Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3230392e302f32342d3234203d3e20323634373331.roa
File:                     3138362e3136372e3230392e302f32342d3234203d3e20323634373331.roa (raw, json)
Hash identifier:          aVg7ETZv2UAKVK9hY5Pl+D8hl9I4zzzWqjxJ0Rcbe8E=
Subject key identifier:   EC:EA:D4:67:FE:9B:81:16:CA:F5:D1:B8:91:5C:20:F3:85:93:E1:E3
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       5ACD5E0CEA8A2D077879CDE0A35909EC82B66CE4
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3230392e302f32342d3234203d3e20323634373331.roa
Signing time:             Wed 08 May 2024 19:30:00 +0000
ROA not before:           Wed 08 May 2024 19:25:00 +0000
ROA not after:            Wed 07 May 2025 19:30:00 +0000
asID:                     264731
IP address blocks:        186.167.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cd:5e:0c:ea:8a:2d:07:78:79:cd:e0:a3:59:09:ec:82:b6:6c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: May  8 19:25:00 2024 GMT
            Not After : May  7 19:30:00 2025 GMT
        Subject: CN=ECEAD467FE9B8116CAF5D1B8915C20F38593E1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:ba:c7:ca:93:78:7b:00:79:19:04:c0:6a:
                    62:23:96:bd:11:e1:bf:66:c4:19:f2:fd:74:0f:f2:
                    b4:36:1e:cd:99:73:e8:79:26:52:61:5e:a6:76:c1:
                    13:c1:e5:ea:58:81:7b:b2:1e:ae:c5:ea:66:82:4e:
                    e6:49:ff:49:03:66:e7:47:92:6b:5c:de:85:b7:5e:
                    06:16:f1:21:d0:48:71:55:78:03:73:e6:1a:a3:4a:
                    5b:b9:67:5c:83:91:69:96:33:6e:c6:2e:3e:74:d4:
                    91:af:10:0f:7b:56:a0:0d:4f:1b:69:68:1e:75:8c:
                    9e:cd:2b:0a:fb:22:6d:7e:e6:c7:54:8c:4a:37:bb:
                    34:0a:94:8c:93:40:98:90:5a:67:d4:c5:22:8f:9b:
                    7a:83:02:21:81:ec:e2:0a:45:64:2b:81:2b:55:88:
                    02:1f:f8:dc:70:a4:4a:df:c8:06:ed:7a:28:ba:e2:
                    08:48:81:f9:46:4f:4d:46:9a:20:52:a0:25:3a:91:
                    9a:c0:17:0f:f6:cc:69:d3:3b:ab:1a:31:e4:26:99:
                    90:3d:f2:9c:3a:d5:f8:4b:d1:33:3d:ee:e1:d2:32:
                    c1:7e:a7:6a:5f:aa:b0:6f:cc:f8:3e:22:2e:13:80:
                    17:6b:5a:0d:e1:a3:16:8e:20:db:87:6d:d5:78:33:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EA:D4:67:FE:9B:81:16:CA:F5:D1:B8:91:5C:20:F3:85:93:E1:E3
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3230392e302f32342d3234203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:01:79:cf:bd:31:41:af:4c:a8:b6:ca:4c:1c:b9:2a:67:
         27:78:b3:d9:03:15:73:c1:70:19:b6:87:83:b1:83:78:10:ad:
         ea:2e:e1:c0:7e:f3:5d:4a:df:17:00:ca:9a:68:d0:21:0b:4c:
         7a:d9:b2:af:d1:8e:7d:85:04:12:52:54:bb:e5:2a:aa:00:cb:
         43:7e:fb:75:63:ce:ab:fb:8e:17:52:c0:59:6e:e5:b3:08:6c:
         f0:c1:1b:52:ff:59:7a:61:60:a0:c3:1a:de:96:75:3c:d0:8a:
         b7:0e:ec:7a:8a:bb:8f:a3:b2:b4:92:55:d9:73:4b:b9:5a:6f:
         f6:3c:ec:a4:9c:23:0f:60:f4:7b:a3:de:71:13:17:65:89:cc:
         b8:20:9b:35:90:dc:74:a4:eb:d3:99:b5:08:e8:26:c7:1c:70:
         9f:3d:62:4c:1b:b1:ac:df:55:c4:2e:cf:f5:14:49:31:a4:05:
         76:bf:91:9f:86:d7:49:0f:9a:a4:95:cf:be:2d:53:0f:e3:5b:
         0b:aa:67:a6:41:7e:91:23:5d:a2:bb:e5:56:fb:73:8f:76:a1:
         9b:c9:da:57:91:85:be:44:15:37:08:69:ad:b8:0c:31:ab:93:
         e7:47:92:03:65:69:40:20:db:6c:de:23:38:e4:e8:8a:bb:75:
         c1:90:85:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org