Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36322e302f32342d3234203d3e203238313033.roa
File:                     3133382e3138362e36322e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          nkTQu6mpcThtW9izw9QPoqs0ej8t1tPx7x8sGSmBg38=
Subject key identifier:   6B:2D:54:F2:FB:1C:98:B9:56:BC:E4:59:FE:F3:7A:32:74:1D:ED:98
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       1CA0B3032DA6F99FA2F848312D1B7F68B1B56826
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36322e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 12 Aug 2024 12:45:01 +0000
ROA not before:           Mon 12 Aug 2024 12:40:01 +0000
ROA not after:            Mon 11 Aug 2025 12:45:01 +0000
asID:                     28103
IP address blocks:        138.186.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a0:b3:03:2d:a6:f9:9f:a2:f8:48:31:2d:1b:7f:68:b1:b5:68:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Aug 12 12:40:01 2024 GMT
            Not After : Aug 11 12:45:01 2025 GMT
        Subject: CN=6B2D54F2FB1C98B956BCE459FEF37A32741DED98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:07:19:6e:15:7c:9f:a6:07:42:88:77:3d:
                    9a:a4:98:79:35:a2:75:53:14:10:ce:09:ce:99:bd:
                    39:0e:5c:15:ce:50:4f:51:ac:f1:15:43:58:f8:ed:
                    29:6b:aa:f7:fc:4e:54:f8:cb:55:dc:5c:67:bd:3d:
                    41:4e:ea:95:36:4b:89:1e:70:4d:a9:ef:7b:d6:b9:
                    b0:3b:0d:7b:4c:b7:ca:b6:b9:26:95:4d:1a:dc:a7:
                    95:dc:45:0c:be:d0:0e:0d:b7:f0:bd:c9:e2:e2:84:
                    b0:c4:88:d1:23:aa:3d:b9:8b:a2:33:a4:2c:77:07:
                    6d:a7:0b:b8:e2:a4:fe:12:a8:a3:0c:37:d8:19:a5:
                    22:a0:9a:80:7c:2d:b6:ef:75:c3:f9:34:01:98:1b:
                    03:8a:03:e8:ff:81:0d:9e:18:85:c6:af:75:5b:f9:
                    8f:44:3e:74:75:5a:10:a1:27:66:4e:72:a1:44:b9:
                    c7:29:f2:bb:b4:3b:82:19:5d:3b:f8:c3:b9:5e:f4:
                    9e:48:b9:c5:3f:e2:18:5a:1d:ca:60:c4:3e:4b:2f:
                    24:77:4c:c5:be:67:19:ad:47:ac:27:d0:55:a1:3d:
                    9d:89:3e:64:ce:ee:55:ac:f2:49:6d:c1:39:c0:fb:
                    3f:48:60:a8:3d:09:7f:5f:be:73:c5:ea:b6:e0:f1:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2D:54:F2:FB:1C:98:B9:56:BC:E4:59:FE:F3:7A:32:74:1D:ED:98
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36322e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:3e:ca:e7:41:93:c2:04:d1:8e:32:e8:6c:36:16:56:60:f5:
         07:60:5c:a3:29:53:2a:29:a6:24:72:6e:95:7c:14:8b:38:25:
         27:be:86:e4:a8:2f:de:3b:29:33:bc:33:da:80:d2:85:0c:7a:
         3a:47:ad:fd:92:21:94:bf:fb:d2:bb:7b:2f:a2:6a:07:2c:af:
         19:ee:d3:4c:e4:41:d2:53:7f:11:e6:7e:5d:94:1c:8d:47:23:
         ed:78:50:a1:dd:fd:10:bc:53:3f:90:de:6c:af:a8:80:42:36:
         c5:e0:21:ea:96:4e:18:d2:16:3e:dc:63:18:f0:c3:80:1f:19:
         ab:eb:08:5e:41:53:f0:02:b4:4b:85:a4:42:bd:ab:e0:87:0c:
         0e:e9:42:3f:77:4a:2f:dc:cc:03:13:14:16:1e:52:07:e6:93:
         aa:2c:90:b7:18:be:87:73:f6:4b:99:dc:33:cd:9d:17:fe:6f:
         75:7c:64:4d:88:38:d6:92:39:37:1a:af:b2:8e:55:d7:e2:e5:
         5e:bb:8a:8f:6b:e8:76:c9:94:51:2e:97:de:2c:c3:17:48:e7:
         3c:35:49:ed:2c:56:a1:ca:ca:db:f0:94:d5:f7:ed:3b:ab:fb:
         f3:1f:d4:a5:8f:22:e8:8c:05:ae:7d:b0:53:30:c0:32:66:1b:
         f8:5b:3a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:31 2024 by rpki-client on console-fra.rpki-client.org