Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3231302e302f32332d3234203d3e20323634373331.roa
File:                     3138362e3136372e3231302e302f32332d3234203d3e20323634373331.roa (raw, json)
Hash identifier:          i5Ozw3Z2VmbkGpIi6W9egPYZT6fiYtW4u23SmxUg9j8=
Subject key identifier:   E9:F8:85:DE:53:DE:C6:DD:FA:91:E9:DE:9C:62:B4:66:1C:65:95:E6
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       581D8E6A716110BF2632ADD8224FCB90160EE5FB
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3231302e302f32332d3234203d3e20323634373331.roa
Signing time:             Wed 08 May 2024 19:30:00 +0000
ROA not before:           Wed 08 May 2024 19:25:00 +0000
ROA not after:            Wed 07 May 2025 19:30:00 +0000
asID:                     264731
IP address blocks:        186.167.210.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1d:8e:6a:71:61:10:bf:26:32:ad:d8:22:4f:cb:90:16:0e:e5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: May  8 19:25:00 2024 GMT
            Not After : May  7 19:30:00 2025 GMT
        Subject: CN=E9F885DE53DEC6DDFA91E9DE9C62B4661C6595E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:8b:df:47:1b:4a:f6:94:b0:d7:4f:4f:0e:
                    39:12:30:d9:ba:4e:3a:ff:00:69:66:68:b0:d0:15:
                    c6:93:d3:73:11:d4:6b:bd:af:66:4e:25:27:1b:d2:
                    84:7d:c2:4f:07:3d:7d:76:4e:29:e2:d3:77:31:10:
                    11:da:3a:d8:dd:3b:c0:35:99:c7:0a:f3:3e:78:db:
                    d8:13:3f:b6:11:ca:0d:b7:15:af:6b:d6:f3:37:eb:
                    f7:c5:84:ef:74:4e:70:e2:c8:b2:94:92:09:b6:1e:
                    87:42:1b:17:70:11:08:1f:5c:ed:9c:13:70:cd:d2:
                    9b:b3:8c:1f:77:a7:5b:58:8c:b9:7d:e3:32:e9:26:
                    1d:d0:00:69:db:5d:02:ab:b2:ac:58:25:89:3f:94:
                    d4:d5:73:f7:1d:5e:eb:d0:44:41:d6:1f:03:dd:ba:
                    5f:d4:b1:8c:91:cc:9c:34:b6:76:65:a1:02:79:a6:
                    54:da:bc:d8:be:8c:f7:16:bd:e2:ba:65:61:74:37:
                    c9:a5:cd:d9:34:d8:fc:88:a6:ab:09:69:c0:d4:b6:
                    34:47:7a:44:97:94:7d:2c:c4:6d:25:09:86:d0:d4:
                    17:c0:b2:e5:dc:e9:91:c4:f5:61:a7:89:42:27:fd:
                    03:fa:55:20:00:91:9d:fd:ed:fc:d0:39:86:96:68:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F8:85:DE:53:DE:C6:DD:FA:91:E9:DE:9C:62:B4:66:1C:65:95:E6
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3231302e302f32332d3234203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:8a:08:a9:6b:3b:2f:33:cd:c9:d2:26:43:01:2e:17:b2:06:
         b6:48:ab:8a:b2:27:d0:5b:4c:d1:ff:53:b5:bb:d4:da:07:44:
         2c:32:67:81:bc:4a:19:d1:25:2f:69:bb:36:38:4a:6d:5c:10:
         3d:15:31:68:7f:f5:d4:fb:7f:d7:d1:57:56:a9:37:cc:4f:8e:
         66:ac:f8:6d:8a:8f:b9:d0:00:8f:ec:75:5f:aa:ef:87:ab:00:
         72:f7:30:18:15:df:1f:cc:fb:0d:4a:5f:df:74:6e:a2:88:43:
         36:88:a4:19:e7:36:9f:04:48:59:8a:32:a6:d2:59:37:4f:3a:
         be:90:53:ed:27:93:be:66:bf:7f:af:b8:2f:09:86:99:cd:3a:
         46:f5:82:76:2f:83:88:37:6f:b1:d6:34:d1:6c:eb:37:a7:d9:
         59:c0:36:8b:a6:de:1d:57:b9:99:2f:7a:4d:dc:dd:04:23:0c:
         2f:5c:31:b0:b9:cf:7f:1f:6b:f4:42:dd:9a:f0:6b:f2:27:aa:
         bd:22:17:c1:57:9c:1b:90:03:3b:90:e1:16:22:c5:f0:e2:e2:
         cc:bb:1f:ca:d9:8c:c1:98:7e:48:87:7b:4d:49:22:b7:1a:eb:
         e1:3b:51:ce:7b:d3:11:84:26:53:2b:4b:fa:79:80:c2:ed:a9:
         71:b3:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org