Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3138362e3134382e362e302f32342d3234203d3e203631353037.roa
File:                     3138362e3134382e362e302f32342d3234203d3e203631353037.roa (raw, json)
Hash identifier:          LKzlKdirv3ymvPPP+/GgyUXSY7pxMcfUuXK+uF2UGWA=
Subject key identifier:   A9:45:BD:90:7B:9A:1F:29:26:BE:E3:BE:52:D7:13:0F:12:43:3F:24
Certificate issuer:       /CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Certificate serial:       63746DC8B01514E5DBEB1D7BB3357CC5DF3A990A
Authority key identifier: 08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3138362e3134382e362e302f32342d3234203d3e203631353037.roa
Signing time:             Tue 05 Mar 2024 17:44:28 +0000
ROA not before:           Tue 05 Mar 2024 17:39:28 +0000
ROA not after:            Tue 04 Mar 2025 17:44:28 +0000
asID:                     61507
IP address blocks:        186.148.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 04:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:74:6d:c8:b0:15:14:e5:db:eb:1d:7b:b3:35:7c:c5:df:3a:99:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
        Validity
            Not Before: Mar  5 17:39:28 2024 GMT
            Not After : Mar  4 17:44:28 2025 GMT
        Subject: CN=A945BD907B9A1F2926BEE3BE52D7130F12433F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6d:56:1f:b5:cd:63:0b:f9:c3:78:cd:22:6f:
                    f8:d5:aa:27:b3:1a:1b:a1:33:7f:28:f6:93:40:b8:
                    ac:35:52:aa:98:f3:80:4f:a7:9b:34:f9:b8:3c:83:
                    ca:ea:91:c8:b9:c2:36:17:c2:5b:f9:b2:61:d9:24:
                    4c:22:a8:53:dc:bc:79:d8:7e:a2:36:bf:49:d2:ac:
                    a8:1a:8e:4f:7a:47:2a:47:5d:04:b0:85:60:08:12:
                    d0:cb:33:95:66:83:4a:67:68:16:01:1f:ed:3c:9c:
                    2e:0c:1f:4a:6e:b2:e3:9a:c4:ea:c4:41:9a:b7:82:
                    f7:62:5e:22:ab:2c:81:b3:35:11:73:8d:d5:ba:6c:
                    8a:55:81:39:99:2a:7c:00:bd:87:1d:a2:ea:a0:6d:
                    19:75:bb:c1:f9:48:82:84:20:9e:1d:d3:af:4b:de:
                    5e:fa:bb:1c:89:6d:18:0e:94:94:f2:da:03:a1:06:
                    94:07:6e:e9:22:3a:e5:1c:7b:94:23:6e:6b:70:10:
                    76:0b:6a:7a:8b:1d:12:e7:31:bd:b0:6b:30:26:0b:
                    9e:09:30:78:22:e2:24:5d:5f:9e:1a:fa:b0:14:ae:
                    4f:b3:74:0e:54:fb:bf:63:2d:65:84:7f:e7:9e:03:
                    dc:63:0f:d5:38:6d:ac:40:63:4d:22:01:6f:cc:3c:
                    13:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:45:BD:90:7B:9A:1F:29:26:BE:E3:BE:52:D7:13:0F:12:43:3F:24
            X509v3 Authority Key Identifier:
                keyid:08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/3138362e3134382e362e302f32342d3234203d3e203631353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:84:d0:b0:dd:ac:3f:e3:da:31:57:5a:cf:52:90:81:da:
         84:17:c2:f1:2c:7a:f1:84:2e:2b:ed:11:5b:ff:37:4b:38:da:
         e2:13:8a:0a:b7:03:4d:34:d9:23:6f:18:96:4b:a3:90:92:8c:
         de:bb:3a:6e:35:06:8a:84:69:cd:79:09:94:1a:16:17:8f:60:
         80:6b:e4:cf:0f:af:0b:c5:75:a5:b0:a5:69:1a:3a:06:e2:9a:
         e8:f8:57:38:39:48:c1:57:6c:a5:1a:5d:44:87:89:28:dd:62:
         29:d0:06:f1:1a:8a:98:79:5f:89:90:16:ea:c3:3f:48:13:30:
         72:ac:a4:3d:ff:c0:2e:05:3d:99:0d:c3:03:dd:bb:a3:5d:a6:
         b1:e4:37:a7:19:fb:bb:34:e3:8f:da:02:ff:0d:dd:5c:34:2b:
         cf:e1:aa:cd:c4:5b:59:6a:b7:08:20:99:92:31:7b:fe:d2:6f:
         e3:02:bf:ec:9f:19:c9:55:36:ca:8b:1a:7c:af:19:35:70:0e:
         2a:c6:e7:91:63:8a:15:ee:54:0e:32:7b:be:88:bb:9d:77:de:
         0f:f7:86:19:2f:e3:fb:07:e0:d4:21:2d:fc:cb:e4:4c:90:ca:
         89:fe:98:b6:ad:82:70:cf:fd:93:35:9f:a7:03:5c:e9:53:b9:
         3b:e1:ed:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 18:46:19 2024 by rpki-client on console-fra.rpki-client.org