Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3138362e36352e3131322e302f32302d3230203d3e20323633373430.roa
File:                     3138362e36352e3131322e302f32302d3230203d3e20323633373430.roa (raw, json)
Hash identifier:          EQb8Wdd0KHeoZ98ZxbnUwACbQm0AGdQIkqJFeabVu4U=
Subject key identifier:   0D:F8:EB:F2:A7:C0:53:3D:14:E9:78:17:A1:E6:A7:0A:CF:3E:EC:02
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       4A1B9973D6F8F6C646A73512B842975F4DEAE19A
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3138362e36352e3131322e302f32302d3230203d3e20323633373430.roa
Signing time:             Tue 05 Mar 2024 17:47:30 +0000
ROA not before:           Tue 05 Mar 2024 17:42:30 +0000
ROA not after:            Tue 04 Mar 2025 17:47:30 +0000
asID:                     263740
IP address blocks:        186.65.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1b:99:73:d6:f8:f6:c6:46:a7:35:12:b8:42:97:5f:4d:ea:e1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Mar  5 17:42:30 2024 GMT
            Not After : Mar  4 17:47:30 2025 GMT
        Subject: CN=0DF8EBF2A7C0533D14E97817A1E6A70ACF3EEC02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:77:fa:65:86:9f:10:13:66:95:28:f6:3e:
                    25:6b:57:f5:9a:03:ab:66:5d:75:a1:fe:2b:79:02:
                    ed:b1:4b:a7:85:5e:6f:e1:9a:7d:2f:f4:04:80:f8:
                    24:88:d6:cc:d2:3b:50:97:96:09:76:50:df:19:73:
                    54:31:c7:ee:83:c3:21:dd:a8:c1:d8:fa:b6:d8:5e:
                    8a:ad:48:5d:ed:18:e1:4c:6d:4a:91:ab:c1:aa:d7:
                    12:3f:68:79:de:3c:3b:de:00:78:4b:0c:76:86:bf:
                    4f:ca:63:bd:3e:76:45:30:be:8d:e6:be:e9:a3:45:
                    af:dd:62:05:63:66:4a:97:0b:43:3e:2b:cf:8b:ca:
                    14:34:ef:3e:91:2a:ff:0b:8c:17:0b:a8:6c:13:a4:
                    46:8e:a7:44:c6:8a:e1:5b:7d:db:f7:3f:37:cd:6c:
                    87:87:8f:5c:28:90:61:91:cb:42:97:ab:e8:c3:b6:
                    8d:d6:3e:29:dc:e3:d8:b8:97:e5:6e:04:53:c3:9c:
                    64:75:b4:85:fa:1d:73:00:36:8b:44:ae:5a:ba:72:
                    4c:d2:4a:1f:17:79:c2:8c:2e:4f:28:4c:f2:d1:0f:
                    69:3d:17:21:5b:70:a3:af:02:4e:51:cb:f0:67:26:
                    eb:a4:e9:c3:78:a2:c5:27:96:aa:6b:98:08:5e:5f:
                    73:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F8:EB:F2:A7:C0:53:3D:14:E9:78:17:A1:E6:A7:0A:CF:3E:EC:02
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3138362e36352e3131322e302f32302d3230203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:f5:1f:34:bb:6b:38:38:f4:37:7e:b8:07:b2:96:7c:0b:a1:
         3b:bf:e3:03:3f:f0:10:34:a0:6c:7e:eb:ee:91:5b:e3:0e:90:
         43:0e:15:df:59:cb:78:23:43:cf:fc:73:e8:23:4d:0d:cf:4a:
         2d:a0:e3:f7:2a:cd:18:3a:2e:82:50:b9:cd:41:43:40:f3:92:
         f1:dc:d8:d1:96:46:c8:05:4c:fc:64:97:bd:27:aa:07:6f:34:
         3e:29:46:df:2e:f4:39:f4:ec:a2:d8:46:6d:55:af:95:21:1e:
         61:4f:f4:15:bb:36:83:1a:f7:9d:0b:34:62:7b:a7:af:42:67:
         a4:e4:4b:8b:9f:b8:6b:ff:99:0c:ae:a7:82:32:b9:65:da:6d:
         98:6c:75:28:13:49:d2:f7:c1:90:c1:2a:a2:04:19:ad:13:8c:
         ed:73:2a:8b:20:a3:8d:48:da:5a:51:8e:f3:fc:1c:d5:a7:b5:
         cb:17:bb:f7:77:d0:95:5b:d4:73:f8:ac:8d:33:8b:94:49:e0:
         9d:51:0e:c9:18:71:62:3f:aa:8e:9e:ab:3d:6f:d5:3d:b5:a3:
         b7:58:3d:0c:83:50:0b:ee:15:81:a2:dc:a7:da:b9:c6:ed:8d:
         9a:9b:69:35:e6:cc:cd:85:95:fc:b1:2d:b3:ca:ff:52:86:8f:
         80:76:79:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:02 2024 by rpki-client on console-ams.rpki-client.org