Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131382e302f32342d3234203d3e20323632323138.roa
File:                     3138362e3135392e3131382e302f32342d3234203d3e20323632323138.roa (raw, json)
Hash identifier:          Fc9L3+ZxvahteA9Q2Cdv0W8BSW5xy1AJOL4o1uGeC0s=
Subject key identifier:   31:8E:E6:AA:C1:2F:C4:D9:AA:A3:F3:D5:BF:AA:BA:7F:14:6B:CC:FF
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       6842D8DA1854F913C46E9E17F36F30EAB4B68795
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131382e302f32342d3234203d3e20323632323138.roa
Signing time:             Tue 05 Mar 2024 18:08:43 +0000
ROA not before:           Tue 05 Mar 2024 18:03:43 +0000
ROA not after:            Tue 04 Mar 2025 18:08:43 +0000
asID:                     262218
IP address blocks:        186.159.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:42:d8:da:18:54:f9:13:c4:6e:9e:17:f3:6f:30:ea:b4:b6:87:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Mar  5 18:03:43 2024 GMT
            Not After : Mar  4 18:08:43 2025 GMT
        Subject: CN=318EE6AAC12FC4D9AAA3F3D5BFAABA7F146BCCFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9e:c5:16:80:af:f0:89:b3:57:1a:14:d6:4c:
                    62:eb:26:c9:f9:f4:ec:a2:21:28:d5:8a:48:ec:31:
                    c9:29:1e:09:74:c9:35:90:54:8f:a3:8a:f7:8e:78:
                    ef:ec:e7:e2:1d:2e:c8:03:c9:2d:a7:e7:55:a4:0c:
                    9e:7b:8f:5c:be:ad:af:5e:46:63:7b:bd:50:29:f0:
                    78:57:d8:0d:ef:e1:f7:5d:2c:a5:6f:db:7c:7f:b2:
                    38:c4:5a:f3:1c:5e:23:6c:26:1a:3e:22:f4:66:57:
                    2a:83:dd:a2:31:1d:7e:3a:ad:e3:94:12:e7:8e:dc:
                    8b:3e:6b:fa:94:36:6e:b5:47:bf:29:75:b5:b0:22:
                    03:23:99:8f:ff:fa:73:dc:ca:ba:cd:28:10:d5:a4:
                    4b:80:41:08:56:b3:54:3b:36:ca:d6:aa:a7:ee:04:
                    4f:36:cb:3d:e1:1f:ff:47:13:bc:b0:c5:80:9a:ae:
                    51:d6:45:4a:2e:b1:34:45:69:1b:cc:82:12:c4:60:
                    aa:f2:1c:29:46:d5:c0:cd:e7:32:e7:aa:2b:a6:51:
                    b0:1b:e4:96:68:44:75:69:d4:ab:d2:6d:d4:53:4e:
                    16:3c:8b:ca:f9:1a:ab:df:69:3c:21:22:c2:74:92:
                    5a:87:e8:d7:29:43:44:3f:4c:bc:04:a9:bc:0b:ec:
                    56:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8E:E6:AA:C1:2F:C4:D9:AA:A3:F3:D5:BF:AA:BA:7F:14:6B:CC:FF
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131382e302f32342d3234203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b9:cc:3d:83:da:09:e6:72:b1:73:5a:d0:09:28:7e:37:9f:
         1f:c1:8c:c6:ca:07:25:d9:df:1e:fd:f7:a0:5d:40:5c:ca:9c:
         90:15:00:02:32:7e:81:39:07:5c:3d:1e:4c:89:4f:ca:27:cf:
         65:e2:ba:7d:33:78:ff:9e:9e:9f:7b:8d:9a:91:dd:89:00:a6:
         a4:62:1a:fd:c7:20:06:fa:d4:83:27:99:d9:46:7f:c2:6e:df:
         da:04:51:be:07:a3:ce:7b:33:67:d4:b5:ae:9f:ed:aa:9f:9c:
         4e:68:cf:df:06:3a:dc:11:5f:fa:49:b6:cc:61:eb:3d:a4:4e:
         fd:06:c0:0b:e6:ad:b3:c6:59:00:e7:70:71:bb:9f:b9:fc:79:
         7b:74:cd:eb:2e:5b:51:20:af:a4:05:a7:de:a9:28:02:80:ff:
         9b:03:2e:c7:00:a6:73:06:8e:df:ea:a2:bf:e0:d2:27:e6:9c:
         e6:10:c3:aa:4a:f7:bc:64:3e:c8:13:be:11:ad:70:32:a5:f5:
         0c:b3:d1:b2:1e:a1:13:0e:7b:c9:80:e3:8e:72:2f:fa:c8:3a:
         a9:13:63:80:cd:7f:0f:65:30:a5:bd:c1:9b:c6:61:c9:be:83:
         c1:3b:23:94:83:a3:72:2f:fd:a6:ae:e5:1e:01:d5:46:c2:6c:
         9d:d0:3d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org