Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3139322e302f32302d3234203d3e20323634373331.roa
File:                     3138362e3136372e3139322e302f32302d3234203d3e20323634373331.roa (raw, json)
Hash identifier:          zSm0Dl2aUZDk5+SrGtVI/WVCiKK05qnQK+EfCWwcylo=
Subject key identifier:   9A:48:EB:DB:6D:FC:1A:89:C1:C8:B1:13:21:45:D0:37:37:C3:75:A7
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       49CB633382889A42484AEA27E3AE3B8405B161E5
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3139322e302f32302d3234203d3e20323634373331.roa
Signing time:             Tue 05 Mar 2024 17:49:54 +0000
ROA not before:           Tue 05 Mar 2024 17:44:54 +0000
ROA not after:            Tue 04 Mar 2025 17:49:54 +0000
asID:                     264731
IP address blocks:        186.167.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cb:63:33:82:88:9a:42:48:4a:ea:27:e3:ae:3b:84:05:b1:61:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Mar  5 17:44:54 2024 GMT
            Not After : Mar  4 17:49:54 2025 GMT
        Subject: CN=9A48EBDB6DFC1A89C1C8B1132145D03737C375A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d0:77:53:28:f8:64:7a:3f:7d:3b:8c:d6:bd:
                    ee:31:38:0e:72:b1:8f:c3:87:8f:b7:4f:f0:91:74:
                    90:b6:ed:66:d2:b2:12:ab:b7:51:3e:a6:1d:0a:d1:
                    19:43:19:32:cb:03:f2:56:85:fd:d3:d8:c7:f3:28:
                    cd:79:ad:d8:3e:44:8d:2b:d1:dd:39:99:d6:ad:ed:
                    6b:fa:5b:36:c5:e2:fa:08:c4:40:67:2e:c2:ca:46:
                    eb:15:9e:16:b5:10:d9:25:3c:50:dd:c6:e0:4b:24:
                    b6:8a:4c:e4:40:e9:f0:c7:ee:9c:ce:43:7d:d6:37:
                    1c:ab:ab:a7:c0:af:d7:fe:43:d1:b2:6d:8c:37:f8:
                    b2:bb:b7:21:eb:1d:01:0e:c3:84:d4:9e:e6:48:51:
                    90:32:3f:28:9d:c3:d0:62:41:1a:d1:59:4f:98:ae:
                    0b:65:bf:58:b9:3d:0d:5e:20:3b:52:6f:41:11:c0:
                    cb:da:c3:4a:0d:b1:33:9f:a1:d0:5d:c4:25:0b:64:
                    d6:97:2a:bd:3f:e1:61:42:ca:2d:07:dc:6b:7c:0d:
                    95:c7:bd:aa:9b:09:01:c3:04:45:29:41:13:dd:92:
                    da:39:50:91:2e:8b:76:45:7b:3e:e5:2c:02:eb:02:
                    aa:c4:9a:ce:47:70:57:a8:95:4e:76:9f:ef:25:3b:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:48:EB:DB:6D:FC:1A:89:C1:C8:B1:13:21:45:D0:37:37:C3:75:A7
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3139322e302f32302d3234203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:a7:d0:28:13:79:39:0a:19:45:50:cd:5e:01:ef:fb:14:14:
         15:77:79:6b:db:b7:b4:5b:91:ff:68:be:33:ed:64:f5:60:f9:
         ec:19:5e:78:f0:f0:20:4a:8d:57:d4:6a:20:6c:78:62:d9:32:
         14:5f:22:b3:f1:45:dc:9d:25:50:8a:28:a5:eb:f3:81:f1:b4:
         43:d6:88:01:3f:cd:5e:3c:73:38:76:c9:10:e2:71:85:bd:ec:
         17:c8:93:c9:c0:6b:52:69:1c:c3:a9:3a:d0:52:53:81:ea:21:
         7a:81:40:31:d7:7d:e1:23:e4:d3:d2:d1:d7:52:c5:77:67:fd:
         4a:3c:39:53:29:39:b1:53:66:9e:76:02:65:28:1b:9f:75:05:
         b6:ea:a8:f3:36:87:b5:8d:99:02:01:b9:5b:ff:33:04:6c:07:
         af:74:76:1c:1c:3c:77:fb:c6:30:59:f7:af:7b:43:d0:9d:08:
         17:a5:16:fe:59:99:db:68:bf:f9:2f:bc:24:f9:d5:a3:c2:34:
         37:65:8c:4a:66:21:54:25:51:ea:9c:3e:a9:da:5f:aa:89:5c:
         7b:85:72:eb:2a:03:30:c7:82:ee:d8:e6:38:c2:01:fa:21:7a:
         f2:19:52:cd:1d:28:10:d6:9f:b3:9e:e9:2b:7f:af:88:2c:f1:
         a4:d4:24:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:06:39 2024 by rpki-client on console-ams.rpki-client.org