Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3138362e3134382e3132382e302f31392d3234203d3e203532323739.roa
File:                     3138362e3134382e3132382e302f31392d3234203d3e203532323739.roa (raw, json)
Hash identifier:          0cil/kdarGicPOBXgwg0H5QmsiqCNYiHTELlCgAYJAc=
Subject key identifier:   60:67:C4:8A:87:BE:D7:D5:FD:1E:10:CD:41:21:49:4B:EE:71:DC:C6
Certificate issuer:       /CN=121BB05553FD8170C35FA9B8265458699CAC81AD
Certificate serial:       705FF7D702DF48B1FF5BC9C9D3F6DA54E5313409
Authority key identifier: 12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3138362e3134382e3132382e302f31392d3234203d3e203532323739.roa
Signing time:             Tue 05 Mar 2024 18:03:04 +0000
ROA not before:           Tue 05 Mar 2024 17:58:04 +0000
ROA not after:            Tue 04 Mar 2025 18:03:04 +0000
asID:                     52279
IP address blocks:        186.148.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5f:f7:d7:02:df:48:b1:ff:5b:c9:c9:d3:f6:da:54:e5:31:34:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121BB05553FD8170C35FA9B8265458699CAC81AD
        Validity
            Not Before: Mar  5 17:58:04 2024 GMT
            Not After : Mar  4 18:03:04 2025 GMT
        Subject: CN=6067C48A87BED7D5FD1E10CD4121494BEE71DCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:e0:dd:ad:8c:64:42:43:2d:8d:22:93:a3:
                    00:57:76:54:12:e9:1b:c1:31:a6:84:15:0c:45:88:
                    9f:7f:ef:fb:4b:89:bb:d9:45:c6:73:d6:40:93:ba:
                    a6:ac:3c:8e:23:bc:82:c4:b8:46:73:b3:68:f7:38:
                    2e:0e:96:0b:fd:e3:b3:16:38:40:57:33:a6:30:ab:
                    76:b7:3d:5b:a6:43:09:d9:ec:14:33:c2:7e:80:d8:
                    fb:14:d5:60:b5:1b:da:29:4c:55:a2:62:af:95:c7:
                    8f:b2:01:08:37:eb:5d:5a:6c:3b:d3:2e:65:ac:b6:
                    be:74:58:23:ed:98:c9:a3:cf:55:0e:ea:f6:b2:63:
                    6f:1e:81:5a:ba:6d:87:55:bd:db:b9:16:21:52:65:
                    a8:15:fe:16:eb:3b:e0:c1:02:a9:b3:09:0e:df:e5:
                    60:50:76:6f:2e:db:fa:a6:f2:25:41:99:30:3d:c8:
                    89:4e:ec:66:c0:e7:0c:24:ac:7e:ed:95:fd:46:ad:
                    41:7f:96:66:b9:a3:e9:fc:3c:9c:f0:01:75:2b:0c:
                    53:33:3f:3f:91:d9:30:31:1f:4c:67:44:2d:a1:fc:
                    c6:dc:ad:44:89:8c:86:aa:7f:0e:9d:07:27:92:c5:
                    56:25:a1:2b:9c:ab:98:a2:95:d8:94:29:7f:65:bc:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:67:C4:8A:87:BE:D7:D5:FD:1E:10:CD:41:21:49:4B:EE:71:DC:C6
            X509v3 Authority Key Identifier:
                keyid:12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3138362e3134382e3132382e302f31392d3234203d3e203532323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:2c:8d:e9:f8:db:07:1d:50:d8:d6:28:73:74:19:a8:c1:53:
