Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e322e3232342e302f32302d3234203d3e203233323031.roa
File:                     3138362e322e3232342e302f32302d3234203d3e203233323031.roa (raw, json)
Hash identifier:          +iA5dkmtfQmWyS/96y5tICtLSD4qaDT+HpVE4EcGRU8=
Subject key identifier:   5E:75:A9:32:F2:E4:07:5C:0B:4D:DC:F6:9D:71:F5:4E:41:D1:AB:A8
Certificate issuer:       /CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
Certificate serial:       29A9DC53DFED80848C67CD3726CCA245C6A84029
Authority key identifier: 98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e322e3232342e302f32302d3234203d3e203233323031.roa
Signing time:             Tue 05 Mar 2024 18:22:53 +0000
ROA not before:           Tue 05 Mar 2024 18:17:53 +0000
ROA not after:            Tue 04 Mar 2025 18:22:53 +0000
asID:                     23201
IP address blocks:        186.2.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a9:dc:53:df:ed:80:84:8c:67:cd:37:26:cc:a2:45:c6:a8:40:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9857400AE42A0A22A3E618304A1502E0E0C01DCA
        Validity
            Not Before: Mar  5 18:17:53 2024 GMT
            Not After : Mar  4 18:22:53 2025 GMT
        Subject: CN=5E75A932F2E4075C0B4DDCF69D71F54E41D1ABA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:93:5b:60:c0:79:3b:6c:90:22:0e:73:35:
                    8a:2c:62:6f:f4:1b:90:78:9c:1d:1f:80:11:d3:8f:
                    b1:38:80:48:88:48:5b:f8:41:e3:2d:6c:3f:c1:fd:
                    1f:62:07:ce:37:8c:9b:63:d3:d1:b9:05:6f:53:04:
                    f6:45:99:99:de:9d:0f:79:3b:12:bf:91:21:f7:1f:
                    b0:13:f0:b6:b3:91:19:86:ea:cb:34:d9:f4:7c:67:
                    e5:7e:08:66:b2:ff:e0:39:79:3c:c6:c3:2e:b2:d6:
                    87:ed:b1:92:96:d4:ec:37:4f:7b:0e:3e:3d:b5:b8:
                    33:4e:19:8b:a8:2a:91:dd:f4:00:b6:b5:ee:c7:96:
                    27:88:55:8d:82:35:13:a7:48:76:ac:81:3c:28:6e:
                    87:dd:64:e4:9a:20:ab:ec:d2:4e:84:8a:15:de:39:
                    dc:9e:51:46:50:59:4a:ce:dc:ae:75:3a:3b:97:9a:
                    8b:c6:5f:94:cf:73:00:18:37:31:b3:ee:88:c3:db:
                    03:4b:5d:64:5d:be:0b:20:7b:fd:db:30:0a:f7:1d:
                    4d:33:b2:51:4a:8e:8d:71:a5:77:1f:8a:9b:8f:6e:
                    9e:1a:2d:4e:7c:c3:5e:5b:71:25:ca:cb:6e:d9:a3:
                    16:30:de:35:d7:a6:e4:88:a1:7d:26:77:44:e5:79:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:75:A9:32:F2:E4:07:5C:0B:4D:DC:F6:9D:71:F5:4E:41:D1:AB:A8
            X509v3 Authority Key Identifier:
                keyid:98:57:40:0A:E4:2A:0A:22:A3:E6:18:30:4A:15:02:E0:E0:C0:1D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9857400AE42A0A22A3E618304A1502E0E0C01DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7B2A63D66F42CB6E50354A629BFB5A68A3FC6F96DC2A2043A751D3A9C9D4321/0/3138362e322e3232342e302f32302d3234203d3e203233323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:f5:50:ff:89:5d:58:d2:1a:59:a7:88:6e:33:82:5e:93:76:
         05:6b:17:7e:b0:5d:3c:91:48:65:c2:7b:73:fc:cd:3f:77:61:
         3e:e9:f6:05:c6:3e:38:bc:ad:a5:68:e4:7a:e0:55:49:28:2d:
         05:5a:e6:cd:f4:17:70:9e:ca:c9:b7:c6:91:63:f3:77:0c:dd:
         27:30:39:d1:93:db:65:84:e2:db:ff:e1:ba:8e:f1:31:d4:31:
         37:0e:e8:d6:95:98:8e:bc:f0:42:ad:70:69:56:cc:da:44:b7:
         e5:1f:01:b0:76:04:cd:ee:96:80:33:1a:43:8e:37:aa:b7:57:
         02:d7:5b:2a:35:99:25:0a:47:17:55:1d:04:8f:82:09:fb:8f:
         c5:b5:37:2b:b4:c6:6b:01:db:0e:df:58:0b:32:50:05:d6:06:
         33:76:d8:23:ce:1e:0e:f2:68:01:7b:3f:ec:4b:ef:0d:67:ca:
         ac:49:b5:fb:8a:78:87:2d:9a:e1:66:f5:59:12:c8:11:89:94:
         8a:06:ba:f0:a7:4a:dc:53:c1:01:80:6d:e8:1b:a8:d0:f6:9e:
         cd:0e:c8:54:3d:85:63:d6:30:8e:8a:ed:c5:5a:81:4b:53:e2:
         e1:ed:f2:21:67:7c:44:50:04:f1:64:be:14:e5:e2:e0:2a:e8:
         a6:76:8f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:55 2024 by rpki-client on console-ams.rpki-client.org