Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e302e3138382e302f32322d3234203d3e203233323031.roa
File:                     3138362e302e3138382e302f32322d3234203d3e203233323031.roa (raw, json)
Hash identifier:          IQHazhcZA7VMGPlCC2yQJAVeZKoH3NkOp0p4cH0xVos=
Subject key identifier:   FE:2E:00:8C:89:37:B3:A8:15:59:02:DB:58:20:6A:97:6B:00:C1:90
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       3B3336918A5166E2C61BE9C5B555C7EBDA57C01A
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e302e3138382e302f32322d3234203d3e203233323031.roa
Signing time:             Tue 05 Mar 2024 18:22:56 +0000
ROA not before:           Tue 05 Mar 2024 18:17:56 +0000
ROA not after:            Tue 04 Mar 2025 18:22:56 +0000
asID:                     23201
IP address blocks:        186.0.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:33:36:91:8a:51:66:e2:c6:1b:e9:c5:b5:55:c7:eb:da:57:c0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Mar  5 18:17:56 2024 GMT
            Not After : Mar  4 18:22:56 2025 GMT
        Subject: CN=FE2E008C8937B3A8155902DB58206A976B00C190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2c:ff:ef:21:db:89:95:e9:b3:64:1b:dd:06:
                    ba:9a:2a:9a:07:3e:75:d1:a4:6e:c8:2b:dd:25:a7:
                    03:65:a1:e3:ef:a1:a9:23:0c:97:8e:d2:06:e8:f3:
                    ff:77:7c:ad:99:aa:a6:1b:23:ac:fa:1f:b9:e2:54:
                    2c:19:b5:16:d3:ec:b1:df:69:7b:7d:77:be:96:a3:
                    2d:b5:60:6a:cc:43:78:ea:ee:d8:df:46:47:30:72:
                    45:7a:b5:b8:48:e2:13:ab:85:f1:08:ec:8a:5d:ec:
                    46:a9:dd:a0:b6:f5:9a:6d:74:82:76:14:b7:57:4c:
                    da:67:6d:0b:cd:75:83:80:f1:a6:7a:f9:85:24:7b:
                    fa:36:9f:b6:7f:2a:46:35:10:42:29:50:fb:46:42:
                    b9:a7:9e:8b:4f:5b:05:28:e6:06:fc:62:c1:99:ee:
                    b5:0f:95:cc:9a:67:f0:bf:91:d9:06:aa:ce:29:7d:
                    54:8c:5e:37:eb:db:0d:da:a7:c3:d2:03:f9:93:18:
                    c8:01:2d:ab:fb:2f:ff:49:f4:71:ef:2f:89:04:3f:
                    21:24:a1:9c:7b:27:d3:17:5d:67:49:9c:4f:09:1d:
                    18:52:7f:a5:c7:0e:8a:dc:5b:84:50:93:bf:97:70:
                    85:f4:b5:c4:4f:b0:df:c0:f9:e7:a4:93:d0:2a:e1:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2E:00:8C:89:37:B3:A8:15:59:02:DB:58:20:6A:97:6B:00:C1:90
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e302e3138382e302f32322d3234203d3e203233323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:cc:58:4f:92:96:4d:eb:be:ed:0c:01:26:5c:5b:b6:3c:96:
         26:d7:49:95:34:29:9d:71:45:ef:37:0d:09:20:08:b2:54:b1:
         a9:b8:3c:a7:dc:e6:a9:58:7a:99:a1:2d:a1:49:c1:1e:de:b3:
         ff:93:7b:5f:3d:55:41:9b:23:9d:e3:5f:b5:40:8c:4d:2b:68:
         61:6c:2e:82:c4:35:7a:07:0c:72:61:c0:05:1d:5f:f4:cc:28:
         b0:8c:56:f5:67:02:2c:2c:ad:1f:ac:d9:97:1f:f1:c2:e4:fb:
         5a:ad:0d:90:c2:ae:c9:af:30:02:24:cd:4c:1c:06:cf:0b:e2:
         6f:d9:ca:47:dc:5b:04:02:98:aa:14:6b:13:4e:6f:50:f0:4b:
         35:47:72:91:c8:d6:d7:f9:5a:0b:81:1d:af:a8:fb:fa:70:8d:
         b1:6a:4b:b4:88:ed:56:1c:ce:45:f6:49:2f:48:a9:b5:c0:5e:
         42:55:f2:b4:bf:86:35:90:88:8d:b3:82:ec:7d:a4:37:cf:aa:
         bf:81:90:f5:37:3f:f6:d8:6f:ba:47:bf:dd:5d:3f:d4:ad:e6:
         b6:a6:72:fd:f7:91:ba:55:e4:c2:08:74:a3:a8:68:67:02:8b:
         ba:38:84:93:22:d2:2f:95:28:0a:c0:24:7c:cc:15:5b:ea:c2:
         f1:de:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org