Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3138362e34332e3132382e302f31372d3234203d3e203237363638.roa
File:                     3138362e34332e3132382e302f31372d3234203d3e203237363638.roa (raw, json)
Hash identifier:          AV3j9VCs2nttK6Q3CdqopmBiYFSReQ7+0a3sJ3P7E3g=
Subject key identifier:   46:2A:78:E8:D9:1B:73:BD:89:E6:B1:B4:22:DF:4D:47:0A:41:8D:CF
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       47783586CB1C87F35125E8C7354AF909B89B68DA
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3138362e34332e3132382e302f31372d3234203d3e203237363638.roa
Signing time:             Tue 05 Mar 2024 18:21:39 +0000
ROA not before:           Tue 05 Mar 2024 18:16:39 +0000
ROA not after:            Tue 04 Mar 2025 18:21:39 +0000
asID:                     27668
IP address blocks:        186.43.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:78:35:86:cb:1c:87:f3:51:25:e8:c7:35:4a:f9:09:b8:9b:68:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Mar  5 18:16:39 2024 GMT
            Not After : Mar  4 18:21:39 2025 GMT
        Subject: CN=462A78E8D91B73BD89E6B1B422DF4D470A418DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:58:da:c4:b7:20:a4:52:9f:cf:e4:f6:ff:bb:
                    39:1a:de:11:45:8c:fe:5e:64:b5:e6:0b:df:95:17:
                    ba:f2:5e:be:46:31:a0:6e:d5:29:73:c7:59:6b:8e:
                    c6:60:05:6e:fb:bc:92:30:7e:c5:59:95:ff:03:15:
                    00:ad:f5:76:6e:29:5c:33:54:a3:8d:e9:b5:d7:62:
                    fa:5d:f6:1b:f5:31:36:2e:8b:5a:8a:3e:ee:59:e4:
                    6f:33:cd:7d:d7:3e:df:41:f2:db:73:dc:ca:91:d8:
                    34:82:98:ba:98:17:4e:42:a1:f5:7e:85:d3:c6:4f:
                    0f:19:6a:a0:6c:46:e6:3e:49:c0:0b:62:35:fd:ec:
                    55:95:9d:6e:a3:be:5b:3c:51:7d:33:f3:50:c0:43:
                    30:4b:d6:45:d3:e2:ed:58:4a:73:6d:78:0b:2a:df:
                    a7:78:a2:68:26:a1:2f:bf:f9:4a:37:03:42:c6:48:
                    7e:7e:85:4b:a4:8d:7d:13:09:e5:06:c0:83:77:16:
                    59:10:2a:a9:fb:dc:11:6c:e4:b4:7b:18:97:de:9a:
                    28:1c:bc:7f:0b:11:fe:66:57:f6:b4:38:b1:02:4e:
                    1c:64:a2:c0:05:d2:0e:cc:26:a0:5c:10:d0:40:9a:
                    59:44:67:61:b7:47:79:8c:fc:4b:67:fe:fd:ed:45:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2A:78:E8:D9:1B:73:BD:89:E6:B1:B4:22:DF:4D:47:0A:41:8D:CF
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3138362e34332e3132382e302f31372d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.43.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         81:e0:08:59:3b:40:fb:5d:a9:9d:58:c2:dd:2e:1d:82:86:be:
         c3:b8:1d:60:2f:a2:1e:33:91:be:d8:8e:75:cf:00:0a:3b:54:
         c0:c3:0b:37:5c:a9:f8:a0:e1:14:1b:d2:6a:07:89:ba:ef:d4:
         c7:86:35:5e:78:50:f1:5a:dc:ac:a2:4f:da:b9:d3:52:0c:01:
         ec:68:50:c6:79:a9:b2:1e:fc:1d:e5:80:fb:99:8e:84:12:93:
         e3:40:48:d3:ef:37:28:df:ce:79:24:3c:a7:11:f9:99:28:9f:
         29:c7:f1:dc:27:70:e9:3d:dd:68:a2:f5:0a:1f:de:c9:c8:f4:
         3d:2c:62:3d:f3:de:cb:7d:48:e3:52:6a:2b:5c:c2:68:2b:7c:
         5c:65:9e:0d:66:d3:80:fb:46:82:c9:ce:58:89:70:c7:b9:e0:
         b5:0e:57:94:b8:90:1f:71:64:2b:11:af:9b:ed:bc:b3:6b:89:
         f8:ec:17:66:de:43:45:78:e2:08:c1:b0:4d:65:14:79:46:d1:
         83:96:75:3f:7e:38:ab:e8:d2:12:50:7f:f1:ae:e0:5e:09:5b:
         0e:9a:ac:c3:8b:6e:b7:78:b9:03:79:d0:67:e0:70:a3:07:1a:
         86:2f:da:ee:88:a3:32:79:84:40:51:58:0f:b0:c0:c9:d2:b9:
         2b:ff:17:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org