Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa
File:                     3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa (raw, json)
Hash identifier:          cZcyYdlU6p40X7wEE9BNNWSf6Pp+1XRzVeiM/LAH9hU=
Subject key identifier:   7E:A5:C1:85:D6:69:1C:03:80:E3:0D:24:7F:F4:34:36:5C:9F:74:A5
Certificate issuer:       /CN=89BE1B948EADFCFCFDF457A0A903F357865A2553
Certificate serial:       640DBF8C88DD9FA5604AFAE706DE4F3DE90123C3
Authority key identifier: 89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa
Signing time:             Tue 05 Mar 2024 18:19:41 +0000
ROA not before:           Tue 05 Mar 2024 18:14:41 +0000
ROA not after:            Tue 04 Mar 2025 18:19:41 +0000
asID:                     262207
IP address blocks:        186.64.104.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0d:bf:8c:88:dd:9f:a5:60:4a:fa:e7:06:de:4f:3d:e9:01:23:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89BE1B948EADFCFCFDF457A0A903F357865A2553
        Validity
            Not Before: Mar  5 18:14:41 2024 GMT
            Not After : Mar  4 18:19:41 2025 GMT
        Subject: CN=7EA5C185D6691C0380E30D247FF434365C9F74A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:bd:e0:6a:10:68:ad:50:f1:04:cd:12:b1:
                    25:0e:f0:d9:87:9a:e4:c7:26:95:cb:e6:48:b5:a9:
                    d3:8d:35:31:d3:80:79:db:ba:85:fa:e0:76:fe:6e:
                    9f:39:65:30:d7:ec:86:eb:50:6f:95:d3:c4:97:38:
                    41:4f:e3:7b:b2:ca:bc:c9:84:0e:97:0d:ae:ac:a0:
                    ee:a0:0a:13:da:4c:af:43:3d:a2:6e:13:34:5c:c3:
                    99:7d:e9:22:53:cc:32:e6:7d:62:92:9d:d5:99:8d:
                    0f:4c:df:6c:5e:98:45:74:98:34:30:df:5c:ec:92:
                    4d:f2:28:0a:6b:34:f3:e5:18:e0:38:d1:ee:57:8f:
                    c9:f1:e8:bc:41:e7:45:f1:e3:3e:52:b3:42:72:d7:
                    44:43:9f:2d:e4:8d:76:49:01:37:87:f9:ad:7d:b5:
                    9f:b0:9b:e1:40:0c:54:d3:cc:39:2c:b1:81:09:1b:
                    5f:a5:e5:51:b9:9a:14:f5:e5:08:e7:71:ed:93:0c:
                    d6:a1:6c:7b:93:a0:26:26:d6:d8:8c:ac:c6:b0:1a:
                    ea:cb:9f:2c:23:28:b8:55:6e:87:a0:98:8f:bf:6f:
                    10:50:57:61:a3:31:f7:dc:0a:6c:ff:7d:56:f8:ef:
                    91:9f:b0:8f:9c:25:e6:a5:67:98:4c:ee:5d:96:8c:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A5:C1:85:D6:69:1C:03:80:E3:0D:24:7F:F4:34:36:5C:9F:74:A5
            X509v3 Authority Key Identifier:
                keyid:89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.64.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:d1:ea:c2:ee:c4:a8:ca:4d:80:3d:b7:e9:20:25:2c:b6:18:
         a9:14:26:93:24:d8:d4:8b:a4:d3:be:f7:b8:5f:13:a5:4f:8e:
         11:53:fb:bf:a9:db:8f:79:d0:d2:3b:ed:4f:11:27:d3:67:80:
         e0:f5:85:9f:e3:d9:70:28:1f:37:d0:07:11:67:63:ef:ba:35:
         45:43:57:5e:0e:44:c9:32:61:c8:18:b0:29:80:5b:35:df:d8:
         0b:81:14:f1:12:fc:02:42:86:58:99:fe:5f:2a:51:b3:c9:de:
         ae:90:f3:f9:de:45:ff:7a:9a:b9:02:ba:8a:cc:c8:0c:16:72:
         70:c0:dd:54:10:99:fd:94:32:00:31:4f:e0:70:ac:40:f6:88:
         3f:17:19:1c:8d:cd:3f:a1:61:20:a4:5c:be:d0:9d:51:11:b1:
         fa:f1:3f:35:e3:4f:52:7e:a9:f1:85:37:a7:d3:67:aa:25:7d:
         40:3a:ab:aa:0e:c6:a3:b3:d7:94:64:fa:dc:36:c2:88:fb:d0:
         ef:d8:90:a2:8c:c8:0f:1b:28:ff:b6:c6:15:bc:fa:f0:11:37:
         f8:7a:bf:1c:15:7b:98:8a:10:83:ca:58:62:b6:30:81:ce:e6:
         96:96:73:39:8e:82:1b:85:dd:79:8f:a6:d7:f7:bc:9d:a8:8a:
         5e:d6:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org