         e5:e7:e2:15:e5:a2:df:6b:b3:2e:6f:52:67:d4:10:72:bc:8a:
         30:b1:1c:81:73:35:f8:4e:67:15:c3:8d:d7:ad:88:35:ab:f1:
         7a:81:c1:a1:d1:a7:ff:a0:39:4f:14:3f:eb:55:99:c6:4c:6b:
         ee:d8:89:2a:3a:6c:ab:78:93:8a:4f:84:bd:da:f8:6d:31:38:
         9d:9a:3b:3d:84:fd:11:79:18:f8:b5:ea:bd:54:94:f3:88:05:
         99:5b:ae:54:da:30:e4:0a:bb:85:60:ef:67:fa:ff:33:00:9f:
         50:2d:2c:60:8f:11:b4:b2:ec:01:1a:18:73:a4:76:f7:af:6a:
         76:65:4a:df:07:0f:07:66:9d:8b:e7:26:72:bd:34:01:8a:d0:
         9e:45:4a:98:c5:52:90:71:8d:bf:3e:84:93:86:87:b0:0a:bc:
         67:86:5a:85:b2:df:e5:f2:f4:0a:de:3f:d5:d7:f0:cc:2d:85:
         67:16:b3:ef:72:65:98:da:e5:15:a8:6e:42:f3:f3:b8:66:40:
         fb:76:21:f8:1f:1f:8a:3f:e2:37:13:07:3f:42:5c:53:07:5d:
         a5:7a:37:7c:b1:2d:e7:81:db:46:e6:a7:6a:d8:aa:be:55:3d:
         c8:ef:8f:b4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcF/31wLfSLH/W8nJ0/baVOUxNAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIxQkIwNTU1M0ZEODE3MEMzNUZBOUI4MjY1NDU4Njk5
Q0FDODFBRDAeFw0yNDAzMDUxNzU4MDRaFw0yNTAzMDQxODAzMDRaMDMxMTAvBgNV
BAMTKDYwNjdDNDhBODdCRUQ3RDVGRDFFMTBDRDQxMjE0OTRCRUU3MURDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/ODdrYxkQkMtjSKTowBXdlQS
6RvBMaaEFQxFiJ9/7/tLibvZRcZz1kCTuqasPI4jvILEuEZzs2j3OC4Olgv947MW
OEBXM6Ywq3a3PVumQwnZ7BQzwn6A2PsU1WC1G9opTFWiYq+Vx4+yAQg3611abDvT
LmWstr50WCPtmMmjz1UO6vayY28egVq6bYdVvdu5FiFSZagV/hbrO+DBAqmzCQ7f
5WBQdm8u2/qm8iVBmTA9yIlO7GbA5wwkrH7tlf1GrUF/lma5o+n8PJzwAXUrDFMz
Pz+R2TAxH0xnRC2h/MbcrUSJjIaqfw6dByeSxVYloSucq5iildiUKX9lvPUlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUYGfEioe+19X9HhDNQSFJS+5x3MYwHwYDVR0j
BBgwFoAUEhuwVVP9gXDDX6m4JlRYaZysga0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMkVCRTM4QTlFM0NFRUQwNTA4MjU3QTNBQTQ3NTlCMzg0
MjU4RDhDMkQzOEMzOTJDQjkyNUVEN0I3NEQ1OTJELzAvMTIxQkIwNTU1M0ZEODE3
MEMzNUZBOUI4MjY1NDU4Njk5Q0FDODFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjFCQjA1NTUzRkQ4MTcwQzM1
RkE5QjgyNjU0NTg2OTlDQUM4MUFELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTJFQkUzOEE5RTNDRUVEMDUwODI1N0EzQUE0NzU5QjM4NDI1OEQ4QzJE
MzhDMzkyQ0I5MjVFRDdCNzRENTkyRC8wLzMxMzgzNjJlMzEzNDM4MmUzMTMyMzgy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzNTMyMzIzNzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFupSA
MA0GCSqGSIb3DQEBCwUAA4IBAQBtLI3p+NsHHVDY1ihzdBmowVPl5+IV5aLfa7Mu
b1Jn1BByvIowsRyBczX4TmcVw43XrYg1q/F6gcGh0af/oDlPFD/rVZnGTGvu2Ikq
OmyreJOKT4S92vhtMTidmjs9hP0ReRj4teq9VJTziAWZW65U2jDkCruFYO9n+v8z
AJ9QLSxgjxG0suwBGhhzpHb3r2p2ZUrfBw8HZp2L5yZyvTQBitCeRUqYxVKQcY2/
PoSThoewCrxnhlqFst/l8vQK3j/V1/DMLYVnFrPvcmWY2uUVqG5C8/O4ZkD7diH4
Hx+KP+I3Ewc/QlxTB12lejd8sS3ngdtG5qdq2Kq+VT3I74+0
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org