Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e362e302f32342d3234203d3e20323634363638.roa
File:                     3138362e332e362e302f32342d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          BBgQ9izDd+MGwteuhyTLnXMtV4U5dpeM3AwxjVjPcKQ=
Subject key identifier:   D3:15:BE:10:E7:02:45:CE:51:1A:BC:F7:05:08:18:EC:E6:9E:E7:28
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       15CB9EB3B39F6360C25A1110A756615E8FFAB1C9
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e362e302f32342d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:10:23 +0000
ROA not before:           Tue 05 Mar 2024 18:05:23 +0000
ROA not after:            Tue 04 Mar 2025 18:10:23 +0000
asID:                     264668
IP address blocks:        186.3.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cb:9e:b3:b3:9f:63:60:c2:5a:11:10:a7:56:61:5e:8f:fa:b1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:23 2024 GMT
            Not After : Mar  4 18:10:23 2025 GMT
        Subject: CN=D315BE10E70245CE511ABCF7050818ECE69EE728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:50:a3:ba:00:80:d9:a4:de:7a:f5:31:be:
                    87:fd:10:6d:08:8c:52:d4:ff:3f:a3:69:5a:6b:07:
                    aa:4a:1f:f0:30:1c:67:41:22:48:77:44:3b:8a:39:
                    b2:56:72:da:4a:12:57:e8:d3:5f:27:69:2f:cc:44:
                    73:54:33:59:41:7f:d2:08:f6:eb:60:9a:bb:29:e8:
                    4d:22:37:39:be:bc:54:fd:59:2e:a0:71:17:ca:c8:
                    2d:b0:63:2b:30:7a:d7:42:3f:c0:34:d1:ed:8b:2e:
                    e7:61:0b:48:35:f3:ba:50:64:6c:b0:db:b6:4e:07:
                    6c:3b:63:37:98:0b:04:e5:c9:da:67:c0:f2:ed:e8:
                    3d:11:1a:b3:33:97:21:fb:72:3e:ce:4f:85:e3:53:
                    ba:20:19:6d:58:ef:e5:0d:69:f8:0f:c6:75:6c:86:
                    02:4f:0b:90:6d:b8:80:d1:8a:a6:2c:ee:18:d5:aa:
                    9f:c2:21:62:46:3c:10:a6:0c:58:7b:bc:8a:b4:6f:
                    ef:da:4e:33:74:2f:3d:03:94:8c:34:0f:3d:98:f3:
                    15:e7:e6:67:56:ef:e2:49:51:cb:33:bf:65:11:ef:
                    e5:43:15:66:75:62:8b:bf:73:32:a0:1c:94:0b:94:
                    4f:69:e1:2f:c9:f3:11:69:cd:83:7a:11:69:9a:9d:
                    16:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:15:BE:10:E7:02:45:CE:51:1A:BC:F7:05:08:18:EC:E6:9E:E7:28
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e362e302f32342d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.3.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:8a:e7:61:f9:97:99:c2:48:dd:a5:a0:31:d6:af:b6:e4:
         52:6f:7c:f9:fe:26:6e:5e:e2:03:19:41:12:0e:00:6f:9d:61:
         98:e9:25:b3:12:68:fc:d1:df:52:72:a1:d9:6b:ad:bd:54:c4:
         d8:42:2e:f8:db:77:a8:0c:08:e3:51:06:c1:3f:37:90:96:6d:
         8e:19:8f:21:40:f3:56:5b:e3:df:97:ab:54:2b:4a:1b:8a:8e:
         c8:4d:fb:6a:92:60:a2:cb:cd:70:80:d0:2f:ad:d5:e1:ef:91:
         39:ed:ba:d6:49:a9:4d:9e:88:21:c7:4d:79:7b:ed:23:53:6d:
         c0:f5:62:11:f6:3e:aa:be:fa:40:47:6f:5c:d7:29:d1:27:ba:
         5f:cd:c6:8b:a8:b5:33:20:0d:3b:91:2d:8e:86:b7:19:aa:83:
         e4:9e:e5:56:09:31:84:41:cd:b5:d0:a6:82:92:8d:c6:ac:65:
         7a:f6:49:de:09:b6:9b:f3:31:41:61:3e:32:8f:a8:16:fe:b1:
         33:01:0a:1e:b9:47:e4:10:78:bb:a8:29:b5:da:09:59:1c:6b:
         90:da:08:b2:bd:25:d4:82:9c:c8:5a:3c:f9:af:9a:a2:87:e5:
         f5:53:1d:ac:ae:18:3f:04:a9:bc:e2:4b:79:78:d6:64:9d:22:
         ad:19:e7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:47 2024 by rpki-client on console-fra.rpki-client.org