Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e342e3132382e302f31372d3234203d3e203532323537.roa
File:                     3138362e342e3132382e302f31372d3234203d3e203532323537.roa (raw, json)
Hash identifier:          iz7hMqwn84Fa/5Rpgk2e9SFjNpZB6U4a6Bm9618Tn1I=
Subject key identifier:   A1:B6:4A:0B:AB:5F:4E:A5:DC:E4:4A:B8:9F:9B:81:4C:98:3F:55:94
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       507401ADF361BE9564367C261BC6AAA565D0074E
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e342e3132382e302f31372d3234203d3e203532323537.roa
Signing time:             Tue 05 Mar 2024 18:10:25 +0000
ROA not before:           Tue 05 Mar 2024 18:05:25 +0000
ROA not after:            Tue 04 Mar 2025 18:10:25 +0000
asID:                     52257
IP address blocks:        186.4.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:74:01:ad:f3:61:be:95:64:36:7c:26:1b:c6:aa:a5:65:d0:07:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:25 2024 GMT
            Not After : Mar  4 18:10:25 2025 GMT
        Subject: CN=A1B64A0BAB5F4EA5DCE44AB89F9B814C983F5594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:69:1b:97:de:83:5d:b5:17:0b:ba:d9:d7:
                    99:dd:cd:d7:db:c3:29:c0:89:68:84:81:da:db:c8:
                    19:7c:82:b3:11:96:4c:69:07:b4:8c:e2:02:17:b4:
                    db:dd:52:2f:7f:08:04:8a:79:f9:8d:7a:9a:fc:64:
                    19:70:87:81:53:cc:21:3d:88:cc:de:4a:c7:cf:47:
                    86:5f:1c:59:ec:88:e1:a1:6f:06:0c:1b:72:bf:7d:
                    3a:7d:60:60:0a:26:6d:2c:9a:72:72:45:58:e8:34:
                    47:73:4e:d8:b0:f8:fb:a5:58:7e:4a:c8:41:ac:d9:
                    25:e3:92:de:6b:4a:95:d5:83:4d:81:ce:64:ef:38:
                    2b:a1:d3:c7:fc:2c:cc:fd:c8:35:00:f4:c2:38:6f:
                    18:c5:6c:d5:b0:49:04:a0:aa:0b:ac:31:b1:78:c2:
                    9d:23:00:fe:17:31:3f:61:48:c3:10:42:42:3a:1b:
                    e4:df:69:bc:d1:1f:0b:80:6f:93:9a:17:72:44:99:
                    00:2a:67:25:97:03:8c:59:93:6c:44:0a:7c:92:ce:
                    25:3f:83:46:ac:07:df:e2:20:50:dc:78:45:d1:a8:
                    0f:f4:56:8c:83:e1:6e:d7:18:0b:26:68:81:b8:6e:
                    ce:b1:a4:e5:ea:14:26:3c:ea:23:9d:e8:fb:3c:80:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:4A:0B:AB:5F:4E:A5:DC:E4:4A:B8:9F:9B:81:4C:98:3F:55:94
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e342e3132382e302f31372d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.4.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:8e:67:7f:de:c2:83:7e:1a:8f:d1:d9:41:6c:48:9d:d2:
         a1:27:a5:39:7c:8a:2a:ab:47:f9:e9:68:11:4c:46:c0:6a:f1:
         21:34:23:57:7f:cb:99:ac:75:aa:78:c0:f3:59:01:58:c3:9b:
         40:67:64:84:a2:59:32:9d:ad:8d:96:a5:f6:86:77:cd:be:66:
         77:fa:10:ae:8a:32:dd:91:48:2b:c7:17:4b:16:5d:c3:9c:1d:
         c2:77:44:32:20:c5:3b:95:84:ee:3c:45:3d:96:92:47:d6:76:
         a1:da:ed:90:80:de:67:bd:3e:e9:b7:2e:09:a2:b3:df:8b:fb:
         b7:fe:1b:b0:d0:9c:f2:8b:bc:e1:b0:1c:65:94:7b:bc:3a:58:
         b8:e7:07:14:83:19:02:c3:2c:d1:42:d8:3e:d0:1b:b4:bc:36:
         cc:fd:bc:7c:51:d0:78:18:12:c3:63:3d:1b:88:d6:bd:40:7d:
         28:75:03:1e:66:d0:e7:c2:ad:32:fb:a2:c3:b6:d0:9e:80:9e:
         3b:f8:39:40:56:9e:8f:91:2f:5c:a5:da:59:d1:ba:60:64:37:
         51:ad:7d:db:1a:01:f7:82:31:0f:d8:4b:4b:f7:40:9e:ce:8b:
         d8:fd:4b:a9:a3:64:e6:d7:af:d8:a6:61:38:49:27:ef:ce:a8:
         5c:d2:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:47 2024 by rpki-client on console-fra.rpki-client.org