Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e36352e3132382e302f31372d3234203d3e2037343138.roa
File:                     3138362e36352e3132382e302f31372d3234203d3e2037343138.roa (raw, json)
Hash identifier:          M1jj+CsBbeXGaXLdqOZh60TA9DYlMkZVmH3z6MpWDX8=
Subject key identifier:   06:65:4F:AE:89:24:F4:39:9E:32:5E:82:35:59:15:6F:DA:FB:55:0F
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       42CC84C3B5AB8C9A51957C21DBDF55BAB1380B31
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e36352e3132382e302f31372d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:44:52 +0000
ROA not before:           Tue 05 Mar 2024 17:39:52 +0000
ROA not after:            Tue 04 Mar 2025 17:44:52 +0000
asID:                     7418
IP address blocks:        186.65.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cc:84:c3:b5:ab:8c:9a:51:95:7c:21:db:df:55:ba:b1:38:0b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:52 2024 GMT
            Not After : Mar  4 17:44:52 2025 GMT
        Subject: CN=06654FAE8924F4399E325E823559156FDAFB550F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:21:57:ce:b6:c7:0f:a7:75:2d:25:00:01:
                    55:b9:eb:c6:33:f7:33:44:a4:c7:4a:71:e4:72:16:
                    44:79:a4:e9:b5:22:ab:41:55:b4:2b:5d:21:fa:a4:
                    41:12:c1:87:f4:7a:ab:b1:48:71:a5:e6:a0:01:d3:
                    fd:bc:62:41:a4:dc:00:5b:ca:14:30:25:93:2d:3d:
                    f5:16:e4:e5:4b:a0:fc:ca:be:2e:9b:22:24:97:51:
                    aa:69:7b:17:82:58:1b:e4:cd:2f:bb:d2:5f:02:5f:
                    af:43:29:5b:80:9f:06:ce:a1:67:fb:a7:d1:6d:c5:
                    d8:9e:bd:6c:84:f0:33:00:38:cb:39:02:98:c8:de:
                    6e:06:da:2e:17:21:08:ed:84:c6:ec:6e:2c:ee:dc:
                    b9:90:3e:fc:7b:4d:66:ce:42:26:2a:73:e1:4e:7e:
                    f3:1d:d7:b4:ef:d3:13:ae:0d:5d:4e:69:75:d3:96:
                    c8:c3:cc:6b:cd:8f:0f:64:a7:19:4e:85:23:d2:e5:
                    0c:de:7f:a3:76:b8:8d:4d:47:7a:0a:68:d0:0c:7a:
                    8a:fa:95:d5:34:e7:6a:1a:f8:dc:c8:e1:5b:9e:3d:
                    93:d8:67:1c:5f:5d:9a:4e:3e:9c:c8:4f:11:6f:1d:
                    73:9c:c1:07:ab:38:e4:fd:8e:e6:68:af:6d:72:48:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:65:4F:AE:89:24:F4:39:9E:32:5E:82:35:59:15:6F:DA:FB:55:0F
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e36352e3132382e302f31372d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         49:91:fa:76:76:84:fc:6d:b6:43:d6:9b:5a:9d:c4:c7:f4:b3:
         fd:af:5f:1b:5e:42:10:bb:00:d2:8b:2e:9b:18:df:f6:07:87:
         d2:4c:e5:53:d3:71:52:63:2c:95:88:7d:f4:1d:b4:b5:e7:9f:
         91:06:db:09:ea:f2:f9:2c:5b:e0:df:2b:02:e3:d7:cc:f4:6e:
         ea:17:62:97:f8:1e:67:29:db:f5:c2:85:52:20:e5:0f:e6:ce:
         99:e6:d2:22:67:a8:52:dc:e5:e5:71:26:5f:b3:42:17:a9:71:
         ba:97:b8:ff:64:60:48:c1:fe:9d:27:70:8b:24:e0:e6:56:f5:
         22:2a:3f:32:e6:57:37:e9:e1:20:6d:5c:63:29:43:c4:44:7e:
         3d:ce:29:97:a8:a9:e8:8b:4c:1e:53:09:e5:a2:3b:c4:83:df:
         dd:2d:d4:59:19:82:07:e0:1a:31:50:50:93:8f:93:ba:c5:73:
         03:12:4b:40:84:8a:24:b0:4e:3b:3e:dc:e4:38:02:f5:0b:66:
         c5:31:52:28:56:63:9c:89:d3:96:f5:ab:8e:cf:72:6d:38:0e:
         f4:3d:28:28:5c:09:f0:73:76:43:f1:28:3e:b1:4a:05:ff:7a:
         76:b1:4e:bd:3e:ed:f0:73:0e:4e:93:cb:2c:cf:fe:e3:39:e0:
         9b:6e:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org