Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e33302e302f32342d3234203d3e203238303937.roa
File:                     3138362e332e33302e302f32342d3234203d3e203238303937.roa (raw, json)
Hash identifier:          DaJZXMgwntGIW4tL9ppRbThhVraixlifzvvECdLF+sg=
Subject key identifier:   44:71:79:D0:B5:D6:3E:D6:22:4C:F0:E4:4A:F0:AE:CC:BE:6D:83:6B
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       40A0B12B36DE085D554E4327DE4D4C8E46D12BB6
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e33302e302f32342d3234203d3e203238303937.roa
Signing time:             Tue 05 Mar 2024 18:10:34 +0000
ROA not before:           Tue 05 Mar 2024 18:05:34 +0000
ROA not after:            Tue 04 Mar 2025 18:10:34 +0000
asID:                     28097
IP address blocks:        186.3.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a0:b1:2b:36:de:08:5d:55:4e:43:27:de:4d:4c:8e:46:d1:2b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:34 2024 GMT
            Not After : Mar  4 18:10:34 2025 GMT
        Subject: CN=447179D0B5D63ED6224CF0E44AF0AECCBE6D836B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:39:f7:85:87:2d:8f:49:5f:bc:76:f5:8e:
                    98:88:9d:7b:ac:51:8d:da:3d:71:77:c0:2e:f6:62:
                    a2:1e:54:9c:bd:0d:77:89:10:af:c6:16:4f:5b:12:
                    c4:ac:79:a5:90:6a:65:93:ab:4c:72:20:52:6a:7d:
                    45:43:b4:96:30:6e:f3:aa:3a:0b:f4:83:2e:89:47:
                    c2:8a:3d:d4:2d:54:2f:45:c1:30:6c:e3:b9:85:7c:
                    6f:9a:ca:60:b5:72:fe:75:33:31:db:d4:24:36:c6:
                    50:16:b1:21:00:2a:9d:5d:ad:44:b7:65:57:c2:e6:
                    19:26:ef:fa:42:27:16:34:0b:f6:4e:00:96:30:09:
                    35:87:95:79:24:e4:d2:8e:04:6d:c7:bb:56:83:ec:
                    55:ed:41:c8:ab:0c:ae:7a:f3:4d:e8:55:f8:18:ca:
                    dd:3c:af:02:63:7b:1f:08:d5:f9:56:69:33:71:05:
                    0b:c4:7b:95:bb:65:0c:36:11:eb:95:d8:4c:90:7f:
                    41:41:09:c8:d9:f6:7a:f5:ba:4d:fb:fe:18:ab:0c:
                    0a:82:ab:5b:25:fb:88:c7:73:e4:e6:28:b5:c1:23:
                    85:0e:68:98:b1:2f:93:e2:05:61:e8:15:1e:ed:f5:
                    1b:41:f9:51:30:f1:cc:a6:7d:72:2c:3e:0f:54:8d:
                    25:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:71:79:D0:B5:D6:3E:D6:22:4C:F0:E4:4A:F0:AE:CC:BE:6D:83:6B
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e33302e302f32342d3234203d3e203238303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.3.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:e3:2a:32:f3:33:a5:e2:f3:51:46:a2:0b:35:f7:57:a0:14:
         20:d0:ab:82:37:fe:e1:04:01:71:94:42:b1:b0:bb:0c:1d:f9:
         d8:fa:16:2d:f7:59:26:d5:a7:4f:bb:0f:27:48:59:90:9c:b3:
         67:5f:83:73:1e:a7:ed:00:df:f2:e3:b2:97:f2:98:48:f8:7e:
         cb:43:51:75:69:85:21:c0:d2:f8:c5:f1:9c:6d:95:22:6d:36:
         3a:71:16:ef:4c:ef:aa:b8:40:58:f4:e7:5c:10:0f:0d:a1:bf:
         ea:1f:e4:8d:87:cb:a0:ee:51:0a:4d:5a:dc:42:bb:70:30:f5:
         00:3a:bd:ab:ad:79:3b:25:8a:aa:7a:d3:40:34:a4:58:00:c6:
         db:50:c6:80:c2:b9:52:b6:45:28:f3:4a:14:e3:c4:d0:4c:e0:
         7a:3a:4a:b4:5f:83:64:d0:72:91:05:fa:dd:f4:d6:c6:ce:28:
         7d:ff:72:de:5d:8e:52:19:9f:fe:d4:1f:7a:65:9b:bc:fa:a3:
         b8:2a:bc:4e:c5:3e:1b:f9:21:7e:5d:db:92:4d:7b:cd:cc:9f:
         00:3a:24:f1:9e:13:a9:e8:60:46:6e:64:19:e9:0d:52:06:be:
         53:d3:58:65:e5:69:43:f8:a5:90:7e:f6:22:b1:7e:73:d1:68:
         68:94:4d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:32 2024 by rpki-client on console-ams.rpki-client.org