Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231382e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3231382e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          j27VP46n8aurxPHTE2khzGIhWetjQVksnhiPtosk0Mo=
Subject key identifier:   A1:C2:49:EE:15:66:FE:A6:55:F4:30:61:87:D3:4C:CA:DC:DB:CE:80
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       34FADDC7AF97121DFB906E132116E53EE41FF152
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231382e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 05 Mar 2024 17:56:03 +0000
ROA not before:           Tue 05 Mar 2024 17:51:03 +0000
ROA not after:            Tue 04 Mar 2025 17:56:03 +0000
asID:                     262189
IP address blocks:        186.1.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fa:dd:c7:af:97:12:1d:fb:90:6e:13:21:16:e5:3e:e4:1f:f1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Mar  5 17:51:03 2024 GMT
            Not After : Mar  4 17:56:03 2025 GMT
        Subject: CN=A1C249EE1566FEA655F4306187D34CCADCDBCE80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:bc:58:96:6d:4e:bd:76:f4:ab:34:de:c7:
                    76:c0:a4:ce:db:cf:5e:52:bc:f6:d4:fb:94:7d:5d:
                    1b:bc:6d:a7:29:e0:5b:3e:aa:21:90:d9:0d:92:53:
                    71:35:28:98:eb:ad:ee:f9:d2:06:21:56:15:3a:74:
                    38:fc:a6:bc:c2:a4:9d:5f:3f:d0:fe:64:23:57:2a:
                    10:fa:d2:3a:ca:64:75:10:f7:e1:e0:1e:75:7a:85:
                    07:be:17:68:ed:b6:68:b8:47:b1:4b:73:01:0b:0b:
                    99:30:24:f9:a2:f6:0f:1f:e2:ac:fc:52:7f:84:60:
                    f1:29:e0:e9:eb:0c:0a:e5:5a:92:e7:3f:15:d5:9d:
                    d6:42:0a:ee:9b:d3:1d:42:a8:84:d4:35:bd:43:c4:
                    0e:da:cc:13:8f:b6:d8:99:9a:bb:ee:cd:1f:87:31:
                    13:35:c9:0b:32:a7:08:ec:84:02:a1:44:89:9b:67:
                    a1:d7:d7:50:19:55:f9:ed:af:76:63:b3:f4:7d:17:
                    c8:fa:ee:bb:91:72:d7:33:17:e7:ac:76:04:d6:bf:
                    61:f9:66:7d:4d:bd:6f:a5:7d:91:cf:3f:df:b9:23:
                    63:4c:9c:53:0c:d8:97:37:59:07:d1:44:0d:b4:57:
                    d4:4f:28:4b:e3:82:9b:bf:4c:86:0b:ff:ad:04:b1:
                    aa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C2:49:EE:15:66:FE:A6:55:F4:30:61:87:D3:4C:CA:DC:DB:CE:80
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231382e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:e7:92:c3:3f:28:92:df:0d:db:3a:6b:66:82:75:a9:46:d9:
         bf:a9:b4:96:1d:c0:69:2b:60:9a:e5:3b:29:f0:c3:c7:75:f0:
         ee:f7:fa:51:e0:2f:e4:3c:1a:f5:19:ef:f6:a8:94:79:4a:55:
         bc:69:16:f9:1c:3d:b6:79:f5:06:5c:70:4b:2f:6e:0e:b7:c2:
         03:fc:9c:1c:6a:68:3d:7e:f1:a9:91:a4:c6:c0:a0:fe:e3:3b:
         87:6f:fb:6e:d5:8f:9c:e9:84:ea:99:cb:c4:5e:cb:32:ff:3a:
         1c:b5:01:c5:02:02:49:50:5c:f5:fd:e6:c4:98:d6:3a:51:f9:
         91:68:c0:31:34:f3:c0:68:c6:31:aa:dd:31:56:a3:80:74:63:
         2a:73:f2:ee:e5:6c:d4:07:d2:e6:86:7d:a7:0f:5f:f0:28:0e:
         80:17:55:58:4b:09:37:63:95:de:2d:6e:5d:b8:5c:66:f6:5a:
         06:44:8d:dc:23:74:db:17:3e:e6:32:49:a3:54:81:4e:d5:4f:
         2c:53:ba:d6:26:96:4d:c8:a5:7f:6b:a2:71:d9:96:6a:a6:56:
         0e:90:bd:a4:25:2a:a2:c0:2f:8c:cd:c8:74:8d:d6:63:ad:7d:
         39:00:9f:ea:9e:37:2b:2d:2d:56:2d:ff:c6:3c:72:3f:dd:be:
         8c:7f:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org