Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3138362e36372e302e302f31362d3234203d3e203237363531.roa
File:                     3138362e36372e302e302f31362d3234203d3e203237363531.roa (raw, json)
Hash identifier:          93HX7SLHAxHg0yxqrpIPHAbyW89KdU9lf5mPl+Qp28A=
Subject key identifier:   95:2F:10:6D:EF:6C:68:E4:AA:37:60:C5:9A:A0:6D:5C:3F:AB:E4:5C
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       117F58C8B9870B5BB383D9E3E8C7CC326C99CBF7
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3138362e36372e302e302f31362d3234203d3e203237363531.roa
Signing time:             Tue 05 Mar 2024 18:14:59 +0000
ROA not before:           Tue 05 Mar 2024 18:09:59 +0000
ROA not after:            Tue 04 Mar 2025 18:14:59 +0000
asID:                     27651
IP address blocks:        186.67.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7f:58:c8:b9:87:0b:5b:b3:83:d9:e3:e8:c7:cc:32:6c:99:cb:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:59 2024 GMT
            Not After : Mar  4 18:14:59 2025 GMT
        Subject: CN=952F106DEF6C68E4AA3760C59AA06D5C3FABE45C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:35:09:a4:55:d3:f0:3d:b8:e4:ba:e2:83:
                    b6:85:c4:85:5b:d5:bd:8b:82:d4:af:46:18:c2:f6:
                    01:fa:9b:66:e7:5c:a2:33:93:97:4a:be:8e:04:50:
                    c5:56:1f:e9:78:b2:50:63:c2:88:72:85:9e:b5:b7:
                    66:5e:0a:b2:14:bc:9b:a4:38:e3:41:be:0a:05:ce:
                    bc:d4:14:fb:4a:d2:9a:51:88:f1:20:c2:3f:25:80:
                    21:76:38:15:62:c5:98:f4:b1:b9:30:f1:b7:7e:be:
                    72:a8:f9:62:48:8e:c3:68:b3:42:5d:8c:32:c5:2b:
                    9a:a0:20:b0:95:95:72:a5:72:f7:8e:83:00:b2:3a:
                    b9:bf:49:16:13:66:17:df:b1:5a:e5:0a:57:8c:21:
                    12:fa:cb:cf:18:32:59:6f:11:3d:07:bb:29:68:4e:
                    7a:2a:91:69:60:75:e2:df:df:ad:52:d8:6f:09:c9:
                    92:f0:e0:aa:e3:46:54:28:96:43:81:bc:74:ca:0f:
                    bb:43:74:39:45:f7:1a:4e:ab:0c:05:9d:ec:31:0e:
                    88:9d:72:00:1e:5c:35:15:1a:15:62:96:31:6e:71:
                    19:e4:ff:c8:c0:21:3e:8f:de:ed:3f:e8:a7:29:12:
                    cc:0e:80:d6:39:83:64:a1:02:f1:ec:68:39:5a:65:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2F:10:6D:EF:6C:68:E4:AA:37:60:C5:9A:A0:6D:5C:3F:AB:E4:5C
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3138362e36372e302e302f31362d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.67.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:0a:42:62:61:2e:9d:8f:a8:cb:10:8c:0c:3e:3b:cd:64:b9:
         80:a4:72:81:f5:a8:68:6f:f9:5d:f1:66:84:e9:1a:7b:ac:ee:
         ac:84:35:94:e2:c0:02:67:d1:53:b6:14:7f:48:2e:a0:5d:30:
         05:57:ff:81:d1:d6:58:c4:fe:30:24:07:60:fc:7b:4f:5f:60:
         cf:a6:73:7b:a8:d0:bd:3e:c1:ba:07:09:01:5a:f7:bb:23:0d:
         db:a1:d8:ff:1f:7d:91:74:99:dc:53:d8:e6:97:95:8a:eb:ff:
         51:e2:6b:02:da:b1:65:05:6e:af:46:b5:8f:54:23:ea:a4:c2:
         34:66:92:66:90:cb:23:d9:94:cd:d8:2a:d1:07:53:9f:e9:35:
         91:39:e6:24:66:5d:8f:be:69:05:ae:f3:b8:43:65:82:9c:e4:
         a9:99:e2:23:32:92:7d:40:47:9d:a1:af:ae:9f:ac:6d:62:72:
         20:fa:02:19:f8:a6:de:db:14:9a:58:c6:af:fe:16:9c:fa:9f:
         07:1e:a4:b4:52:b1:6d:81:3f:0e:25:e0:8f:73:09:6c:8c:8b:
         50:e1:82:9b:3e:2d:a0:bc:c5:f2:56:90:ec:ec:64:c8:df:b7:
         70:2c:d8:0e:6f:b5:a2:87:82:e5:19:20:0d:9c:90:21:81:c9:
         c0:0e:6e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:05 2024 by rpki-client on console-fra.rpki-client.org