Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/3138362e3230392e3230382e302f32322d3234203d3e20323731373738.roa
File:                     3138362e3230392e3230382e302f32322d3234203d3e20323731373738.roa (raw, json)
Hash identifier:          2gRwsb9fkFo03knQsElMJhWoAappBzsoX+JT4wxqKYY=
Subject key identifier:   0E:06:19:A6:A3:04:F1:D0:EB:09:CC:68:07:CF:36:C0:70:D1:7D:15
Certificate issuer:       /CN=A7A60F15842EB5894656A90BB48FA1FF829B4CC7
Certificate serial:       14D61071C2859DE6A0327A36657BA8BDD1E52C1E
Authority key identifier: A7:A6:0F:15:84:2E:B5:89:46:56:A9:0B:B4:8F:A1:FF:82:9B:4C:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/3138362e3230392e3230382e302f32322d3234203d3e20323731373738.roa
Signing time:             Tue 05 Mar 2024 17:43:16 +0000
ROA not before:           Tue 05 Mar 2024 17:38:16 +0000
ROA not after:            Tue 04 Mar 2025 17:43:16 +0000
asID:                     271778
IP address blocks:        186.209.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d6:10:71:c2:85:9d:e6:a0:32:7a:36:65:7b:a8:bd:d1:e5:2c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7A60F15842EB5894656A90BB48FA1FF829B4CC7
        Validity
            Not Before: Mar  5 17:38:16 2024 GMT
            Not After : Mar  4 17:43:16 2025 GMT
        Subject: CN=0E0619A6A304F1D0EB09CC6807CF36C070D17D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:c5:81:69:aa:85:52:94:69:28:d3:19:82:
                    c3:e0:42:b7:6b:91:25:79:97:15:e3:ed:18:bb:b5:
                    3e:73:c1:b5:d1:ce:ea:e9:68:53:d4:fb:3b:2d:f3:
                    3b:e4:fa:2a:08:cf:aa:1d:08:03:3b:ce:46:78:31:
                    a8:01:88:54:6c:18:d8:86:b1:fd:71:b6:22:ff:bd:
                    7d:e5:ef:19:41:ef:f3:ba:6a:a9:62:dc:3e:ee:c9:
                    8d:3a:df:11:8d:49:f4:27:2f:24:01:51:d1:f2:45:
                    21:69:21:d8:8b:e2:02:88:08:64:94:3a:77:52:29:
                    f0:5d:74:6d:9e:17:0b:05:3b:30:a2:1c:fd:b4:52:
                    d4:62:e0:a1:c6:44:3a:98:49:36:54:94:35:ee:3e:
                    04:46:3e:bb:11:7b:dd:a9:92:bc:00:62:56:f1:6c:
                    9c:a9:9e:38:dc:83:eb:03:d7:35:22:3f:90:84:f5:
                    b7:db:3e:da:09:49:21:9e:aa:86:64:9b:32:ac:9e:
                    e7:5f:88:21:d1:80:67:a7:f0:64:d8:13:1b:84:c8:
                    52:c5:cc:d6:00:91:c5:af:b4:ac:50:0a:0e:fb:c5:
                    a2:12:30:8d:7a:25:d8:57:3d:aa:36:dd:de:bf:51:
                    33:c2:12:13:c0:a5:73:5c:51:a3:30:0e:b1:4b:98:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:06:19:A6:A3:04:F1:D0:EB:09:CC:68:07:CF:36:C0:70:D1:7D:15
            X509v3 Authority Key Identifier:
                keyid:A7:A6:0F:15:84:2E:B5:89:46:56:A9:0B:B4:8F:A1:FF:82:9B:4C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7A60F15842EB5894656A90BB48FA1FF829B4CC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8C4CB8C0265645ADC8A1E8FAA4F93069599E7280AB5E588CF80634D2D571AA7/0/3138362e3230392e3230382e302f32322d3234203d3e20323731373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:68:c9:34:d6:33:49:d5:0c:27:8c:68:68:02:63:35:bc:d9:
         13:3a:0f:0f:85:95:86:47:18:78:79:a2:30:71:ac:58:7c:92:
         99:ff:32:77:ab:08:3f:c9:42:0b:e0:29:16:50:2c:c1:63:7a:
         04:de:ed:66:5b:84:92:cb:74:b1:c7:d9:cf:a8:60:18:21:c7:
         ec:67:92:73:ff:93:9e:ca:83:85:bb:39:8b:1d:ae:10:a6:69:
         7b:72:f6:ab:07:69:3f:a0:5a:22:cd:6f:91:7f:02:8d:75:d7:
         98:8f:e9:1d:86:d9:d5:4b:b0:36:89:96:1f:5d:f4:31:da:4c:
         6b:50:4b:14:3f:72:d9:78:93:e7:9e:86:a4:80:ca:f9:32:6c:
         17:b0:d6:58:9e:50:0c:0b:00:06:80:1c:8a:33:05:f8:7f:cb:
         35:61:85:87:50:77:2d:73:c9:d3:28:f9:da:00:77:8d:0f:6f:
         07:5b:aa:8e:6f:13:be:5c:04:5a:3c:fd:9b:95:d8:09:0b:24:
         df:9a:7f:9d:0d:2e:f1:fc:2c:43:6b:cf:87:57:21:31:5f:b4:
         45:60:4d:9c:26:ee:d2:fa:8f:23:1f:fe:b3:c9:78:99:10:15:
         5b:d4:23:de:00:79:15:89:94:99:3b:74:c7:bd:44:99:bd:29:
         86:0f:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:02 2024 by rpki-client on console-ams.rpki-client.org