Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3138372e3132302e3137322e302f32322d3234203d3e20323635363238.roa
File:                     3138372e3132302e3137322e302f32322d3234203d3e20323635363238.roa (raw, json)
Hash identifier:          QtKnKKYdc1eah1QbEkzoU1fjW0iL7cvEfne7oN/WOdk=
Subject key identifier:   20:80:5E:E6:FB:08:D7:28:9B:CE:76:33:A3:D2:4E:34:40:F7:05:A7
Certificate issuer:       /CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
Certificate serial:       7238E5C10380CDBB028C68B91EEF5DAADBE9A785
Authority key identifier: 51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3138372e3132302e3137322e302f32322d3234203d3e20323635363238.roa
Signing time:             Mon 17 Jun 2024 22:50:00 +0000
ROA not before:           Mon 17 Jun 2024 22:45:00 +0000
ROA not after:            Mon 16 Jun 2025 22:50:00 +0000
asID:                     265628
IP address blocks:        187.120.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jul 2024 10:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:38:e5:c1:03:80:cd:bb:02:8c:68:b9:1e:ef:5d:aa:db:e9:a7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
        Validity
            Not Before: Jun 17 22:45:00 2024 GMT
            Not After : Jun 16 22:50:00 2025 GMT
        Subject: CN=20805EE6FB08D7289BCE7633A3D24E3440F705A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:eb:a4:de:bd:38:30:19:71:be:63:25:a9:
                    37:5a:3d:61:8b:e3:b0:10:89:2f:7a:37:a6:bd:a8:
                    d9:e1:0b:d8:b0:e0:ca:14:35:5b:65:17:77:d1:6d:
                    6b:4c:b4:c1:99:32:28:a8:88:23:f3:fe:10:07:6a:
                    5d:2d:a2:5a:72:54:8a:2d:aa:8b:c4:36:ba:88:8d:
                    fc:9d:79:46:ee:00:0f:11:4e:13:8e:9e:07:40:77:
                    c8:53:07:98:c8:52:9c:bb:35:7b:4a:3b:44:60:d5:
                    09:41:4c:18:e9:f5:35:7f:6e:bc:81:d5:0c:31:58:
                    fc:06:be:f4:e2:49:1e:7d:e5:5a:a4:63:ca:f4:04:
                    d2:7f:32:8c:f9:65:0d:06:b6:7f:4c:10:74:bf:4f:
                    00:87:5c:9a:ac:22:6c:58:2f:41:44:5c:ba:ff:c0:
                    73:2f:0b:ff:7e:d0:d5:0b:1a:c8:fe:be:0f:70:08:
                    d1:05:01:d6:56:08:1a:a9:32:58:33:e9:43:91:be:
                    7e:13:60:dd:cc:37:91:8e:4e:39:6e:f7:fe:c1:e3:
                    38:d8:6c:7a:c0:6d:35:de:1b:df:2d:2b:a0:a8:8c:
                    dd:05:a1:98:3a:81:6e:d6:01:52:a5:c1:73:8b:58:
                    4d:6e:51:cf:38:39:98:00:08:ca:ab:8b:63:5d:37:
                    7f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:80:5E:E6:FB:08:D7:28:9B:CE:76:33:A3:D2:4E:34:40:F7:05:A7
            X509v3 Authority Key Identifier:
                keyid:51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3138372e3132302e3137322e302f32322d3234203d3e20323635363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:e4:cb:d7:8e:55:54:b0:e4:88:6f:4b:c5:70:ed:ba:0d:38:
         e6:d3:e4:fc:b4:17:2d:ce:f4:65:66:da:7d:01:8a:0e:25:c8:
         45:25:04:c8:32:42:b7:bd:43:33:1b:0b:17:6c:f4:d7:b6:11:
         3f:15:d5:70:95:e6:66:af:1e:ae:e4:ee:de:84:e8:4f:c1:82:
         67:dc:aa:2b:f9:d5:1e:05:f2:3a:e1:a1:20:a5:35:95:0e:e3:
         93:94:c3:a3:94:02:0d:d6:a8:1d:b5:2f:3c:5c:d3:7d:da:e0:
         a5:92:43:05:64:0b:1f:fd:7a:1c:1f:ce:31:c9:41:25:70:ce:
         85:1c:64:b7:44:51:41:a3:b6:4e:ad:97:4a:cb:5d:cb:2f:a6:
         80:d0:ee:13:d3:f5:b2:74:0f:28:3b:e2:04:cc:c6:e4:ab:8c:
         0b:a2:9f:85:98:56:7d:59:eb:a2:f4:40:9e:96:89:33:2e:7e:
         23:f0:89:b4:c8:7b:15:3c:54:4b:81:7a:5d:e9:1d:8c:a2:48:
         8c:4f:be:05:7b:fc:20:0b:23:37:b7:ff:25:bb:76:0e:30:cd:
         8b:18:58:d9:5d:19:f9:4b:48:26:6a:53:25:1d:16:7b:1b:e4:
         f0:bf:cc:e4:9d:5f:97:a1:df:ec:c7:f5:da:04:f0:47:49:8a:
         e2:8a:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 23:28:29 2024 by rpki-client on console-ams.rpki-client.org