Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3138362e3134382e302e302f31382d3234203d3e2037303034.roa
File:                     3138362e3134382e302e302f31382d3234203d3e2037303034.roa (raw, json)
Hash identifier:          DUEtBnX2KsPB3mbzXWU0ZfwhhgIzlygkZE8APd66L/8=
Subject key identifier:   AD:72:F8:EE:04:A9:EA:48:BF:6D:BD:A4:47:58:57:B7:19:84:BB:27
Certificate issuer:       /CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Certificate serial:       45256D9651211F6D6B5A75DF0E96737C17ABBA00
Authority key identifier: 08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3138362e3134382e302e302f31382d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:44:26 +0000
ROA not before:           Tue 05 Mar 2024 17:39:26 +0000
ROA not after:            Tue 04 Mar 2025 17:44:26 +0000
asID:                     7004
IP address blocks:        186.148.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:25:6d:96:51:21:1f:6d:6b:5a:75:df:0e:96:73:7c:17:ab:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
        Validity
            Not Before: Mar  5 17:39:26 2024 GMT
            Not After : Mar  4 17:44:26 2025 GMT
        Subject: CN=AD72F8EE04A9EA48BF6DBDA4475857B71984BB27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:7b:71:8c:07:da:cb:64:c4:04:6b:e2:14:
                    61:0e:5e:0f:67:f5:5a:92:4a:2d:c7:73:31:9d:f3:
                    0a:1a:f2:8e:0f:8a:02:d6:5c:a6:45:43:f6:3d:a6:
                    00:a6:2c:2e:34:47:b9:e8:f0:ad:37:27:4f:76:28:
                    a9:38:a2:34:70:ef:35:66:d8:3e:f0:d1:bb:b3:15:
                    b5:1d:c9:81:ec:f5:40:20:ee:e7:e3:27:d9:b2:6b:
                    13:30:a8:81:cf:6a:9a:d2:54:fa:58:4e:e4:29:bd:
                    b9:3e:5f:cf:26:96:b9:85:b6:7b:13:be:b8:93:55:
                    ab:35:b7:dd:17:c1:9f:1f:7c:a0:b6:a5:9f:54:f3:
                    fc:cc:f8:cf:f0:93:26:53:35:1f:b6:f6:04:0c:a2:
                    e2:c8:91:85:02:46:d6:ae:9c:9e:4c:37:16:24:eb:
                    5a:2f:69:bb:cf:e4:13:5f:ba:7b:77:b6:92:ea:ef:
                    ef:cb:53:74:57:09:eb:b9:b9:d4:67:a9:4b:f2:6d:
                    31:45:54:4e:1c:6d:74:f1:1c:25:ef:2f:5e:dd:7b:
                    81:58:ec:7f:a1:57:04:5e:31:c4:af:f8:fb:c5:52:
                    60:72:76:63:11:ab:9b:ad:97:a3:f4:3b:83:5c:6a:
                    5e:4c:28:1b:b4:5f:1e:25:1c:02:e3:9b:87:6c:7f:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:72:F8:EE:04:A9:EA:48:BF:6D:BD:A4:47:58:57:B7:19:84:BB:27
            X509v3 Authority Key Identifier:
                keyid:08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3138362e3134382e302e302f31382d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         60:09:04:ef:47:25:35:73:48:7e:a2:08:d0:2e:b6:4e:bc:ab:
         e2:74:d1:84:e7:56:ed:8d:70:b8:90:90:db:f5:57:3a:64:1b:
         c5:16:31:f2:0a:8f:d2:81:03:43:35:33:be:ac:b2:a1:92:d9:
         eb:fb:8e:77:ba:54:32:ff:b1:62:a7:50:24:60:22:fb:50:e9:
         85:23:03:e3:24:23:e3:b7:4b:95:ff:4c:63:67:c4:bc:20:c1:
         b6:77:dd:63:b0:9c:2e:35:15:bf:7f:ec:1b:e4:b2:d4:ec:d1:
         cc:14:83:a9:51:87:45:14:1f:7e:f2:30:c0:94:37:ed:76:31:
         df:85:6c:2a:c8:fb:50:8b:8f:08:bd:b5:45:15:07:03:02:55:
         9d:a9:0f:37:44:ee:b9:f9:9d:ef:24:7a:16:4a:40:db:2a:3b:
         db:0d:11:d8:e5:67:6a:53:86:dc:10:71:eb:26:89:1c:ba:5d:
         8d:23:6b:a9:55:72:a6:2c:7f:32:79:b1:3c:71:e7:c3:8e:d5:
         ba:53:66:29:5e:e5:70:94:65:b9:30:4b:3d:11:c4:4b:0c:de:
         45:96:15:23:01:ce:43:f8:cf:7b:33:52:9c:99:60:95:db:b0:
         cb:95:6d:63:97:0f:bc:07:41:8a:a8:23:f0:3b:95:07:49:b8:
         90:3b:23:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:13:47 2024 by rpki-client on console-fra.rpki-client.org