Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3139382e302f32352d3235203d3e20323634373031.roa
File:                     3138362e302e3139382e302f32352d3235203d3e20323634373031.roa (raw, json)
Hash identifier:          qYtRLcWaEtkmS8T+/Ingj+LQJ40tQi9NDXhRPPB/ymY=
Subject key identifier:   72:8F:07:24:3E:EC:49:E4:DD:9E:18:23:12:0E:C2:E1:98:F7:17:5E
Certificate issuer:       /CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
Certificate serial:       2220B29062DEE0EEF450BE899E2CD03EC2612C82
Authority key identifier: EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3139382e302f32352d3235203d3e20323634373031.roa
Signing time:             Tue 05 Mar 2024 18:12:06 +0000
ROA not before:           Tue 05 Mar 2024 18:07:06 +0000
ROA not after:            Tue 04 Mar 2025 18:12:06 +0000
asID:                     264701
IP address blocks:        186.0.198.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:20:b2:90:62:de:e0:ee:f4:50:be:89:9e:2c:d0:3e:c2:61:2c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
        Validity
            Not Before: Mar  5 18:07:06 2024 GMT
            Not After : Mar  4 18:12:06 2025 GMT
        Subject: CN=728F07243EEC49E4DD9E1823120EC2E198F7175E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:eb:c7:72:b5:c4:fe:fe:f8:aa:72:f8:d4:
                    48:bf:0d:2b:a9:7d:1b:93:7d:b3:6c:7c:ef:80:c7:
                    dd:d6:a8:ec:7e:61:4d:99:5d:4a:ee:7a:33:c9:4b:
                    23:42:1a:1f:a1:33:bb:bf:4f:ac:71:f5:d7:a0:ef:
                    48:63:03:29:19:4e:8d:04:d9:6c:07:0e:aa:ec:49:
                    98:7f:84:3b:67:de:54:9f:72:50:1a:9b:64:a3:71:
                    a1:67:af:76:b5:98:bb:6c:55:55:37:29:eb:a5:55:
                    3c:99:25:8f:a6:0a:fd:6b:74:98:d8:c5:f2:43:52:
                    46:a9:d0:b5:3e:05:01:f9:9e:9a:22:23:d0:fb:24:
                    96:c2:da:2d:52:bf:b7:df:91:10:34:ec:f0:39:09:
                    61:a7:a7:dd:4a:e7:d0:08:f7:79:61:0c:18:15:73:
                    3e:d2:4b:f3:8f:e1:6a:87:c7:16:1a:ad:e7:a9:ce:
                    05:67:be:1c:35:1e:71:3f:ef:f4:70:82:89:25:e5:
                    83:38:af:98:bc:82:cc:b9:dc:08:d4:35:03:46:47:
                    42:2b:f9:08:29:26:a7:f7:32:fc:92:9e:ed:18:be:
                    b1:7b:93:b6:82:a3:80:f8:b2:91:5b:84:e0:79:0c:
                    7a:19:b2:6b:d0:c9:3d:d3:f4:46:11:b8:4e:88:04:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8F:07:24:3E:EC:49:E4:DD:9E:18:23:12:0E:C2:E1:98:F7:17:5E
            X509v3 Authority Key Identifier:
                keyid:EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3139382e302f32352d3235203d3e20323634373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.198.0/25

    Signature Algorithm: sha256WithRSAEncryption
         41:20:0a:3a:ff:20:c0:57:89:95:53:3f:e2:05:91:70:e4:98:
         9e:f6:00:b9:1d:4c:fc:54:58:b4:c6:e3:b9:bf:e2:6d:98:d0:
         91:9e:b5:34:f3:0d:29:e7:0b:8c:bd:47:b8:b5:53:79:56:c6:
         e9:56:52:f8:e2:ad:78:fd:6c:a8:bf:65:f9:47:c6:2f:7c:71:
         7f:e3:c7:f0:f1:6a:14:d0:0a:8f:2e:4a:be:ab:25:e9:5a:e6:
         4c:00:81:a9:7c:3e:c8:3d:bd:86:6b:a6:82:65:99:d6:83:31:
         15:af:44:db:96:85:c4:43:a9:ba:54:a1:81:ad:ad:c0:db:fd:
         fa:72:99:3c:af:6f:c2:15:45:11:f2:e8:43:b3:26:f9:2e:e6:
         fd:07:cc:8a:bf:04:e2:71:f7:e2:8a:e3:68:51:ba:18:91:96:
         c5:d5:10:3d:5a:72:fe:c6:cb:ac:79:2e:5e:72:5a:5d:d3:2d:
         64:ad:72:0f:0d:3c:51:a3:62:70:b6:11:a6:33:f5:cc:5a:46:
         76:9e:b3:fa:f9:38:fc:a8:36:5e:04:82:e6:bf:e8:4d:09:8a:
         2a:4e:7d:79:7b:ab:2f:a4:fc:03:e9:0c:bf:42:06:39:88:2b:
         22:ae:7f:6e:a6:d4:cb:89:eb:70:2b:74:aa:5b:a3:70:36:d0:
         38:f4:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:55 2024 by rpki-client on console-fra.rpki-client.org