:f9:23:64:9e:96:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4C:A9:2B:AB:8B:F5:4A:6F:EF:A8:C6:2A:EA:06:57:FA:F5:5B:DA
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3230382e302f32302d3230203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:63:5f:2d:9a:3d:18:db:de:c7:e4:1e:7e:c9:c0:d6:88:41:
         b5:d8:1e:d8:1d:60:41:f8:b5:aa:00:53:06:89:3b:56:e7:be:
         24:c8:ee:cc:5a:65:37:a2:64:a1:4e:40:b7:92:a9:cc:e5:db:
         e8:4b:b0:7b:f0:30:e0:c6:5e:27:48:73:f0:d1:c3:bd:5c:7b:
         67:08:94:26:39:6f:50:54:e5:64:d5:74:ac:6c:70:c0:31:69:
         92:da:d9:cc:59:de:4b:5c:52:fb:01:ad:d7:7d:ef:e3:87:82:
         8b:c3:69:10:d6:98:55:e8:2a:4d:9b:f5:af:93:5d:a0:a0:c0:
         d1:17:c8:1e:3a:67:79:5c:70:a4:17:88:95:0f:61:2d:0d:c8:
         df:81:60:39:52:5e:af:16:8b:27:d7:9f:07:0e:05:f7:b1:0a:
         32:8b:af:73:a7:74:b3:f1:59:6a:fb:27:8c:69:d4:77:e5:86:
         20:3f:b2:10:92:94:e6:8d:e1:e2:bd:63:a4:5d:86:b7:e3:c2:
         2f:6e:39:eb:e6:9b:7c:93:6b:91:f1:34:5f:75:7b:ff:51:05:
         eb:43:db:0d:cb:e9:df:a4:ed:c1:9d:16:42:d3:06:45:ad:af:
         7f:cc:26:ef:9b:29:00:29:b5:1d:43:c9:bf:0e:6b:fb:58:a7:
         c7:ee:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org