Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3232342e302f32302d3234203d3e20323634373331.roa
File:                     3138362e3136372e3232342e302f32302d3234203d3e20323634373331.roa (raw, json)
Hash identifier:          WOqTvj/VF2U8U9lX0IMN54I5YXQc3k5BO5Js8KYn90w=
Subject key identifier:   0C:31:41:2F:45:85:F7:91:96:F7:B5:51:41:4B:88:D7:05:A5:6C:5D
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       32437A267E5CA13D251F84EBACC2FDB9F35458FE
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3232342e302f32302d3234203d3e20323634373331.roa
Signing time:             Wed 08 May 2024 19:35:00 +0000
ROA not before:           Wed 08 May 2024 19:30:00 +0000
ROA not after:            Wed 07 May 2025 19:35:00 +0000
asID:                     264731
IP address blocks:        186.167.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:43:7a:26:7e:5c:a1:3d:25:1f:84:eb:ac:c2:fd:b9:f3:54:58:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: May  8 19:30:00 2024 GMT
            Not After : May  7 19:35:00 2025 GMT
        Subject: CN=0C31412F4585F79196F7B551414B88D705A56C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c2:9c:c8:4d:60:55:b7:97:f7:b5:0e:7c:88:
                    28:4c:e6:6e:33:77:a8:b9:75:09:29:69:2d:33:63:
                    2a:29:db:d1:be:97:05:56:12:64:06:ac:65:4b:4a:
                    20:51:ca:24:d8:82:97:4f:db:8f:96:53:88:8a:05:
                    e7:f5:09:3e:e3:83:d5:f9:84:de:c2:26:1c:21:31:
                    5d:45:e8:e1:64:c2:f2:e4:63:30:03:bb:2b:92:8c:
                    32:48:60:60:11:cd:2e:28:32:40:a7:05:63:ed:32:
                    2b:76:7e:e0:c8:f0:5e:f0:45:37:41:4d:57:aa:ae:
                    4c:dd:6f:17:96:a8:92:1e:2f:40:95:16:c7:fc:fe:
                    78:61:d3:03:4d:be:2c:1f:42:37:9c:91:b0:77:b1:
                    ae:d6:dd:cf:d9:4d:43:8b:d3:47:9b:7e:67:e5:a6:
                    05:a4:8e:fb:f7:d8:7a:ac:a2:b1:e6:af:eb:39:2f:
                    ba:cf:c1:6e:64:11:a8:bd:5c:09:6d:ee:96:03:87:
                    c9:6b:4e:81:14:86:6a:80:49:2a:89:34:5c:d2:ac:
                    06:f1:26:d5:25:31:1b:43:cb:ee:c7:d4:b0:e8:ea:
                    17:27:b3:40:34:ac:ce:b1:72:aa:6e:0c:03:b2:e3:
                    c4:5c:b7:b4:7b:72:8d:4a:9a:3c:73:69:7a:f3:88:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:31:41:2F:45:85:F7:91:96:F7:B5:51:41:4B:88:D7:05:A5:6C:5D
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3232342e302f32302d3234203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:e1:00:28:00:e7:4c:0f:07:45:d3:b5:0c:6d:03:79:d9:aa:
         ca:0a:62:10:a0:88:ef:f4:7d:fd:df:fc:a2:00:02:ec:f2:e3:
         0a:37:43:fa:2f:6e:04:11:58:bf:2e:58:b5:a0:a0:b6:8f:f0:
         da:39:07:a2:18:97:79:f0:e8:95:80:9c:12:59:78:52:26:a5:
         b1:fe:73:71:c0:34:94:9b:22:7a:3d:d6:e3:f0:62:8f:1d:e9:
         4d:2d:1e:5b:20:2a:ab:b9:74:9c:da:02:d3:cd:2c:34:2a:c7:
         b7:57:67:ad:fd:cd:63:ef:f4:b5:0d:a4:bd:3b:0d:e1:90:e8:
         7d:67:71:9f:4e:e3:9b:b0:a4:a3:b1:98:c1:3d:25:d6:e5:29:
         38:de:f7:cf:7d:8e:78:6d:4c:79:73:5a:ec:da:18:a0:61:f3:
         c0:9b:2a:43:57:c7:ca:06:b9:da:79:eb:c9:32:e1:d3:6f:00:
         f5:77:b2:a1:51:97:18:f3:08:df:92:e9:3b:b7:71:65:96:5b:
         d3:bc:33:5e:82:4f:84:16:77:03:da:cd:9c:12:96:fb:74:c4:
         93:91:2f:7b:c3:88:44:bb:67:8b:53:dd:0d:47:22:96:47:08:
         61:93:5c:43:dd:17:26:6d:a9:2a:5d:2d:18:5e:6b:c0:b3:5e:
         5e:8b:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org