Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e31302e302f32332d3234203d3e203634313130.roa
File:                     3138362e3130312e31302e302f32332d3234203d3e203634313130.roa (raw, json)
Hash identifier:          DXhamKBA+ybqFgcap1vuK+d6MVPWM3c9gS5aWzigEtw=
Subject key identifier:   3A:B9:70:4C:91:EA:4F:7C:3E:B8:EC:18:25:DA:D3:FB:99:E6:DC:85
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       2AB45EE4463897064251879146A4FDD15A14413C
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e31302e302f32332d3234203d3e203634313130.roa
Signing time:             Tue 05 Mar 2024 18:10:35 +0000
ROA not before:           Tue 05 Mar 2024 18:05:35 +0000
ROA not after:            Tue 04 Mar 2025 18:10:35 +0000
asID:                     64110
IP address blocks:        186.101.10.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b4:5e:e4:46:38:97:06:42:51:87:91:46:a4:fd:d1:5a:14:41:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:35 2024 GMT
            Not After : Mar  4 18:10:35 2025 GMT
        Subject: CN=3AB9704C91EA4F7C3EB8EC1825DAD3FB99E6DC85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:15:ee:2c:c3:6f:af:34:d7:66:ba:2a:6f:
                    fc:16:26:3a:d8:06:62:21:92:bc:41:df:e4:e0:20:
                    f3:bd:29:76:26:f6:4e:62:9c:19:16:b7:88:c5:36:
                    88:73:d1:00:2c:d2:d7:48:4c:53:bb:4f:c1:56:64:
                    96:bc:88:ae:8e:fd:90:09:67:03:03:f7:1e:45:9d:
                    28:d4:d9:9e:53:d6:c0:e5:83:87:33:03:6d:87:4b:
                    b6:0e:9b:77:34:36:ba:e1:2c:9c:78:9a:e5:0b:80:
                    2b:23:ce:55:0f:80:03:e8:ad:07:6a:96:f2:c4:4a:
                    0f:df:a7:80:86:55:1f:0a:60:96:18:ad:63:e0:bb:
                    ab:3c:e3:a6:34:ff:c9:57:52:86:ce:c9:5d:ec:15:
                    7a:10:b9:75:df:ad:79:cc:e7:06:56:6b:44:0a:de:
                    3b:1b:a8:24:3e:49:f4:6a:ad:66:76:58:3d:31:86:
                    3d:c8:76:a4:c7:ca:8d:98:ab:74:1b:0b:2f:22:8a:
                    d8:36:d9:5a:a0:df:f0:48:41:71:7f:a7:55:4c:d1:
                    c0:96:36:1c:66:38:09:6a:a8:7b:d1:b0:e7:e4:bf:
                    62:02:2f:f1:74:5a:ca:06:30:7d:28:ab:9a:8f:04:
                    6b:96:ca:9b:6f:b4:50:f4:b5:9c:a1:ef:f6:f9:3e:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B9:70:4C:91:EA:4F:7C:3E:B8:EC:18:25:DA:D3:FB:99:E6:DC:85
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e31302e302f32332d3234203d3e203634313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.101.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:a7:78:fd:42:d5:87:99:7c:4d:77:e8:46:24:b8:71:ea:5e:
         07:a2:fd:a0:61:fd:17:21:7e:b1:10:17:c2:cb:87:41:78:d1:
         68:ff:ee:f9:56:57:ce:9b:80:67:03:12:91:21:f8:08:ea:0a:
         54:a6:3e:08:4c:10:ac:5f:db:e3:93:4c:f1:de:32:a9:6c:50:
         04:ed:8b:69:d3:8b:82:1e:00:b8:77:b7:79:af:40:35:75:3c:
         ae:1f:18:d6:a3:ef:bb:c9:b4:27:b0:25:39:d2:81:0a:aa:ce:
         77:dc:51:c2:5b:6a:74:63:c4:7c:4f:bc:44:a3:90:dd:19:33:
         0c:fb:6d:9d:05:5f:93:db:98:63:be:3b:36:de:e6:1c:2b:7e:
         29:a3:81:9e:51:aa:05:7c:60:13:23:ea:ca:3a:df:f5:8d:3d:
         33:3c:c3:3a:ef:e2:3b:15:57:2f:43:ce:5c:e5:f0:b1:7e:6e:
         42:25:22:35:d2:26:5a:4c:70:7a:c7:89:cb:e2:6c:0f:17:54:
         b8:ee:31:ae:22:ae:ee:7e:1b:ff:dc:6c:1d:5d:0e:51:53:6d:
         10:a7:c7:ea:26:17:8e:45:10:1c:65:85:93:3c:5f:18:bf:57:
         43:c1:53:1b:39:41:76:fb:d3:ef:ca:d2:85:5f:62:2c:ff:ee:
         6a:59:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:01:04 2024 by rpki-client on console-ams.rpki-client.org