Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139382e31322e33362e302f32322d3234203d3e203237393838.roa
File:                     3139382e31322e33362e302f32322d3234203d3e203237393838.roa (raw, json)
Hash identifier:          tSS+dMzQnmko4/watA41l/5YwLQmiElots4YAUoN73U=
Subject key identifier:   AE:6C:B8:C8:6A:57:3D:16:97:E6:14:35:07:30:93:79:B0:7F:F5:FC
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       23C9FDA394E3D4891E069F0BD5B45A07192D05B5
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139382e31322e33362e302f32322d3234203d3e203237393838.roa
Signing time:             Tue 05 Mar 2024 18:09:06 +0000
ROA not before:           Tue 05 Mar 2024 18:04:06 +0000
ROA not after:            Tue 04 Mar 2025 18:09:06 +0000
asID:                     27988
IP address blocks:        198.12.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c9:fd:a3:94:e3:d4:89:1e:06:9f:0b:d5:b4:5a:07:19:2d:05:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Mar  5 18:04:06 2024 GMT
            Not After : Mar  4 18:09:06 2025 GMT
        Subject: CN=AE6CB8C86A573D1697E6143507309379B07FF5FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:23:bc:aa:84:ce:11:40:aa:b6:44:f2:d2:
                    da:f4:df:25:8c:2b:84:d9:e8:43:be:29:32:dd:a9:
                    45:33:97:fc:09:f3:e1:b7:0c:fb:70:33:7d:06:a0:
                    db:3b:6f:a2:2f:1b:5d:da:3d:8d:6c:b0:e3:ff:39:
                    a8:ad:d4:da:1b:a7:a4:9a:57:ba:1f:0c:26:5c:68:
                    5c:d4:a1:5b:61:c9:6f:dd:3d:fe:0e:2a:2b:65:44:
                    3d:33:f6:7f:cb:84:34:d3:b5:0f:34:94:37:63:4f:
                    b5:a7:c1:fb:a7:8b:63:b4:ed:d8:8b:8a:32:9b:7a:
                    3d:ef:2a:22:bf:01:23:d3:21:85:63:f8:c1:90:77:
                    d0:d7:0c:be:fa:5e:35:77:0e:39:90:23:bd:7c:ca:
                    2f:42:db:2a:54:ba:27:77:b4:67:66:a5:e3:47:30:
                    8c:c4:fa:86:e9:83:31:aa:dd:03:53:e7:f9:11:ed:
                    e0:cc:6b:1d:c5:65:2c:fe:89:47:2e:38:15:93:e9:
                    4b:dc:02:bd:8f:07:31:6a:97:0e:22:e0:df:14:ea:
                    24:b2:18:59:4a:b9:d5:3a:da:5c:6e:50:10:fd:04:
                    a8:bc:57:46:40:39:1b:70:17:45:31:11:13:14:19:
                    6a:48:90:0d:f7:90:b6:a3:a7:75:00:fc:06:51:fa:
                    48:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6C:B8:C8:6A:57:3D:16:97:E6:14:35:07:30:93:79:B0:7F:F5:FC
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139382e31322e33362e302f32322d3234203d3e203237393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:96:64:3b:86:a4:22:84:3b:b0:0b:b4:9c:39:da:fa:0a:8e:
         d6:d8:73:ca:6a:45:38:f6:23:15:65:11:95:b9:54:5a:b3:cc:
         c1:27:2b:e7:af:e4:ab:bd:0b:ec:fe:9d:87:72:b4:ab:3a:33:
         8d:5b:88:c2:41:84:2b:e0:c8:27:4f:7a:9c:67:5d:fd:82:d7:
         bf:9b:ed:95:b9:4f:43:16:35:ae:d8:68:11:09:32:89:27:c2:
         95:a2:d3:9f:de:72:35:55:cd:79:74:bc:d1:b3:ae:17:cb:23:
         d2:ba:86:9b:2f:a7:db:46:f5:13:86:ed:e6:6d:90:21:10:cf:
         2c:75:50:4a:9e:7e:ad:e0:29:6e:66:b3:3a:df:90:12:d7:a4:
         22:35:e1:ae:9b:36:88:ba:8a:30:c8:b8:fc:20:61:55:e9:b4:
         f7:f9:22:13:fb:ee:64:bb:33:f7:6d:a0:a3:f1:86:92:71:c7:
         0f:33:19:3f:65:2a:a3:39:ae:31:9b:dc:99:c8:c4:bb:fd:01:
         d0:31:81:45:d3:2f:4b:2d:86:51:87:5a:47:7a:15:01:d6:4b:
         ed:36:9a:50:f8:ac:38:8a:0a:5f:13:53:bd:0d:0d:3b:29:38:
         ac:10:97:9a:ee:3f:df:8b:c0:01:cc:39:51:37:5a:59:9b:9d:
         a6:28:a9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org