Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139392e302f32342d3234203d3e203532343930.roa
File:                     3138362e39362e3139392e302f32342d3234203d3e203532343930.roa (raw, json)
Hash identifier:          kblS2xhkHbZfECQ+1AxzRFJzlgmVCLMgiMocsPddab4=
Subject key identifier:   3E:73:AA:FD:9B:14:D8:AE:84:83:04:A7:52:55:14:91:7F:91:F7:05
Certificate issuer:       /CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
Certificate serial:       4050C72B7E762753440FC127D811051D625BAAC1
Authority key identifier: 61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139392e302f32342d3234203d3e203532343930.roa
Signing time:             Tue 05 Mar 2024 18:16:46 +0000
ROA not before:           Tue 05 Mar 2024 18:11:46 +0000
ROA not after:            Tue 04 Mar 2025 18:16:46 +0000
asID:                     52490
IP address blocks:        186.96.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:50:c7:2b:7e:76:27:53:44:0f:c1:27:d8:11:05:1d:62:5b:aa:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
        Validity
            Not Before: Mar  5 18:11:46 2024 GMT
            Not After : Mar  4 18:16:46 2025 GMT
        Subject: CN=3E73AAFD9B14D8AE848304A7525514917F91F705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7b:ad:cc:b5:48:3f:8d:ad:b6:7b:81:4f:66:
                    51:de:23:ab:8a:18:01:03:91:3e:ea:85:c1:92:22:
                    25:e5:31:fd:6f:85:f0:57:86:7c:87:b8:65:14:02:
                    ed:82:9d:8a:ac:5d:84:9b:91:30:b6:f3:8a:e1:39:
                    04:29:90:f8:95:94:70:00:8a:6b:88:8a:9f:cb:d3:
                    d9:31:c5:82:87:68:4e:53:e3:97:6e:9e:ac:ca:a6:
                    6c:8d:90:db:4c:c2:fc:0f:59:04:df:e8:c8:37:c5:
                    79:44:11:85:e0:36:11:9c:61:03:fc:24:f9:f4:a8:
                    bf:89:77:28:7a:81:53:09:6d:8d:53:1e:cf:a7:a7:
                    f9:c9:81:0b:d7:60:13:49:07:74:75:31:67:9e:ca:
                    d1:2f:2b:1a:66:e3:3e:ab:d2:62:63:89:8c:8c:99:
                    02:19:71:43:ee:22:18:14:30:86:2f:e6:ae:61:2d:
                    c6:eb:69:3e:74:80:f5:de:4b:6c:0b:a1:da:60:8d:
                    d6:ba:1c:65:fe:44:b3:34:fc:5f:b5:4f:94:d9:e6:
                    2f:ba:c7:13:9b:5e:28:74:e3:c6:45:17:86:fc:3e:
                    88:b4:29:12:e7:3c:cf:67:7f:cc:b6:e5:d3:e6:b7:
                    95:ec:e0:d3:22:9a:76:c8:e1:df:48:22:0c:da:4b:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:73:AA:FD:9B:14:D8:AE:84:83:04:A7:52:55:14:91:7F:91:F7:05
            X509v3 Authority Key Identifier:
                keyid:61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139392e302f32342d3234203d3e203532343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:bd:dd:64:5b:16:bc:89:cf:64:77:0b:e0:8c:25:fd:bc:02:
         58:f3:fa:d5:f8:37:59:72:1e:77:8f:ae:f5:d9:70:8f:86:a7:
         29:78:ad:eb:00:78:7d:13:95:9f:95:29:74:1c:0b:b6:ad:ef:
         60:d0:b0:37:a4:8b:74:1a:41:71:1a:78:61:67:ec:96:f8:c5:
         d1:90:84:a2:fb:a0:de:1b:76:1d:6d:97:b3:b6:97:63:56:8b:
         0f:82:81:92:e7:96:d8:4e:2f:d7:d2:6f:91:a7:7e:9f:d9:1b:
         4c:4c:a0:1e:24:1e:3a:d5:9f:ff:d9:65:d7:d4:4b:f5:dc:76:
         a2:2c:b6:53:c7:f1:41:5d:7d:27:8b:2a:a1:f1:c4:95:82:74:
         7e:47:52:f7:d8:29:ef:b3:21:5b:15:2d:ca:e2:be:b0:db:fc:
         d2:a4:0f:da:e6:d7:68:3b:1a:f9:5c:90:dc:fd:6a:ef:9f:48:
         b6:a5:6f:b3:c3:14:2a:10:1a:cf:cd:39:57:02:f2:39:39:ce:
         e2:5f:69:49:e6:15:be:4a:36:67:a6:de:3c:23:3b:3c:0d:ff:
         9c:3e:8b:17:24:84:03:aa:fd:da:f4:02:a4:31:78:1d:52:6f:
         a6:4d:5f:3d:29:c6:a5:26:b7:99:1e:21:e1:50:5b:05:78:98:
         a8:1c:be:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:42 2024 by rpki-client on console-fra.rpki-client.org