Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139342e302f32342d3234203d3e203532343930.roa
File:                     3138362e39362e3139342e302f32342d3234203d3e203532343930.roa (raw, json)
Hash identifier:          VVbloIAPvyI8lJVxCYoAWlqCvjvfQHy1Hh4rIiRx6uc=
Subject key identifier:   F5:21:43:93:54:DA:A3:BF:4B:AF:B3:23:FF:3B:E1:9B:04:BA:C7:5D
Certificate issuer:       /CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
Certificate serial:       03A1C0722B4ACC70F34BC2788A96FA6043430378
Authority key identifier: 61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139342e302f32342d3234203d3e203532343930.roa
Signing time:             Tue 05 Mar 2024 18:16:45 +0000
ROA not before:           Tue 05 Mar 2024 18:11:45 +0000
ROA not after:            Tue 04 Mar 2025 18:16:45 +0000
asID:                     52490
IP address blocks:        186.96.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a1:c0:72:2b:4a:cc:70:f3:4b:c2:78:8a:96:fa:60:43:43:03:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
        Validity
            Not Before: Mar  5 18:11:45 2024 GMT
            Not After : Mar  4 18:16:45 2025 GMT
        Subject: CN=F521439354DAA3BF4BAFB323FF3BE19B04BAC75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:ed:7a:c0:25:9a:e5:fd:43:89:6c:ff:25:
                    17:cd:a3:e1:27:1f:47:3f:b0:64:b1:4a:9a:bd:65:
                    6d:12:a2:37:10:56:5d:2f:5f:37:f5:3e:4c:64:ad:
                    46:64:ca:fc:aa:c6:d6:5a:f3:28:03:a3:76:27:1f:
                    63:3c:32:af:e6:aa:c6:74:c7:6a:d5:96:50:d1:95:
                    c7:1d:cb:54:49:45:de:ce:af:83:5e:23:e7:dc:26:
                    bf:6b:d9:fb:93:36:ae:5d:de:19:d7:88:55:0e:aa:
                    9e:c5:18:03:fe:51:91:b1:6d:c2:bf:de:aa:52:8f:
                    16:19:57:c8:c7:e3:ac:8d:fd:09:3b:30:95:b7:ce:
                    6c:4f:c6:cf:a3:83:a1:a1:0e:e0:09:d1:af:b8:58:
                    50:41:04:a9:53:c2:ac:8f:92:02:02:d4:a2:d3:e1:
                    47:26:76:9b:93:34:bd:b8:e4:e7:c6:1d:cd:7d:0b:
                    60:01:7f:20:fb:95:e6:bc:88:ca:d6:e1:6f:1f:14:
                    9b:ec:c0:11:8a:cd:6c:03:6e:ca:6d:d3:97:38:10:
                    cd:81:d3:39:d6:15:7d:a9:84:4a:9e:65:b0:5f:85:
                    e1:29:68:24:6a:ca:14:61:d5:25:f0:44:b1:c7:0e:
                    b1:9c:ae:98:b2:18:29:72:55:64:9f:b8:6e:05:1a:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:21:43:93:54:DA:A3:BF:4B:AF:B3:23:FF:3B:E1:9B:04:BA:C7:5D
            X509v3 Authority Key Identifier:
                keyid:61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139342e302f32342d3234203d3e203532343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:e0:e0:18:69:83:b1:9f:23:84:70:cd:e1:ad:3c:e1:65:
         2d:f0:4d:ef:13:27:20:90:2e:f8:ee:ed:6e:34:6a:7b:b7:ff:
         8d:24:a7:64:ed:0d:65:f9:fc:0f:ed:a1:25:1c:fd:2a:8a:ef:
         97:9f:9f:ae:56:9c:2b:fd:19:1a:4d:1f:51:38:50:d6:77:da:
         c8:3f:59:93:bc:1a:88:e2:f7:13:f6:bc:95:e6:19:89:cd:58:
         5f:1d:12:71:21:33:4f:0c:d2:d5:77:5c:85:a8:8b:61:32:50:
         d8:71:b0:75:bd:88:8b:dd:4e:8e:ed:4e:7f:46:41:0d:d8:72:
         69:1b:ba:c3:8e:5f:1d:93:37:00:b0:5a:de:3b:3c:18:6c:10:
         57:19:e6:0d:cc:57:28:dd:39:96:e5:ad:4a:19:03:d1:96:29:
         b2:71:54:18:e9:72:28:e6:83:e0:ea:d4:f5:18:d8:de:b4:86:
         dc:a7:35:af:61:6c:1a:1a:8a:31:d4:02:94:69:2f:dc:21:f2:
         d0:ad:35:f3:19:81:95:39:94:06:ad:04:c3:c8:fa:34:3c:52:
         1c:71:19:bc:82:ea:a0:ad:fc:37:1b:51:20:49:08:b4:1e:6c:
         43:6f:35:64:dc:2b:d5:f5:6d:5c:6a:77:af:8e:2e:d9:0b:03:
         5b:84:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:06:18 2024 by rpki-client on console-ams.rpki-client.org