Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3234382e302f32312d3234203d3e203336313635.roa
File:                     3138362e312e3234382e302f32312d3234203d3e203336313635.roa (raw, json)
Hash identifier:          pWYRsgqZHGimtPKomSSmoHftaWAhWGo5GTyZ0IUkbho=
Subject key identifier:   A0:8F:9A:72:C1:48:38:16:8E:E2:56:79:A4:2B:BC:CB:47:13:D1:B8
Certificate issuer:       /CN=D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D
Certificate serial:       76D2DE63E4A0CE26DAA35B7348EF09726CCDE6E8
Authority key identifier: D2:62:F2:FD:5E:F5:D8:E2:C8:BA:9E:70:A9:40:AA:AF:7C:82:2F:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3234382e302f32312d3234203d3e203336313635.roa
Signing time:             Tue 05 Mar 2024 17:55:39 +0000
ROA not before:           Tue 05 Mar 2024 17:50:39 +0000
ROA not after:            Tue 04 Mar 2025 17:55:39 +0000
asID:                     36165
IP address blocks:        186.1.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d2:de:63:e4:a0:ce:26:da:a3:5b:73:48:ef:09:72:6c:cd:e6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D
        Validity
            Not Before: Mar  5 17:50:39 2024 GMT
            Not After : Mar  4 17:55:39 2025 GMT
        Subject: CN=A08F9A72C14838168EE25679A42BBCCB4713D1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f8:a5:4d:d0:df:1f:d6:3b:23:ad:72:bb:e8:
                    a7:00:af:00:e0:80:81:fc:9f:15:65:4d:70:da:c0:
                    f4:57:46:6f:f9:13:33:5a:f5:18:e6:88:72:41:67:
                    e1:58:31:8c:26:a9:6e:2b:2f:a5:6e:cd:46:3d:3c:
                    16:a5:a3:39:1a:58:3f:15:89:ce:a6:18:fe:33:0e:
                    d8:d1:87:7b:08:38:ca:6a:1e:8b:a5:4f:9c:b8:12:
                    9b:86:53:7a:a9:cd:90:a7:3f:cb:8d:5b:5a:e0:dc:
                    38:7f:f9:13:8f:ba:ce:09:fa:4b:16:5a:29:29:b6:
                    93:be:8b:28:67:d0:81:bd:d3:17:22:38:ae:cc:17:
                    48:3a:b7:81:61:12:6a:62:00:d6:bd:af:30:f4:f7:
                    15:a5:35:82:fa:1d:f7:ab:6a:b1:50:f2:e9:75:09:
                    a2:10:96:7d:bc:64:5d:3f:5e:8e:a1:00:f0:6c:dc:
                    7c:bd:83:79:58:33:a7:0e:4d:15:06:10:0b:d1:ac:
                    72:0f:5e:b0:b4:cc:09:e8:6a:ec:bb:e9:c4:01:49:
                    f0:54:64:d5:28:32:ba:54:a3:15:b9:85:ba:5b:fa:
                    00:c3:4e:5a:3d:80:12:1c:b9:b3:7e:5a:e9:a3:4d:
                    da:e4:f1:87:b6:59:bb:98:ca:42:9c:2c:95:5f:f2:
                    c7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8F:9A:72:C1:48:38:16:8E:E2:56:79:A4:2B:BC:CB:47:13:D1:B8
            X509v3 Authority Key Identifier:
                keyid:D2:62:F2:FD:5E:F5:D8:E2:C8:BA:9E:70:A9:40:AA:AF:7C:82:2F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3234382e302f32312d3234203d3e203336313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c8:67:84:ec:10:88:8d:d4:14:78:99:2d:4c:0f:e7:da:0a:67:
         7d:d2:db:65:a5:ce:72:dd:20:15:29:67:e3:77:ea:68:93:e9:
         22:21:e9:a2:dc:90:8f:56:74:ab:a8:a4:af:ea:50:79:3e:9c:
         2e:9c:97:c4:42:ad:d0:72:a7:df:8c:9a:68:0b:78:be:20:70:
         9d:86:13:cc:c1:94:7e:9a:b7:ad:7e:e2:26:cd:76:55:2b:be:
         5b:91:f9:1a:97:ed:22:99:b8:af:46:80:13:df:ef:c4:aa:c5:
         41:c8:1c:83:fe:24:85:55:6b:e5:fc:63:e2:da:a1:20:c6:9b:
         82:79:0a:e8:bd:42:ba:0b:ac:02:2b:3e:96:68:f2:b0:b6:7d:
         fe:05:67:c4:a4:2a:ed:d8:de:78:aa:f6:ec:a6:ec:84:58:97:
         e2:4b:cf:7b:eb:4d:cd:3e:84:76:a5:5d:3b:5b:3f:c9:1b:30:
         a0:31:9c:d6:98:64:df:a4:8e:38:0f:03:d4:19:11:83:99:90:
         ef:03:8f:94:ab:cd:34:21:8a:0b:d3:08:15:50:8f:17:6c:a9:
         15:50:1b:77:55:20:a4:0c:43:7b:1c:fc:29:ad:ce:28:a1:c7:
         55:4a:ea:03:be:d2:a4:ba:37:74:c1:a9:0d:96:91:17:d7:5c:
         72:d3:bb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org