Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3138362e33332e36342e302f31382d3234203d3e203237383837.roa
File:                     3138362e33332e36342e302f31382d3234203d3e203237383837.roa (raw, json)
Hash identifier:          ALOLc2dDR14V5qMA4hHsr7L2Od/4j1woxuRuVgbaUBk=
Subject key identifier:   29:3B:8D:2E:9C:F5:BA:B8:82:7A:07:29:F5:42:24:CA:55:67:CC:60
Certificate issuer:       /CN=F00FBBA32D43BAF3EF3175458BDD03F4CE87674F
Certificate serial:       2FE88E815B54D38A9E1D5326DF98318E5E3D0007
Authority key identifier: F0:0F:BB:A3:2D:43:BA:F3:EF:31:75:45:8B:DD:03:F4:CE:87:67:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3138362e33332e36342e302f31382d3234203d3e203237383837.roa
Signing time:             Tue 05 Mar 2024 18:06:31 +0000
ROA not before:           Tue 05 Mar 2024 18:01:31 +0000
ROA not after:            Tue 04 Mar 2025 18:06:31 +0000
asID:                     27887
IP address blocks:        186.33.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e8:8e:81:5b:54:d3:8a:9e:1d:53:26:df:98:31:8e:5e:3d:00:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F00FBBA32D43BAF3EF3175458BDD03F4CE87674F
        Validity
            Not Before: Mar  5 18:01:31 2024 GMT
            Not After : Mar  4 18:06:31 2025 GMT
        Subject: CN=293B8D2E9CF5BAB8827A0729F54224CA5567CC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:c8:b9:b5:4d:77:1f:d9:18:90:76:a3:d7:
                    74:40:1e:f6:8d:3d:f1:d6:f3:64:8a:82:23:0e:1f:
                    0d:90:fe:23:f5:fa:18:3c:82:39:27:50:be:8d:21:
                    d1:65:e4:cc:42:84:bc:e2:dc:8c:23:33:fb:7c:a4:
                    3f:87:20:0c:0a:2e:f7:28:a5:69:e5:e9:95:19:26:
                    5c:b1:b3:cc:6f:00:4a:bd:db:11:73:44:be:b3:ed:
                    7e:27:e8:a5:d2:75:39:b9:34:b5:f4:a2:45:13:9b:
                    bd:3b:8e:86:9f:e9:1c:a0:87:5b:8a:5a:73:db:b1:
                    f0:79:1d:13:54:fe:fd:82:cc:75:19:4c:7c:44:fb:
                    9b:4c:8c:ca:9d:08:fe:0d:e9:0a:c2:41:20:49:78:
                    96:2a:ff:11:46:d5:4e:14:9f:94:0d:44:49:e6:04:
                    01:4a:16:e3:9a:7e:9e:ed:9e:a1:93:da:e1:d6:f2:
                    b4:b0:2f:f7:86:5d:95:cf:94:1e:41:b9:c3:3c:17:
                    9b:88:36:c6:77:80:08:94:3c:dc:82:0c:8d:e1:f3:
                    e0:85:92:45:05:35:10:fd:b2:2e:fc:0f:65:fb:22:
                    35:f1:c3:6d:01:e6:c0:78:cb:fa:80:4a:61:40:ee:
                    b4:3e:58:25:22:b4:56:b6:24:4a:8f:46:de:14:28:
                    68:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3B:8D:2E:9C:F5:BA:B8:82:7A:07:29:F5:42:24:CA:55:67:CC:60
            X509v3 Authority Key Identifier:
                keyid:F0:0F:BB:A3:2D:43:BA:F3:EF:31:75:45:8B:DD:03:F4:CE:87:67:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3138362e33332e36342e302f31382d3234203d3e203237383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2e:40:4c:59:f1:09:c3:ff:97:f8:c7:18:53:39:f3:68:e4:30:
         57:e3:8b:79:19:33:25:dd:50:42:33:71:35:eb:74:49:1a:ae:
         ac:35:a2:9d:0e:86:2a:b0:0c:78:fe:25:36:7b:d8:3f:96:76:
         54:75:94:c1:fb:13:79:e3:f8:2b:1e:bc:88:0a:73:07:db:08:
         f5:5e:2e:a0:ae:71:7e:66:8e:c4:8c:e0:ed:39:ad:02:db:55:
         73:39:ef:df:c7:4a:87:1f:39:1e:71:aa:cc:95:df:81:b5:15:
         3e:af:0b:a3:b8:3a:f3:e3:71:a0:b9:d7:7a:a6:87:36:87:e1:
         f9:04:bb:ab:aa:1f:01:ad:81:98:2b:28:b3:b4:5e:55:2f:c1:
         5d:e8:34:8e:88:a1:94:13:cf:c4:35:fa:7f:08:ad:df:8d:f1:
         4c:0f:6a:1f:6c:83:71:3d:2f:6a:5a:3f:c9:b8:8c:20:79:26:
         d4:3f:21:46:a3:62:d3:a3:20:82:f6:a7:5d:1f:2b:aa:4d:e5:
         8b:53:3d:ab:f4:74:ba:61:28:37:85:06:46:53:9b:48:13:9b:
         a9:41:8a:09:8f:c5:c4:35:b2:f5:a2:d3:be:04:50:57:bc:26:
         ff:c4:73:c5:bb:01:ab:d8:70:1f:a6:c7:89:ef:59:29:c8:6c:
         bb:9c:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org