Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/3138362e36352e38342e302f32322d3234203d3e203532333830.roa
File:                     3138362e36352e38342e302f32322d3234203d3e203532333830.roa (raw, json)
Hash identifier:          NaJtmjJKGN10Sld/oNNhmYCWqSueozYC4eo3qu3XPHA=
Subject key identifier:   9E:53:11:5D:92:42:20:D5:8C:2F:72:C8:54:11:5D:9E:2D:46:D7:2F
Certificate issuer:       /CN=98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31
Certificate serial:       56C7C9446001E439E57C1F653FC2EDDB9FDDD0CA
Authority key identifier: 98:B2:2D:5F:5F:19:79:94:0E:0B:2C:1F:A5:A6:6A:E7:28:1B:FB:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/3138362e36352e38342e302f32322d3234203d3e203532333830.roa
Signing time:             Tue 05 Mar 2024 18:07:18 +0000
ROA not before:           Tue 05 Mar 2024 18:02:18 +0000
ROA not after:            Tue 04 Mar 2025 18:07:18 +0000
asID:                     52380
IP address blocks:        186.65.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c7:c9:44:60:01:e4:39:e5:7c:1f:65:3f:c2:ed:db:9f:dd:d0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31
        Validity
            Not Before: Mar  5 18:02:18 2024 GMT
            Not After : Mar  4 18:07:18 2025 GMT
        Subject: CN=9E53115D924220D58C2F72C854115D9E2D46D72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:f5:d1:f0:97:c2:c7:c6:b1:10:e0:f6:93:
                    31:fb:2a:f8:08:79:3d:35:cb:da:31:e5:cf:07:46:
                    dd:8f:cb:82:fc:5d:2b:ce:86:0f:a3:9d:ff:5a:7e:
                    6a:1c:9c:0b:ce:d5:f4:58:a5:a6:8f:5a:7a:53:4a:
                    ff:d9:34:c9:54:a1:26:74:f2:f3:92:76:35:fa:bc:
                    ba:10:45:b0:5b:99:b9:3a:d5:bb:52:8a:3f:02:ab:
                    31:57:01:d9:57:cb:7a:bd:c5:66:c0:7e:51:86:90:
                    16:1b:fb:f1:06:df:58:44:3c:e2:41:83:36:d2:6c:
                    60:13:fd:9c:4f:03:b7:4b:21:f1:2f:5f:d1:b3:78:
                    dd:aa:03:20:ec:ae:b8:36:9d:36:e5:d9:06:23:47:
                    27:da:a9:f0:48:52:d8:6f:69:d7:6e:63:94:f5:06:
                    c0:5b:0b:19:06:63:f6:6a:ba:d5:c8:be:ef:52:6c:
                    97:9d:e4:40:65:1c:a1:ac:46:f7:35:78:e7:53:8b:
                    bb:29:73:86:6e:95:8e:a3:87:f2:88:66:78:a5:eb:
                    ff:c9:d8:e9:fd:58:38:50:76:b2:b9:94:94:f0:52:
                    a9:cf:91:0f:4d:49:71:57:3f:e3:bd:54:fb:54:c4:
                    27:7f:21:e1:57:af:59:a2:1a:4f:7d:30:5f:7b:41:
                    64:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:53:11:5D:92:42:20:D5:8C:2F:72:C8:54:11:5D:9E:2D:46:D7:2F
            X509v3 Authority Key Identifier:
                keyid:98:B2:2D:5F:5F:19:79:94:0E:0B:2C:1F:A5:A6:6A:E7:28:1B:FB:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/3138362e36352e38342e302f32322d3234203d3e203532333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:7a:99:ee:63:ae:00:a2:77:84:e4:01:e5:d0:84:75:cf:e8:
         74:4f:8f:32:3c:1a:1c:bf:95:a4:b4:d5:4e:3e:8f:64:d8:63:
         e4:0a:d7:1c:fc:d4:3a:87:e8:28:f0:23:f4:7b:76:f9:56:9e:
         ca:a4:15:cf:35:7a:d5:cd:dd:82:00:d0:16:e1:b1:eb:67:ae:
         cd:2a:55:43:3f:5e:b1:68:d2:52:d3:58:14:c9:61:f0:6a:3b:
         f7:c3:5d:c4:25:4b:65:81:bf:33:3f:81:4c:84:62:69:74:a3:
         8a:3f:01:8c:ca:7c:c3:7c:a6:51:95:1b:4c:e0:cb:63:e0:8f:
         e6:d5:e1:5b:46:6c:41:ea:27:6b:8e:5d:c6:b9:59:ec:af:87:
         83:3f:80:82:70:f9:c6:9c:b0:15:9b:24:2a:fd:af:0c:2a:ca:
         7d:46:dc:9f:8f:1c:42:3a:62:42:74:72:1a:59:62:6c:27:d0:
         11:60:64:6b:c3:7a:f7:65:e0:56:06:c3:02:06:03:7d:88:af:
         9c:5e:01:80:cb:a2:c2:22:7f:ca:72:30:d3:4c:f4:d9:4d:c7:
         37:9e:90:c5:53:18:7d:6a:ba:95:47:c5:50:2c:ea:d9:0c:84:
         03:51:fa:0a:c3:1e:5c:73:67:1a:b6:3f:cf:e4:bd:c5:9d:dc:
         41:0a:98:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:20 2024 by rpki-client on console-fra.rpki-client.org