Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3231362e302f32342d3234203d3e203237373335.roa
File:                     3138362e302e3231362e302f32342d3234203d3e203237373335.roa (raw, json)
Hash identifier:          x2/WzLIsXURtw2JvNJOawzo0w6A1wCRfxN49iRuiG1o=
Subject key identifier:   3C:CF:F7:48:E3:D0:2A:09:D7:9C:A9:3B:29:19:A2:29:9A:D1:05:3E
Certificate issuer:       /CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
Certificate serial:       0F2AD2CB017429C35DB705FD0B2EFF0D1288115C
Authority key identifier: EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3231362e302f32342d3234203d3e203237373335.roa
Signing time:             Tue 05 Mar 2024 18:12:05 +0000
ROA not before:           Tue 05 Mar 2024 18:07:05 +0000
ROA not after:            Tue 04 Mar 2025 18:12:05 +0000
asID:                     27735
IP address blocks:        186.0.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2a:d2:cb:01:74:29:c3:5d:b7:05:fd:0b:2e:ff:0d:12:88:11:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
        Validity
            Not Before: Mar  5 18:07:05 2024 GMT
            Not After : Mar  4 18:12:05 2025 GMT
        Subject: CN=3CCFF748E3D02A09D79CA93B2919A2299AD1053E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:b4:c5:2b:1d:49:ed:8f:e5:b7:ed:f6:60:
                    7e:01:4f:81:33:ee:2f:63:be:38:3e:a3:cc:09:f3:
                    3c:49:1e:67:92:59:67:57:16:ca:60:4b:28:a0:83:
                    b0:65:02:55:00:e0:28:f4:8a:53:9a:ee:ae:0c:54:
                    cb:8a:f2:aa:67:00:b0:42:07:ed:a6:71:55:eb:9c:
                    fd:b5:37:ed:63:5c:fe:56:90:fa:85:ca:43:3a:c9:
                    a6:a9:46:35:9c:99:eb:9a:09:2b:77:04:c7:25:bb:
                    86:57:86:4a:e1:9f:d8:e7:c4:a8:61:18:12:8b:cc:
                    2b:43:9e:bc:76:36:e2:15:c0:70:13:82:b0:ae:2a:
                    4e:70:d4:15:35:10:1d:e9:76:76:bf:9f:a0:d7:a5:
                    0c:24:47:f6:7d:38:2a:c7:fc:85:24:5d:10:4e:44:
                    60:de:6c:15:f2:f9:58:50:ec:33:a7:b2:31:ba:ed:
                    94:28:4f:36:8a:f7:fa:c8:8f:fa:4e:3a:1b:a5:da:
                    bf:38:45:63:7d:7f:8b:15:d0:75:33:06:83:c0:95:
                    71:e5:78:0e:62:7e:dd:be:2c:6c:e1:76:f8:bf:e5:
                    66:5d:4b:be:c1:2c:b3:8d:bb:4a:76:05:c2:af:b7:
                    1d:57:a4:c9:3e:83:82:e2:66:9c:dd:b7:c2:d0:4e:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CF:F7:48:E3:D0:2A:09:D7:9C:A9:3B:29:19:A2:29:9A:D1:05:3E
            X509v3 Authority Key Identifier:
                keyid:EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3231362e302f32342d3234203d3e203237373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:5f:59:7f:2b:6d:83:24:9a:ac:0b:de:26:c8:ca:67:78:21:
         ce:a7:23:1a:6e:15:80:e7:09:a7:52:24:c5:a6:f1:a0:fc:00:
         0a:33:a6:23:8b:15:f9:7b:d1:9e:e0:dd:ea:35:30:bc:1f:a2:
         11:82:dc:7b:de:89:e0:ca:97:63:36:49:2a:a3:a2:9b:b9:5d:
         14:e8:b0:4b:e5:f0:f5:30:c1:d4:19:6a:22:51:ac:7b:ac:d6:
         22:86:d9:15:5e:38:2c:d8:3f:14:db:26:66:f5:3b:b6:b1:d6:
         37:a8:59:4b:87:68:f7:33:fc:a5:e8:ca:89:97:a7:cd:a3:dc:
         24:0d:29:83:5c:6a:ed:6a:5e:7c:8c:9a:36:07:24:52:ae:ac:
         64:e4:8f:37:a5:c7:19:b6:ea:70:2d:a2:2c:eb:7f:cb:60:c7:
         29:7e:68:94:1b:20:ff:22:3a:ff:7b:4a:e6:9b:20:f7:e6:6a:
         78:3e:c3:f0:c4:5c:9a:7c:01:b1:f4:46:d4:e0:ff:5e:d3:5d:
         f6:7c:31:12:72:fe:d3:d2:0e:eb:2b:84:14:1d:e4:df:27:42:
         22:a9:c2:96:02:2f:ab:34:e6:d3:c1:64:fc:51:45:a4:4f:be:
         04:f1:09:9c:9a:d2:68:7c:67:04:5e:99:cd:81:c1:db:06:c8:
         14:c5:1a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:22 2024 by rpki-client on console-fra.rpki-client.org