Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231322e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3231322e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          jnWUOrZsZx3ObXRH9HwMWiV1PsXpsjhXhStGOaB7eoM=
Subject key identifier:   A9:EA:89:6A:A2:03:2A:B3:F8:D1:4C:63:3F:8C:5F:43:B9:01:1B:18
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       587F8DDB32FA4284CA40B6BEFBFF2A101A763656
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231322e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 05 Mar 2024 17:56:05 +0000
ROA not before:           Tue 05 Mar 2024 17:51:05 +0000
ROA not after:            Tue 04 Mar 2025 17:56:05 +0000
asID:                     262189
IP address blocks:        186.1.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7f:8d:db:32:fa:42:84:ca:40:b6:be:fb:ff:2a:10:1a:76:36:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Mar  5 17:51:05 2024 GMT
            Not After : Mar  4 17:56:05 2025 GMT
        Subject: CN=A9EA896AA2032AB3F8D14C633F8C5F43B9011B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cb:25:eb:1f:51:51:1a:01:2c:b5:ac:d7:60:
                    7f:b9:83:b6:72:e0:e5:80:4e:08:27:bb:cd:bc:95:
                    20:be:1a:18:7b:d8:c2:12:aa:0a:93:8f:65:e3:4c:
                    91:0e:b1:b3:11:05:04:ab:f5:ff:e9:18:cc:d1:2e:
                    02:71:d0:11:55:89:ea:5e:ff:2b:5f:dd:1f:d0:c2:
                    e4:80:91:60:4c:e3:a4:29:47:10:8c:ac:a8:eb:62:
                    dd:d9:22:c4:73:b9:47:72:fa:ca:e4:47:be:36:38:
                    08:7e:c8:71:3b:b6:a8:89:17:02:f0:d4:85:da:b7:
                    93:b9:23:f0:03:70:d2:54:04:ea:b3:32:7f:0d:c8:
                    ef:b3:0e:aa:7d:2c:20:6d:ad:07:20:fc:38:0b:e3:
                    dc:b6:a4:b9:d8:d1:40:02:2f:22:df:25:ff:f8:a9:
                    34:cf:5f:98:52:a9:d8:69:d8:e7:ad:34:2f:20:79:
                    b1:c6:95:98:5f:95:77:86:d8:3e:6e:6a:58:da:2d:
                    af:23:fb:6c:60:84:f1:90:aa:9b:61:1e:c3:ac:73:
                    d9:df:41:ae:14:09:55:b9:22:23:1c:06:21:69:8a:
                    be:5d:f3:96:fa:79:72:da:77:ed:0e:57:f0:d3:46:
                    e9:58:19:2c:3c:55:1b:bb:24:63:d4:28:5c:8d:04:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EA:89:6A:A2:03:2A:B3:F8:D1:4C:63:3F:8C:5F:43:B9:01:1B:18
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231322e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:af:ce:cd:fb:7c:5f:75:d5:47:6f:c0:67:78:29:1c:f4:c8:
         76:2b:ba:c4:36:e3:01:af:65:b4:a3:f6:20:cd:12:25:26:d0:
         2d:1a:0e:7c:bb:fc:82:4b:90:d4:75:63:2c:93:1d:fc:3c:b4:
         56:95:94:57:97:d3:fd:f4:ea:d4:65:37:99:ea:76:24:bc:a7:
         b5:40:93:e7:da:d6:81:e2:56:67:c2:dd:a0:74:21:0f:7b:d4:
         85:3a:e0:1c:b6:0d:95:b1:26:c3:cf:6b:e0:89:2c:77:45:84:
         87:7a:82:fc:21:1e:da:03:a9:f6:bc:ea:06:1f:1c:24:63:5a:
         60:11:74:6e:f3:95:93:8b:32:5a:ae:ff:21:54:9b:55:81:48:
         01:8d:95:95:ec:ab:ba:a3:f0:05:d1:56:f6:4b:db:e4:4d:33:
         c5:bc:32:c6:22:ae:49:14:1f:2f:29:74:5b:40:8d:ba:c8:10:
         a3:d3:a0:da:ba:52:09:db:d4:2c:ee:6e:00:cf:a5:93:0f:19:
         35:37:ef:0f:0b:1c:bf:5d:16:dc:34:e2:40:96:4d:37:f4:d6:
         0a:5e:7e:27:af:ab:2e:71:bc:a7:88:04:90:27:cd:a5:bc:90:
         37:5c:b6:68:64:9c:8d:29:d1:80:2c:6c:d8:76:71:09:51:23:
         e4:4a:01:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org