Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32322d3234203d3e20323636373737.roa
File:                     3138362e3134382e3232342e302f32322d3234203d3e20323636373737.roa (raw, json)
Hash identifier:          jAYoCSstwwxGcRdtkJ/mbLpHemOqwv/QZ/NKL108Zn0=
Subject key identifier:   9D:C1:97:C8:BB:FE:D9:9E:C6:5A:58:5E:E1:40:08:35:CB:3A:C8:DC
Certificate issuer:       /CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
Certificate serial:       65E09588B3093585CF510F55022E972031802096
Authority key identifier: 73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32322d3234203d3e20323636373737.roa
Signing time:             Tue 05 Mar 2024 17:42:18 +0000
ROA not before:           Tue 05 Mar 2024 17:37:18 +0000
ROA not after:            Tue 04 Mar 2025 17:42:18 +0000
asID:                     266777
IP address blocks:        186.148.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e0:95:88:b3:09:35:85:cf:51:0f:55:02:2e:97:20:31:80:20:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
        Validity
            Not Before: Mar  5 17:37:18 2024 GMT
            Not After : Mar  4 17:42:18 2025 GMT
        Subject: CN=9DC197C8BBFED99EC65A585EE1400835CB3AC8DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:db:45:97:50:a0:f9:af:67:c7:fe:96:fc:f0:
                    22:19:8c:5a:76:2e:85:90:d1:24:c8:74:43:51:4b:
                    37:87:d9:41:1a:e4:77:18:0a:6c:0a:b3:9a:b9:2d:
                    32:b6:39:04:27:d7:49:9f:68:0b:4e:20:a9:47:9c:
                    80:ec:f4:be:80:51:18:6e:ea:9e:b5:2a:dd:a8:b5:
                    1a:75:9d:1e:55:d7:b1:5c:3e:b7:51:85:17:93:3b:
                    e3:8c:4a:66:e8:ba:e9:ab:0a:1c:70:0a:67:4a:4a:
                    81:14:3b:b9:73:c0:02:fa:b5:0a:1f:42:3a:cf:cf:
                    20:a4:2b:40:d4:f6:67:57:6c:31:e4:e2:c4:1e:ac:
                    83:b4:37:89:64:62:c4:60:05:26:01:6e:c7:55:d2:
                    30:9e:a6:70:8d:61:ed:20:85:3b:de:79:1e:2e:c5:
                    13:91:3c:0d:bd:39:cc:fe:09:00:dd:33:ac:0c:eb:
                    a0:15:b1:5a:96:22:fe:f8:fc:e1:dc:aa:47:1f:1a:
                    14:13:c3:b0:80:1d:14:35:26:ff:b5:56:e6:2b:19:
                    6b:d5:d4:27:86:36:cb:e2:b7:35:ce:4d:8e:99:62:
                    d9:5c:cb:ec:c8:1a:54:ab:53:d2:95:e0:b8:ad:52:
                    e0:bf:da:b5:87:8b:74:e7:97:b7:e8:6a:1a:41:7f:
                    5c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C1:97:C8:BB:FE:D9:9E:C6:5A:58:5E:E1:40:08:35:CB:3A:C8:DC
            X509v3 Authority Key Identifier:
                keyid:73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32322d3234203d3e20323636373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:c7:be:77:43:fa:63:f7:5f:b9:bb:43:b2:9b:90:8b:6d:81:
         81:81:9a:e7:81:25:47:98:81:5a:08:17:e0:5c:c9:1b:62:fc:
         f0:ce:07:29:c6:1f:21:2c:d5:2a:3f:91:05:21:65:e0:a8:f9:
         28:a0:23:70:23:ca:2d:78:ec:c1:7e:bc:ff:cd:4f:b3:7b:88:
         7c:d5:1e:5d:60:30:38:14:86:fe:9c:9f:f6:df:1e:a9:af:db:
         4b:5f:e3:d8:cf:12:e7:34:08:0d:42:89:28:23:b4:18:cf:0e:
         3c:17:c5:c0:e6:63:d5:ac:d5:58:c9:7b:85:99:e2:d1:f6:27:
         25:99:b1:70:d9:f9:f6:8c:96:d0:70:cb:c6:f1:69:88:6e:01:
         26:51:08:23:d2:b3:fd:dd:0e:a0:6c:78:6b:dc:22:76:e7:5e:
         d1:93:9c:e0:3b:ae:0c:1f:2b:bc:7d:53:78:1a:d6:a1:f8:d5:
         ae:26:ea:56:fb:52:60:d5:b3:1a:74:0d:e2:a5:82:93:e0:05:
         cc:da:f0:e7:f1:dd:e0:6c:e2:2c:85:22:69:85:0d:28:b1:56:
         5a:65:72:c2:a5:e9:04:e7:5c:ff:24:17:10:c2:59:89:b4:2b:
         5e:cb:f0:cb:fa:34:b3:40:22:96:03:a4:c5:28:fc:54:ea:e2:
         68:5d:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:29:59 2024 by rpki-client on console-fra.rpki-client.org