Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232302e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3232302e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          2OFbr4ujosIa3XjBFEQX12DN3ePTwgvohIV6TpXq0rA=
Subject key identifier:   1B:5E:56:3D:AB:7F:A6:E3:22:E8:49:B3:F4:11:6C:95:E7:63:34:7E
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       7CA7887322E60DEC86991611F715CB812616D736
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232302e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 05 Mar 2024 17:56:04 +0000
ROA not before:           Tue 05 Mar 2024 17:51:04 +0000
ROA not after:            Tue 04 Mar 2025 17:56:04 +0000
asID:                     262189
IP address blocks:        186.1.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a7:88:73:22:e6:0d:ec:86:99:16:11:f7:15:cb:81:26:16:d7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Mar  5 17:51:04 2024 GMT
            Not After : Mar  4 17:56:04 2025 GMT
        Subject: CN=1B5E563DAB7FA6E322E849B3F4116C95E763347E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bf:a3:6f:00:b0:aa:28:1c:f3:ae:83:9b:dc:
                    b2:e4:97:39:e2:9a:56:62:ec:9e:ee:5a:19:f0:78:
                    53:2f:f9:0e:3a:65:eb:f6:b2:ba:c5:e7:86:45:de:
                    17:29:d6:70:31:1a:d0:f0:2c:90:c9:e2:85:f1:7a:
                    3d:97:c6:33:9d:d6:ba:4a:26:d4:df:0b:00:3c:6d:
                    64:d8:28:c0:88:86:bd:1a:22:ae:72:47:87:25:98:
                    cf:88:1d:62:c1:0a:66:25:94:4b:18:e2:7b:34:4a:
                    0f:8f:ed:fb:25:84:2d:a9:6b:32:46:9f:04:70:2b:
                    a2:ed:73:09:f6:5b:51:ea:dd:83:74:5e:2d:56:17:
                    d2:a0:60:fe:ad:47:20:aa:41:1f:bc:0e:ef:df:63:
                    72:42:71:54:4d:c5:8f:65:a1:78:95:c6:9f:f7:30:
                    03:2a:f2:0f:ec:d5:cf:76:5b:e2:49:9f:c9:7d:07:
                    fb:70:78:fe:eb:f7:ec:25:5b:79:d8:97:c2:5a:06:
                    d8:ee:3b:ac:d1:80:16:85:fb:fc:7f:04:03:91:1f:
                    2a:c1:7f:c2:4d:89:96:bf:1c:b4:13:08:78:f7:22:
                    86:1e:2e:48:2d:c5:e0:34:7a:e5:23:33:9b:12:cf:
                    39:0d:84:2f:ce:5b:9d:be:6c:cf:0b:4e:b3:90:5b:
                    e6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5E:56:3D:AB:7F:A6:E3:22:E8:49:B3:F4:11:6C:95:E7:63:34:7E
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232302e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:fc:43:0b:a8:56:08:b8:05:be:a4:19:ab:52:ee:fc:21:a2:
         4f:ae:b7:a5:b8:28:78:81:5b:02:cb:e2:44:50:93:7f:53:b4:
         a5:9a:4c:9f:f2:2d:a2:46:a8:49:a9:f4:2d:b6:5c:42:f3:d0:
         26:95:86:7b:0c:65:cf:bf:9e:a3:f9:f5:36:3d:e7:84:a5:65:
         53:6e:09:0b:f0:98:3c:f1:e7:b5:b7:54:2d:f1:36:2c:20:a9:
         91:51:e2:8b:98:0d:1b:f7:e4:81:0c:15:05:5e:a8:48:b7:85:
         d4:29:3a:49:8f:21:3f:2b:b6:c1:49:55:08:d5:77:61:78:21:
         14:f1:31:fe:77:03:5a:ba:c5:3f:73:25:76:1e:d1:c9:70:6f:
         90:4d:f0:72:5b:be:2d:df:63:54:1b:09:5b:13:3f:a2:cb:d4:
         ce:32:29:04:ca:0c:91:0f:32:f3:0f:cb:42:24:12:15:39:b2:
         6a:8d:5b:43:c1:6b:b4:ae:66:fd:74:21:20:65:07:55:7f:8f:
         9f:42:4f:e3:4d:4f:89:33:df:07:81:3e:99:cb:42:55:3f:4f:
         ab:27:1a:7a:21:63:e8:7c:41:63:cb:0f:38:75:8f:77:7b:47:
         0d:0c:d0:c2:9b:cb:21:f9:f4:29:89:7e:99:1b:e8:2b:42:7d:
         35:56:30:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org