Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131372e302f32342d3234203d3e20323632323138.roa
File:                     3138362e3135392e3131372e302f32342d3234203d3e20323632323138.roa (raw, json)
Hash identifier:          XINzXdVyFIk8KbWk4AcvPH5udXpJgvSsekN5Y6eqGdE=
Subject key identifier:   DA:80:04:E1:C7:1F:FE:67:A6:DE:3A:24:F1:8C:B6:01:C5:E7:6F:FC
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       1953B2716249FCB65BD7EEE1146EECD1BE75F36C
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131372e302f32342d3234203d3e20323632323138.roa
Signing time:             Tue 05 Mar 2024 18:08:42 +0000
ROA not before:           Tue 05 Mar 2024 18:03:42 +0000
ROA not after:            Tue 04 Mar 2025 18:08:42 +0000
asID:                     262218
IP address blocks:        186.159.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:53:b2:71:62:49:fc:b6:5b:d7:ee:e1:14:6e:ec:d1:be:75:f3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Mar  5 18:03:42 2024 GMT
            Not After : Mar  4 18:08:42 2025 GMT
        Subject: CN=DA8004E1C71FFE67A6DE3A24F18CB601C5E76FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a2:0d:37:a3:85:09:cc:29:9e:09:e7:1b:e6:
                    8d:ec:93:14:11:ce:6e:6e:53:a1:1f:cc:46:a9:26:
                    1b:2b:5a:62:94:45:89:06:d1:95:ab:74:5a:bc:d0:
                    03:5e:08:8b:df:4b:fd:37:3d:10:b8:dc:1a:77:0f:
                    f0:ed:d8:51:3f:07:3f:42:80:3b:35:ac:04:a6:c8:
                    b0:7d:ff:df:ce:4d:c7:10:ba:3c:a4:8b:fc:8f:77:
                    35:a6:82:b7:60:fc:95:e9:33:75:b5:1e:00:35:1e:
                    6a:bf:32:cb:4c:3a:35:f2:e0:55:9a:25:11:9f:bf:
                    29:c2:25:48:5f:64:e4:63:95:86:b8:de:0a:c9:ba:
                    ce:3a:c6:50:e6:5d:fb:f8:42:cb:17:d7:4b:6b:9c:
                    6f:07:62:77:4c:c0:bc:90:cb:a2:eb:12:a7:ee:73:
                    f2:ee:ea:7c:99:44:8e:65:31:b1:15:ab:57:ce:66:
                    0e:73:f5:85:84:dd:f6:e3:b1:93:43:32:2b:ae:50:
                    b4:8d:a8:22:a1:6f:86:32:87:73:03:0e:f3:05:69:
                    e9:da:82:1e:a4:83:a3:0d:2a:bd:eb:ca:82:b6:0e:
                    10:6a:97:9c:2b:2b:05:60:8f:f8:e9:7e:b7:3a:b4:
                    ba:34:c8:90:2f:92:f1:2d:dd:af:6a:95:5c:9c:2e:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:80:04:E1:C7:1F:FE:67:A6:DE:3A:24:F1:8C:B6:01:C5:E7:6F:FC
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131372e302f32342d3234203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:fa:69:cc:fb:93:5c:61:15:c5:b9:24:3a:2c:ec:f9:7d:6c:
         18:73:ae:06:03:92:22:74:e1:d3:a5:d8:7a:9d:41:cd:02:4d:
         0b:b9:17:54:d0:f7:b6:88:42:bf:e5:a2:1e:4b:11:f7:f6:08:
         14:2e:0b:c4:87:06:e9:ac:3a:18:5f:30:d8:0d:a8:10:e2:62:
         1c:78:66:08:5d:2d:33:d2:0d:78:af:10:1d:6e:77:d4:8c:56:
         8f:24:9f:e8:f1:08:73:5d:f0:4f:b4:31:ae:81:0f:ea:0b:e8:
         53:06:28:a2:26:50:f8:b5:76:d4:72:fb:53:fd:da:9a:e0:ec:
         07:94:52:c8:9f:dc:2c:3e:3f:3f:3e:0d:41:bc:09:ef:26:fe:
         33:c4:3f:0b:19:e0:08:38:1e:e3:d1:ce:d9:7f:4c:b3:be:c8:
         07:92:2d:65:b5:03:44:1f:84:c6:7b:a2:d1:96:93:a1:94:c9:
         64:83:68:ec:94:81:e2:1d:ff:b3:73:c7:f1:cf:87:2a:ba:e8:
         6f:95:41:b6:86:c4:e4:3c:59:63:16:f1:d2:e5:52:c4:33:71:
         cc:64:8f:6e:46:25:17:15:24:bc:ec:65:e4:43:d2:af:ae:6b:
         b7:51:c3:7a:01:18:99:29:c3:d8:08:97:db:ab:77:cf:8c:3b:
         6f:76:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org