Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231332e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3231332e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          6IharaBBqGFZPVB3J2cs/raSykEIj9WmKJtlGxnfEgM=
Subject key identifier:   0D:72:4B:B1:55:15:AC:D5:0A:86:0B:B0:0E:B4:2B:A1:B3:7A:0F:53
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       079B1CE231437FAACCC0ADF554F63DC5DF0BAAEC
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231332e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 05 Mar 2024 17:56:05 +0000
ROA not before:           Tue 05 Mar 2024 17:51:05 +0000
ROA not after:            Tue 04 Mar 2025 17:56:05 +0000
asID:                     262189
IP address blocks:        186.1.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9b:1c:e2:31:43:7f:aa:cc:c0:ad:f5:54:f6:3d:c5:df:0b:aa:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Mar  5 17:51:05 2024 GMT
            Not After : Mar  4 17:56:05 2025 GMT
        Subject: CN=0D724BB15515ACD50A860BB00EB42BA1B37A0F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:10:01:d0:3f:f7:c5:64:b2:5c:ba:e4:38:
                    5a:65:f9:dc:97:d3:25:47:38:e8:ec:12:e6:f4:f3:
                    7f:98:d8:4e:da:c4:1a:38:83:bb:e7:80:e2:6a:fb:
                    a5:14:25:85:94:d5:71:02:fe:25:fb:96:68:e9:a1:
                    c9:21:24:32:87:77:ef:32:0e:a2:c3:68:4f:44:86:
                    4d:35:98:8d:8c:ec:5e:5b:7e:27:f7:b7:80:26:a1:
                    41:f0:e6:29:15:86:a1:bb:78:0f:ab:d3:d4:49:22:
                    c2:27:ce:43:11:ea:af:e0:da:75:26:91:58:75:7e:
                    88:4e:d0:d3:74:f6:34:d6:e7:b9:fb:80:4e:ac:d0:
                    57:5e:f6:87:77:7d:34:78:f1:8d:b9:0b:d7:57:69:
                    38:46:b6:65:14:48:1d:42:42:d6:f0:5f:76:c2:74:
                    8e:6d:bc:cc:85:29:f0:4b:8d:47:ad:a7:30:52:2a:
                    03:13:bf:74:2f:53:b8:3b:8b:62:9b:8e:fc:56:91:
                    87:07:13:7e:8e:6e:c9:bc:bc:43:10:3b:2f:a8:be:
                    9a:e4:28:de:af:97:03:b3:0b:65:22:dc:c6:07:54:
                    70:6c:8e:3e:3c:1c:43:43:44:05:dd:21:5c:ba:6c:
                    0d:dd:ba:ad:33:92:8e:fe:be:ff:4a:3b:ca:49:e5:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:72:4B:B1:55:15:AC:D5:0A:86:0B:B0:0E:B4:2B:A1:B3:7A:0F:53
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231332e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:c3:81:71:9d:29:94:02:49:50:b4:00:4f:09:b6:13:fa:4e:
         a1:bc:3d:45:59:ca:e8:78:c5:de:48:e5:b2:6e:f4:04:ae:d5:
         b3:45:df:92:23:8d:08:a4:39:fb:2b:66:a8:6f:8a:67:92:95:
         d1:1c:fd:17:2c:3f:0a:d0:4c:70:da:2c:bd:7d:bc:13:36:a4:
         3c:4e:3b:80:70:92:86:d3:f5:2d:e6:cb:ab:f8:9e:63:57:b8:
         8e:af:38:54:85:46:09:36:0d:6c:b7:03:da:e1:93:e0:a4:07:
         d5:2c:86:98:b9:63:9b:54:b9:aa:19:b3:2f:df:de:b3:7f:11:
         21:ab:dc:be:1b:63:ab:8b:33:0f:ef:d7:37:96:22:d4:b8:1e:
         52:b3:2c:1e:e8:bc:15:95:28:5e:b4:6f:a0:ce:26:13:db:4f:
         46:75:c5:8e:1a:f7:e6:f7:0f:c8:48:8f:22:43:17:5c:32:1f:
         f8:6e:33:8f:9a:4f:47:a3:e7:7b:cf:80:30:7b:de:b3:ac:9c:
         97:b7:62:2c:5c:6a:08:bf:09:42:01:fc:0c:f1:fe:99:64:15:
         5c:61:0d:b5:61:d8:92:a7:d0:fd:d8:25:5e:10:1a:43:2c:04:
         cc:75:83:6e:32:dc:8b:d8:85:c8:b5:ff:eb:91:ec:72:f4:0a:
         5a:d3:8b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org