Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3232203d3e20323730303233.roa
File:                     3138362e3134382e3139362e302f32322d3232203d3e20323730303233.roa (raw, json)
Hash identifier:          5QYyQ9X7TmIE2a2XqrG8W7neKhcpr2b9ygFEscyPBds=
Subject key identifier:   2C:D3:C9:2A:C5:E1:CB:7A:0A:18:E2:6E:0F:25:B7:B4:BD:88:2C:51
Certificate issuer:       /CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
Certificate serial:       15BAF50F2819B34A25062F5498A54B6CD5F598C5
Authority key identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3232203d3e20323730303233.roa
Signing time:             Thu 23 May 2024 21:10:00 +0000
ROA not before:           Thu 23 May 2024 21:05:00 +0000
ROA not after:            Thu 22 May 2025 21:10:00 +0000
asID:                     270023
IP address blocks:        186.148.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Jul 2024 17:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ba:f5:0f:28:19:b3:4a:25:06:2f:54:98:a5:4b:6c:d5:f5:98:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
        Validity
            Not Before: May 23 21:05:00 2024 GMT
            Not After : May 22 21:10:00 2025 GMT
        Subject: CN=2CD3C92AC5E1CB7A0A18E26E0F25B7B4BD882C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:f4:80:12:2e:50:23:4d:6f:f5:fd:a8:ad:
                    91:d5:a7:c5:6b:df:8d:84:5f:3f:f0:89:11:73:6e:
                    5b:c6:3d:35:4e:41:7a:e1:5a:96:ec:17:57:a8:98:
                    65:1d:c8:33:2f:74:2d:72:5f:da:04:ca:08:da:14:
                    cf:7e:b5:dc:e8:14:47:eb:5f:7e:2a:a6:60:cb:63:
                    04:f5:16:67:d2:41:be:83:d7:5b:08:1e:f1:2f:1f:
                    f8:aa:e1:ad:d8:d4:d5:bd:30:fc:c6:90:99:e9:4a:
                    84:73:55:ca:c4:40:7e:f3:18:68:55:a7:5c:9a:10:
                    26:1b:3d:2c:3b:d0:a7:55:46:bf:6c:c9:06:15:a4:
                    32:10:90:23:81:1b:5f:ff:a0:eb:a2:9c:27:54:c2:
                    8d:c1:bf:50:06:5a:9e:a4:36:c3:e4:07:af:24:75:
                    ac:66:d5:70:57:44:2f:e4:30:fd:18:99:c9:09:3c:
                    17:44:87:dd:bf:e1:f8:aa:23:b5:0d:3e:d5:43:1d:
                    6a:20:c6:31:a5:1d:52:72:58:5b:d4:82:3d:c9:81:
                    b3:38:35:f2:2a:2c:28:26:f4:23:fe:cc:00:d6:ca:
                    ab:e7:2d:6e:1f:90:eb:13:90:4a:80:38:1d:72:ea:
                    ad:cf:3b:7e:88:08:ce:62:91:5e:19:d9:5b:95:67:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D3:C9:2A:C5:E1:CB:7A:0A:18:E2:6E:0F:25:B7:B4:BD:88:2C:51
            X509v3 Authority Key Identifier:
                keyid:5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3232203d3e20323730303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:6e:01:e3:0c:c7:58:58:c2:5e:4e:35:3b:b1:3b:23:38:8a:
         35:17:90:09:0e:c9:53:96:a1:a1:a4:15:94:09:8f:77:56:60:
         38:74:68:72:c7:7d:c7:51:ef:8f:15:47:0f:97:1d:a2:fe:fc:
         fe:60:b1:0b:f8:4a:67:74:5f:23:c8:64:a7:b7:32:71:e1:c0:
         36:8d:0f:c7:34:1a:e2:b9:02:21:73:c3:36:09:db:96:5e:5e:
         c4:85:82:bb:9f:87:38:f6:03:be:46:5f:95:6d:89:51:6a:7c:
         47:b6:64:28:c4:74:c5:83:2e:f4:96:8b:be:9a:b2:73:45:4e:
         d8:bc:d6:97:2b:b8:da:3d:5c:a5:23:70:c5:de:04:73:51:76:
         22:b3:8e:01:1c:83:32:a6:4e:61:f4:d5:50:1d:4c:33:70:47:
         58:cd:fc:4e:9b:0f:4f:4f:d8:03:df:44:3a:8e:32:81:ba:84:
         f1:8d:c5:74:58:9a:27:e5:a5:fb:b3:42:bb:ff:1a:a2:88:fa:
         ea:8f:d7:f4:33:f4:2a:69:de:a1:2a:1e:3b:00:54:b0:19:f9:
         12:49:bb:4f:68:bb:e0:dc:17:1d:e4:a2:76:d2:cb:23:73:e3:
         3e:7b:da:49:88:a7:8e:0e:8c:3e:26:75:ec:06:d8:a6:3b:f8:
         3a:2a:de:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:59:40 2024 by rpki-client on console-fra.rpki-client.org