Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3138392e3132372e3133362e302f32342d3234203d3e20323730303038.roa
File:                     3138392e3132372e3133362e302f32342d3234203d3e20323730303038.roa (raw, json)
Hash identifier:          CwafUqImHgG5aaFNUxz88c5plElA5Zre2YESGlmBowk=
Subject key identifier:   B5:33:2F:74:F8:F3:4F:A4:71:27:B5:AB:54:B0:B5:FA:36:C3:12:59
Certificate issuer:       /CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
Certificate serial:       7818EAFB408C19BEA3063C2ADEECD3A09E90EE24
Authority key identifier: 0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3138392e3132372e3133362e302f32342d3234203d3e20323730303038.roa
Signing time:             Thu 07 Mar 2024 20:05:00 +0000
ROA not before:           Thu 07 Mar 2024 20:00:00 +0000
ROA not after:            Thu 06 Mar 2025 20:05:00 +0000
asID:                     270008
IP address blocks:        189.127.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:18:ea:fb:40:8c:19:be:a3:06:3c:2a:de:ec:d3:a0:9e:90:ee:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
        Validity
            Not Before: Mar  7 20:00:00 2024 GMT
            Not After : Mar  6 20:05:00 2025 GMT
        Subject: CN=B5332F74F8F34FA47127B5AB54B0B5FA36C31259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:b4:31:02:23:9a:bf:eb:b8:43:f6:83:29:
                    88:af:b9:b0:63:7b:8d:24:47:bf:44:5d:41:3c:87:
                    27:96:8b:15:2b:cc:3c:05:bb:14:ff:1d:29:29:7d:
                    df:f2:11:01:f0:49:4d:47:00:bc:24:1a:d5:92:45:
                    e5:9e:66:ee:34:34:a9:d3:02:bd:df:64:6b:26:14:
                    1e:33:df:8b:32:0f:61:59:7b:63:10:e8:60:15:0a:
                    92:3f:76:63:be:69:b0:78:2a:ad:30:25:f9:e1:01:
                    55:64:02:79:6b:02:f0:e1:34:ea:c5:39:af:4b:3b:
                    6b:b3:83:d4:ac:aa:02:fc:a5:c6:1f:8a:42:1f:f7:
                    84:04:f0:70:75:d2:76:49:fb:09:f2:6e:89:b2:8e:
                    8a:d4:52:a2:d2:a7:8c:b9:1b:6a:f5:2f:71:cd:c2:
                    6b:fb:ba:82:ab:cf:75:76:8a:4c:c2:80:c0:60:82:
                    9f:3e:fc:aa:12:46:3e:74:12:c2:cc:40:6e:97:04:
                    67:f1:51:f3:2b:a9:8e:38:1b:da:f2:fd:c7:4a:3b:
                    0f:89:3a:20:7c:b6:8e:52:65:ab:e5:b6:55:45:ef:
                    20:8c:12:31:33:8c:cd:3f:80:f9:59:85:69:cb:5d:
                    ef:82:bd:d5:3e:1e:71:f6:88:ae:1d:e5:21:a6:01:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:33:2F:74:F8:F3:4F:A4:71:27:B5:AB:54:B0:B5:FA:36:C3:12:59
            X509v3 Authority Key Identifier:
                keyid:0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3138392e3132372e3133362e302f32342d3234203d3e20323730303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:ce:23:c7:49:30:fa:7a:c8:51:a6:5a:ed:59:00:bc:f6:ca:
         00:f1:01:5e:2c:13:3e:c1:cc:3c:38:b5:bb:76:c2:ad:fd:72:
         a4:fd:ab:43:ff:3b:ae:94:e6:6a:30:93:aa:22:99:1f:9a:84:
         7d:cb:a7:c4:3d:b8:4d:c2:98:57:c0:42:ea:0e:b0:0f:21:23:
         c8:71:b8:2f:43:74:d4:a5:3e:70:68:91:af:d2:5e:a5:5e:a2:
         60:50:7f:d9:49:91:dd:21:cd:de:4e:b7:f6:a4:92:2d:4c:53:
         5d:5a:4d:30:99:eb:09:45:f1:53:49:6e:f7:63:18:af:37:70:
         e4:46:a8:a7:05:b4:1b:63:8e:4d:3a:ab:2e:d4:75:5b:57:3e:
         27:c2:01:53:b9:15:aa:14:7b:62:63:50:eb:f3:a0:d5:78:30:
         e9:f0:a5:68:63:8d:03:6d:95:e8:7f:1a:12:e4:76:df:ac:c1:
         11:f7:2c:12:19:65:9a:b7:a1:12:5a:20:ee:39:90:d1:f7:67:
         f4:68:83:e0:9b:04:8d:77:5a:c9:9c:5f:55:72:ba:15:03:a9:
         b6:d3:e3:3b:80:43:38:fd:0e:ad:43:55:4e:4b:a9:56:ff:41:
         21:49:c1:50:c8:4d:b6:2f:ee:55:9a:8c:38:49:31:7c:2f:1d:
         c7:0d:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org