Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/3138372e3130322e3230382e302f32322d3234203d3e20323730303036.roa
File:                     3138372e3130322e3230382e302f32322d3234203d3e20323730303036.roa (raw, json)
Hash identifier:          doRISzbdBGU+6q+sP+VoP45Kh5lsTDVBSb9DasZs1z0=
Subject key identifier:   E4:B5:4C:4E:A4:2B:A9:10:34:C0:DD:33:00:16:B8:F0:5D:4B:2D:ED
Certificate issuer:       /CN=BAD81EEA76E7D45020375CA26672BEA75D5445E2
Certificate serial:       3FB54AB7D37D83D757BE39A258115963DA6E114F
Authority key identifier: BA:D8:1E:EA:76:E7:D4:50:20:37:5C:A2:66:72:BE:A7:5D:54:45:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/3138372e3130322e3230382e302f32322d3234203d3e20323730303036.roa
Signing time:             Tue 05 Mar 2024 17:42:47 +0000
ROA not before:           Tue 05 Mar 2024 17:37:47 +0000
ROA not after:            Tue 04 Mar 2025 17:42:47 +0000
asID:                     270006
IP address blocks:        187.102.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 14:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b5:4a:b7:d3:7d:83:d7:57:be:39:a2:58:11:59:63:da:6e:11:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD81EEA76E7D45020375CA26672BEA75D5445E2
        Validity
            Not Before: Mar  5 17:37:47 2024 GMT
            Not After : Mar  4 17:42:47 2025 GMT
        Subject: CN=E4B54C4EA42BA91034C0DD330016B8F05D4B2DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8e:5b:65:35:4a:8c:47:11:6d:ec:c2:59:0d:
                    6e:51:72:d6:24:40:a7:cf:cb:8d:12:c1:4f:d8:c0:
                    3f:97:9d:6b:53:62:fe:13:d8:1f:3b:97:48:d5:c5:
                    5b:f0:a0:0d:fa:46:17:5b:86:a5:d5:bd:d8:aa:44:
                    dd:93:5e:8f:82:6b:13:98:32:93:e5:1b:ce:2b:22:
                    b4:f6:72:54:0a:ee:c8:8f:fc:1d:74:6d:68:95:72:
                    2c:b5:0e:4d:76:2a:bf:a5:d6:6e:b6:25:ee:54:f6:
                    7c:3a:74:59:e2:61:bf:90:fb:25:6e:68:b8:73:09:
                    fc:d8:3c:b9:ba:e1:36:10:b4:59:b2:1d:91:01:ea:
                    bf:44:48:92:c4:6b:60:93:88:06:81:56:da:d5:3c:
                    6c:d0:3f:13:f3:1a:b2:08:29:2b:a5:f9:19:3b:77:
                    97:d1:c7:bb:b0:c2:4e:00:4f:6b:59:cc:0a:05:46:
                    36:cb:84:2c:d5:e7:8d:52:c2:68:15:d1:74:52:fd:
                    20:80:23:b0:ff:92:c5:ac:0f:50:33:17:00:f1:8d:
                    c2:15:81:57:23:47:bb:c7:b2:b0:a7:5b:bf:98:07:
                    bb:52:d4:08:76:4d:de:95:3c:e2:e0:c1:3c:70:0e:
                    c7:ff:90:69:0d:13:f6:b8:31:d8:5f:05:25:f5:fc:
                    97:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B5:4C:4E:A4:2B:A9:10:34:C0:DD:33:00:16:B8:F0:5D:4B:2D:ED
            X509v3 Authority Key Identifier:
                keyid:BA:D8:1E:EA:76:E7:D4:50:20:37:5C:A2:66:72:BE:A7:5D:54:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/3138372e3130322e3230382e302f32322d3234203d3e20323730303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:6b:b3:7b:15:0e:10:5c:13:3c:a5:d7:3a:7a:7b:94:b9:91:
         b6:68:75:5a:18:8d:a0:40:2a:8c:a7:06:00:b2:ef:60:80:40:
         99:72:9f:a1:c8:7f:49:f1:76:8a:49:ed:3b:0e:09:3b:36:25:
         55:79:db:c2:17:79:ba:f1:fc:9b:72:be:d8:42:81:f0:e3:f7:
         c0:02:9a:cd:a8:07:48:7f:3f:c5:f6:c8:1a:ef:c1:92:24:e7:
         10:9b:91:74:09:3a:14:72:28:c3:3b:1b:ab:e2:60:de:9a:2a:
         09:07:90:72:33:3d:71:03:3a:3e:8e:14:83:16:67:a9:60:d4:
         61:fe:df:cc:75:5c:b8:16:a7:6b:b9:8f:ee:a1:38:8c:58:4f:
         da:b6:af:9e:cc:33:ea:48:35:af:a4:ba:db:b2:d6:9e:b4:a3:
         63:9e:8d:a7:60:9c:79:c1:b1:31:25:91:32:fb:a2:a3:57:6b:
         a0:c1:d0:23:9c:d2:dc:39:d6:53:e2:c8:5c:cf:81:df:d9:d7:
         57:4b:99:39:51:31:fa:55:0e:35:eb:da:ba:b1:d7:b5:8e:d0:
         f7:e1:68:27:60:7d:f9:bd:f7:4e:58:1e:47:82:06:60:e0:06:
         a1:4c:8e:38:43:50:70:06:6a:7e:4c:1c:7a:19:95:80:90:0b:
         0d:71:00:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 23:49:37 2024 by rpki-client on console-fra.rpki-client.org