Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e37382e302e302f31352d3234203d3e2037343138.roa
File:                     3138362e37382e302e302f31352d3234203d3e2037343138.roa (raw, json)
Hash identifier:          9Cg0/8QJZV1+jnd6fEi1+Dk9F2FNOow9p0bpgsYYQDw=
Subject key identifier:   2A:2C:BA:D0:71:AD:90:BA:0F:42:0D:F8:A7:8F:4A:AB:C0:FC:C2:AC
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       1CD1B5399520C537CF5E0833B7CE1FDE6BDCBB0D
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e37382e302e302f31352d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:16 +0000
ROA not before:           Tue 05 Mar 2024 17:47:16 +0000
ROA not after:            Tue 04 Mar 2025 17:52:16 +0000
asID:                     7418
IP address blocks:        186.78.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d1:b5:39:95:20:c5:37:cf:5e:08:33:b7:ce:1f:de:6b:dc:bb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:16 2024 GMT
            Not After : Mar  4 17:52:16 2025 GMT
        Subject: CN=2A2CBAD071AD90BA0F420DF8A78F4AABC0FCC2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:9b:c3:da:80:67:0c:85:ff:e2:5c:eb:6e:
                    a4:7b:7c:2a:b8:f6:94:a2:d9:33:70:f1:2d:d1:a4:
                    9e:f2:da:d0:34:dc:a3:56:44:01:ec:f2:bc:eb:3a:
                    9e:d0:ee:48:83:7f:ad:12:9b:d6:8d:e1:49:66:4d:
                    03:e0:8f:fe:8b:68:9f:a5:de:d0:e1:44:6a:d8:7b:
                    c5:88:64:48:32:5e:cb:ed:2b:22:f3:18:95:2e:1b:
                    f9:fc:9e:86:92:0c:39:b1:d9:92:ee:2d:53:06:eb:
                    35:ba:08:7d:84:c8:92:19:49:57:12:12:2d:7a:77:
                    39:05:4e:72:6b:ec:ff:77:f8:53:f3:f8:ea:a3:b0:
                    35:01:eb:99:ee:b5:03:33:0b:a3:21:2a:28:a2:f5:
                    6d:ab:27:a3:ea:20:d2:bf:b2:27:e2:9f:5e:af:fa:
                    03:f5:c2:34:bc:ea:4e:bd:92:bf:f3:33:c2:78:0a:
                    c6:9a:fd:54:83:29:7d:c3:bd:97:a6:8a:20:9f:73:
                    5f:62:84:74:05:1a:ee:f3:bb:e8:e3:4f:7d:b8:58:
                    df:a2:06:dc:72:0d:0c:0a:f4:a4:a7:e1:59:0b:20:
                    98:48:8e:de:c0:9d:ec:d3:28:7e:71:ed:75:f4:2f:
                    93:ea:43:d8:96:b1:eb:6b:14:61:85:47:0b:9c:2b:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2C:BA:D0:71:AD:90:BA:0F:42:0D:F8:A7:8F:4A:AB:C0:FC:C2:AC
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e37382e302e302f31352d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.78.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         66:60:a1:30:92:65:5e:31:5b:03:37:19:08:cf:ce:4e:e4:a3:
         9e:09:8a:d2:9a:6c:6d:b1:77:9b:88:13:0b:23:58:20:e2:5b:
         0e:90:44:e7:d3:36:8f:bd:71:6d:db:f5:00:21:26:5b:96:60:
         92:3d:86:31:56:9f:59:7d:63:6c:4d:87:2b:a2:d8:01:ce:8c:
         73:b0:b8:89:7a:e8:66:1a:bd:b8:27:64:c5:84:5b:86:56:92:
         47:19:aa:a3:28:59:0e:04:79:b0:74:aa:d5:47:da:65:07:50:
         8c:41:64:f0:86:07:2f:0e:c8:35:33:cf:9f:c5:b7:a1:71:49:
         60:f2:2d:5e:b5:03:f2:ce:51:8c:f2:b2:ae:0f:7a:ce:f9:82:
         cc:5f:ef:96:77:27:3f:e8:5c:9f:44:84:2c:4a:94:33:d2:dc:
         f7:34:9e:48:c8:3a:50:99:e0:f7:aa:7c:82:6f:f8:4d:4a:8f:
         4e:b5:e9:60:06:0f:cc:fa:3d:51:fb:48:9c:56:a8:5b:f0:33:
         93:41:a4:fa:74:41:ff:0e:49:fb:eb:7f:43:00:ac:92:60:d3:
         d6:3e:08:98:d2:8c:46:ff:1d:4a:ca:a1:9b:0a:df:a8:f2:be:
         40:81:60:5f:ed:9a:26:5e:86:0b:5f:21:6a:5e:b7:f8:ce:01:
         47:0b:c9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org