Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa
File:                     3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa (raw, json)
Hash identifier:          hAzjESU+ng0UalNrF2WfAl80ul0VlB6xGj2/Farhceo=
Subject key identifier:   5B:BA:A6:4F:5D:E2:A5:15:18:B0:54:E0:7E:46:A7:27:F2:ED:AF:24
Certificate issuer:       /CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
Certificate serial:       40FD03885853311E378F828361776A9F85F853A5
Authority key identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa
Signing time:             Thu 23 May 2024 21:05:00 +0000
ROA not before:           Thu 23 May 2024 21:00:00 +0000
ROA not after:            Thu 22 May 2025 21:05:00 +0000
asID:                     270023
IP address blocks:        186.148.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Jul 2024 17:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fd:03:88:58:53:31:1e:37:8f:82:83:61:77:6a:9f:85:f8:53:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
        Validity
            Not Before: May 23 21:00:00 2024 GMT
            Not After : May 22 21:05:00 2025 GMT
        Subject: CN=5BBAA64F5DE2A51518B054E07E46A727F2EDAF24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:5e:96:ea:cd:d7:7a:5c:d7:04:8b:18:49:
                    10:d0:cd:46:bd:4a:c6:9b:1e:d6:b2:d5:14:cc:c5:
                    52:47:64:ac:08:2e:8e:1f:56:b9:9f:3a:2e:a5:ac:
                    63:96:16:9b:75:a8:15:67:8d:e9:5f:c1:1f:8a:c6:
                    82:4b:ea:5b:d0:3a:4b:58:c5:fd:ef:1c:e3:63:78:
                    ea:fb:bd:cc:56:12:bf:ed:2b:f2:69:9b:cb:2c:a6:
                    3c:48:5c:fb:6d:74:7b:58:ad:69:2b:03:49:64:d7:
                    ee:6d:41:bd:a6:1f:c2:3d:3b:e1:d1:df:1d:03:b8:
                    7b:ea:58:67:11:d0:af:4d:da:96:6b:b8:84:7e:7b:
                    5d:e3:5a:10:87:af:73:a2:38:24:ed:4a:fc:3b:23:
                    53:90:5b:79:11:44:5f:00:aa:44:38:33:e0:27:4a:
                    ca:6c:63:55:15:23:69:f9:19:cf:0a:23:c9:24:83:
                    9f:be:a5:52:d6:fb:40:62:d6:76:3a:6a:97:46:fe:
                    f3:39:66:4c:c9:30:82:9d:ac:94:b8:2c:fe:54:0e:
                    1a:e3:ce:77:c8:86:88:a3:0b:98:9e:93:af:40:0d:
                    e4:89:07:ec:3b:8a:20:18:a7:9d:5b:e7:e4:75:43:
                    ce:ff:27:68:78:e1:cb:5e:00:34:63:1d:78:f6:ea:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BA:A6:4F:5D:E2:A5:15:18:B0:54:E0:7E:46:A7:27:F2:ED:AF:24
            X509v3 Authority Key Identifier:
                keyid:5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:ee:2f:79:94:c6:ce:aa:d6:68:fc:99:b8:9a:e7:39:14:dc:
         17:67:96:c1:b4:ea:99:a0:6c:7a:92:34:c9:db:3c:52:3c:7f:
         ac:31:75:3c:3c:11:49:25:36:ad:88:55:dc:cb:b9:c6:56:b4:
         82:40:f4:72:6f:47:8f:cc:7f:bb:6e:0c:f5:66:48:b1:9f:c8:
         d3:11:06:d1:14:8a:ad:ec:bb:97:8c:22:67:ec:83:9a:c1:4c:
         f3:1d:11:0b:44:43:64:2f:a3:1b:2d:54:9a:5d:2f:e6:ce:ca:
         ee:a9:fb:10:e2:85:b9:a6:25:a7:e0:52:72:76:53:55:a4:26:
         10:cf:87:2e:8d:4a:71:05:53:db:91:0a:e8:ff:77:81:09:fd:
         2e:3f:76:e1:b3:52:4a:6e:bd:d3:d6:7d:a2:7a:f2:7e:fa:c5:
         7b:f8:4c:b3:76:dc:5a:1a:d4:63:aa:71:f5:50:c1:6d:c7:3d:
         9c:b5:b8:cc:85:c9:c4:8e:95:3e:51:77:34:a9:51:42:6a:47:
         3e:64:5b:4a:e4:9e:4a:c0:28:33:e5:c1:86:fb:47:43:51:ed:
         0a:65:d6:4a:4e:55:ce:83:e2:e8:ec:c8:96:6f:9e:c4:45:95:
         70:de:6f:a8:cf:21:61:44:45:c6:7a:ed:ae:28:ab:9d:35:dd:
         f6:85:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 20:59:40 2024 by rpki-client on console-fra.rpki-client.org