Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3234302e302f32302d3234203d3e20323634373331.roa
File:                     3138362e3136372e3234302e302f32302d3234203d3e20323634373331.roa (raw, json)
Hash identifier:          lb/ed5SRE+dX2KSdzyYwa700qtsMC53FztI8VMn0xsU=
Subject key identifier:   F1:7A:1F:B2:E6:43:FF:41:74:FE:4D:46:47:A9:F4:CB:9D:42:4C:6A
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       487C47272B61F247B2EEC57632F8E3274D91C3D8
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3234302e302f32302d3234203d3e20323634373331.roa
Signing time:             Tue 05 Mar 2024 17:49:51 +0000
ROA not before:           Tue 05 Mar 2024 17:44:51 +0000
ROA not after:            Tue 04 Mar 2025 17:49:51 +0000
asID:                     264731
IP address blocks:        186.167.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7c:47:27:2b:61:f2:47:b2:ee:c5:76:32:f8:e3:27:4d:91:c3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Mar  5 17:44:51 2024 GMT
            Not After : Mar  4 17:49:51 2025 GMT
        Subject: CN=F17A1FB2E643FF4174FE4D4647A9F4CB9D424C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:79:a1:e3:fe:99:2a:7c:57:a2:e3:60:3e:
                    2a:3b:3b:11:64:61:cf:6b:53:98:aa:15:73:a2:c0:
                    16:db:5e:ce:7e:fc:97:9c:14:8a:33:18:a5:e8:b4:
                    5e:25:84:6c:88:ae:34:a1:35:90:71:ee:4c:ab:96:
                    93:ac:2c:69:d2:5d:29:66:c8:66:fd:78:60:12:56:
                    8c:75:d6:31:b0:f6:fa:4d:fd:0a:59:b0:e4:65:02:
                    a2:c8:a3:cd:81:3b:d8:03:a3:ba:7f:30:01:cc:2c:
                    e5:ae:79:81:89:ef:e6:2b:0b:23:df:fe:61:ff:78:
                    3d:4d:98:38:eb:7b:c5:97:f7:e4:21:18:e7:49:95:
                    94:ed:2f:4f:01:69:31:0a:88:c9:ae:df:c3:07:cf:
                    1a:d0:d4:2c:cd:96:2e:e6:5a:6b:65:c2:7e:02:02:
                    fb:23:6a:91:f8:c4:dc:b9:2f:50:2e:03:db:7d:e7:
                    cf:75:8f:c7:05:4a:a4:72:c1:5c:c8:92:75:34:98:
                    96:cf:5b:0d:65:d9:f6:01:01:c5:15:e6:ad:fe:76:
                    ec:2a:a9:50:a5:ef:b4:1a:20:ef:f2:40:02:2d:a0:
                    bb:68:b1:13:a5:b3:be:80:7f:a7:f2:9f:e1:61:3a:
                    f4:ae:48:a8:b0:c4:b4:cc:e2:9e:1e:14:15:84:4a:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7A:1F:B2:E6:43:FF:41:74:FE:4D:46:47:A9:F4:CB:9D:42:4C:6A
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3234302e302f32302d3234203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:cd:2f:af:22:21:14:c1:97:eb:40:04:97:0a:df:b5:2d:82:
         34:9b:a2:6d:04:08:cb:af:21:a1:21:6d:c0:87:24:49:86:e0:
         da:0e:74:6a:b9:81:7c:a1:b5:ca:1a:14:98:e2:42:c2:6f:14:
         78:ce:b8:24:57:2d:3c:d7:26:09:58:2a:6c:1c:e6:4f:fa:68:
         07:f0:1b:df:08:bc:38:0e:88:ed:b0:48:fa:01:a6:29:44:09:
         63:14:57:27:ba:8f:d4:74:b0:51:10:a5:5e:d1:48:66:f7:83:
         97:5a:4c:21:0c:61:67:36:0d:1e:6b:de:c0:26:3c:9d:0c:dc:
         d9:25:3b:53:48:c3:9b:a2:f0:31:7f:55:73:96:9e:ea:b7:ac:
         2c:c9:d8:f6:1e:e1:b4:cb:71:38:3e:ad:ee:dd:dd:a4:fb:9b:
         2e:7f:95:74:96:66:11:90:a1:b7:57:be:2c:77:6e:f5:b6:4e:
         c4:1c:82:e0:6d:58:4c:9d:ae:b0:c9:d4:92:c9:c8:e3:8a:df:
         f7:d6:5e:8f:77:43:1a:44:d9:79:1f:21:aa:c8:63:9c:58:63:
         79:d6:c5:57:4a:92:da:c0:23:07:8a:cf:2d:81:f9:10:9b:b9:
         81:18:f3:6c:87:88:0c:40:35:09:6d:08:1b:3b:45:bd:8b:88:
         e1:49:3a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 11:05:30 2024 by rpki-client on console-fra.rpki-client.org