Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131362e302f32342d3234203d3e20323632323138.roa
File:                     3138362e3135392e3131362e302f32342d3234203d3e20323632323138.roa (raw, json)
Hash identifier:          ge7IeWYcyK2EoFUI+ak7leM8zawG6B4dwROBKM5SSPM=
Subject key identifier:   0B:5D:05:63:4E:13:39:C4:08:1C:85:CF:B9:A7:26:88:63:56:12:4A
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       55D5563B79D023F796F41953DCFECC6193E8F9A3
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131362e302f32342d3234203d3e20323632323138.roa
Signing time:             Tue 05 Mar 2024 18:08:42 +0000
ROA not before:           Tue 05 Mar 2024 18:03:42 +0000
ROA not after:            Tue 04 Mar 2025 18:08:42 +0000
asID:                     262218
IP address blocks:        186.159.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d5:56:3b:79:d0:23:f7:96:f4:19:53:dc:fe:cc:61:93:e8:f9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Mar  5 18:03:42 2024 GMT
            Not After : Mar  4 18:08:42 2025 GMT
        Subject: CN=0B5D05634E1339C4081C85CFB9A726886356124A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:a9:1a:2a:90:78:56:76:c2:76:7b:9e:c0:
                    4e:8d:70:1e:57:cf:b3:7c:6e:92:44:14:f3:a4:80:
                    89:77:b0:16:9b:ac:24:9f:84:4b:70:01:d1:9b:d7:
                    e2:6b:df:58:12:32:fe:b3:af:01:8e:87:32:5a:d0:
                    e1:a4:d2:8f:10:81:5b:b7:d7:de:fb:aa:c5:9f:49:
                    ed:b2:bf:82:d6:33:fa:5d:9b:87:41:68:ff:4a:2f:
                    b8:6e:07:b8:92:11:65:10:0d:a0:6b:9f:75:ae:8c:
                    94:74:11:b4:1f:f7:e6:55:79:3f:c2:f7:7d:44:c9:
                    f9:85:ab:99:a6:20:19:2b:35:00:8c:67:ab:2c:be:
                    54:79:e5:02:1d:e0:41:a8:f5:ed:98:e4:6a:c1:aa:
                    62:f5:12:94:a4:93:9e:82:09:14:d3:06:32:00:cc:
                    a0:e0:20:c7:5a:8b:6f:6f:72:eb:95:9f:07:1e:d4:
                    a3:4f:33:8a:8b:4f:29:cb:c8:8e:2c:c2:83:6b:a3:
                    8e:47:51:f0:34:bf:04:14:45:ba:97:be:c0:69:83:
                    a5:f8:ba:09:a4:6d:a7:10:4b:5a:ce:58:3c:2c:18:
                    f4:d6:44:ad:94:5b:4b:10:18:3b:d8:57:a1:2c:ea:
                    6e:81:da:9b:97:2b:a1:43:c1:86:f8:ad:c7:3b:4c:
                    73:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5D:05:63:4E:13:39:C4:08:1C:85:CF:B9:A7:26:88:63:56:12:4A
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131362e302f32342d3234203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:37:23:16:ee:ec:f3:4b:6b:54:9d:36:1c:e9:90:7b:3b:66:
         34:3f:05:89:ad:70:f9:cf:b8:78:09:29:30:d1:b8:f6:b0:c6:
         b1:83:0d:fe:0b:02:4f:23:d9:53:57:3c:a1:a6:e9:76:d5:bc:
         1d:5f:96:f4:6e:7a:69:1f:0a:7e:4e:4b:62:8d:cd:aa:01:4b:
         e7:20:9f:c9:b2:f8:5b:f5:ed:5c:6f:03:92:c7:de:2d:94:97:
         84:c0:81:08:3f:f2:01:81:95:a9:eb:d6:a2:ff:ed:4a:6e:c3:
         72:c7:b0:35:2a:c8:fd:dc:a0:a1:72:7f:eb:76:ff:33:27:64:
         2a:de:16:85:30:ad:ef:ba:0c:50:82:c0:ff:e3:c2:f8:72:05:
         64:ca:a1:d2:93:49:26:9e:2c:d1:e1:62:86:98:fd:d5:00:30:
         5a:40:4e:7f:db:43:9b:87:28:9a:95:75:80:d6:54:bd:d1:2e:
         01:50:c8:77:b9:a0:88:5a:43:11:7b:f4:47:58:16:2a:03:02:
         26:9d:cd:ab:ee:d7:06:a9:b5:ec:bc:f7:9c:8c:a1:91:35:65:
         ab:cc:9b:80:48:7c:1b:35:d7:a9:07:87:51:c7:6c:4a:f5:da:
         e4:f1:b5:c0:57:7b:c2:2e:0d:44:8c:d7:4f:3e:ff:c5:95:89:
         de:19:f2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:56 2024 by rpki-client on console-fra.rpki-client.org