Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3133362e302f32312d3234203d3e203532323632.roa
File:                     3138362e322e3133362e302f32312d3234203d3e203532323632.roa (raw, json)
Hash identifier:          B8hKq9m/x/RxRnjQGZfXpvZM/FXTGMr8c4oqVbkzYg8=
Subject key identifier:   10:12:93:9D:79:87:BA:AD:DE:4C:F1:12:0D:5A:55:25:7D:64:48:58
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       2496C91FB881398A4C1C43910C48A429F99AA6CF
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3133362e302f32312d3234203d3e203532323632.roa
Signing time:             Tue 05 Mar 2024 18:08:17 +0000
ROA not before:           Tue 05 Mar 2024 18:03:17 +0000
ROA not after:            Tue 04 Mar 2025 18:08:17 +0000
asID:                     52262
IP address blocks:        186.2.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:96:c9:1f:b8:81:39:8a:4c:1c:43:91:0c:48:a4:29:f9:9a:a6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Mar  5 18:03:17 2024 GMT
            Not After : Mar  4 18:08:17 2025 GMT
        Subject: CN=1012939D7987BAADDE4CF1120D5A55257D644858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:48:47:5e:1d:98:01:c1:a6:c4:69:62:89:98:
                    f0:d0:8a:48:7a:dd:45:7e:c5:b0:3a:5a:73:ec:29:
                    aa:7d:fe:57:68:3b:48:b1:a0:95:0b:ac:d0:83:a2:
                    68:8f:ea:f1:23:ae:d7:ea:b1:5b:5f:ea:92:90:b9:
                    85:7a:96:c8:51:a3:2a:5a:ac:c3:d7:23:f4:e8:24:
                    7f:f9:00:b4:66:4b:59:e5:04:3c:52:ce:6c:9d:46:
                    81:63:a9:0a:41:4f:aa:50:07:37:25:0e:97:72:46:
                    21:fd:46:b0:fc:ab:fb:55:fe:74:ce:37:35:e5:ed:
                    94:2e:e8:48:39:e8:b6:e9:5f:43:56:7d:44:5e:cc:
                    f2:dd:8b:37:30:81:8e:c7:f3:8c:17:ea:cf:4b:d8:
                    82:c1:e5:b6:20:9c:fb:62:76:af:ef:3e:0f:11:88:
                    ba:bf:7a:c6:89:38:76:93:fb:44:40:34:f5:74:a5:
                    99:f9:14:1b:3b:22:af:92:9b:04:d9:9c:5d:93:de:
                    5f:d9:6a:5b:06:5f:d9:d4:6c:6e:3b:5d:97:e7:3f:
                    4b:c8:f5:71:c2:1a:24:c5:a4:d5:81:78:7d:34:91:
                    61:f9:4f:bb:c7:73:71:bc:83:c3:68:da:9e:09:7d:
                    3d:6b:36:10:bd:72:21:69:60:cf:d2:b8:94:7c:7e:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:12:93:9D:79:87:BA:AD:DE:4C:F1:12:0D:5A:55:25:7D:64:48:58
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3133362e302f32312d3234203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:7c:f4:89:77:2b:09:ad:9f:b4:0c:d4:35:1c:c4:de:d8:8a:
         86:3c:15:a3:81:5e:ec:a6:b1:cf:cf:cd:62:a7:12:93:a9:97:
         aa:7f:f2:5a:6c:4a:f4:57:db:85:75:62:48:6e:af:a6:58:d2:
         86:fa:f0:71:e5:76:1f:3f:31:5e:70:e0:52:6d:f5:f4:0a:27:
         41:cc:eb:2a:fd:bf:bc:d3:47:b2:2d:91:f5:42:11:6e:d6:61:
         ec:56:3a:8f:d1:2d:40:2f:bf:d3:7f:e5:21:de:88:41:44:a9:
         90:86:0c:81:81:54:e4:9c:1f:36:8b:44:ab:d3:48:99:a9:13:
         fa:13:96:84:f3:7d:38:03:cf:b8:a2:90:17:3a:55:f2:d7:47:
         f8:9e:4e:a9:c7:7c:17:8a:97:c9:47:1b:cd:60:3c:2d:47:98:
         20:73:19:bb:00:11:5b:62:40:86:bf:0c:8c:ad:ad:ae:5c:37:
         a1:18:ad:4b:3c:ac:57:e6:b7:ec:db:d4:ea:29:aa:56:a0:c2:
         5f:01:1f:a1:6a:08:f6:40:6c:9f:9e:a5:60:b6:9a:23:6b:1e:
         13:67:7a:90:23:2b:7d:b0:59:30:b5:dc:00:53:36:98:ba:94:
         a2:da:8f:19:66:f9:03:48:0f:2e:06:b1:f5:5b:4d:5a:2e:4b:
         db:15:1d:07
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJJbJH7iBOYpMHEORDEikKfmaps8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEyRTVBODFGRjYxNUQzNkVFNURGQTQyNzgyQ0NCN0Ux
RkQ1QkI2NjAeFw0yNDAzMDUxODAzMTdaFw0yNTAzMDQxODA4MTdaMDMxMTAvBgNV
BAMTKDEwMTI5MzlENzk4N0JBQURERTRDRjExMjBENUE1NTI1N0Q2NDQ4NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiSEdeHZgBwabEaWKJmPDQikh6
3UV+xbA6WnPsKap9/ldoO0ixoJULrNCDomiP6vEjrtfqsVtf6pKQuYV6lshRoypa
rMPXI/ToJH/5ALRmS1nlBDxSzmydRoFjqQpBT6pQBzclDpdyRiH9RrD8q/tV/nTO
NzXl7ZQu6Eg56LbpX0NWfURezPLdizcwgY7H84wX6s9L2ILB5bYgnPtidq/vPg8R
iLq/esaJOHaT+0RANPV0pZn5FBs7Iq+SmwTZnF2T3l/ZalsGX9nUbG47XZfnP0vI
9XHCGiTFpNWBeH00kWH5T7vHc3G8g8No2p4JfT1rNhC9ciFpYM/SuJR8frBpAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUEBKTnXmHuq3eTPESDVpVJX1kSFgwHwYDVR0j
BBgwFoAU4S5agf9hXTbuXfpCeCzLfh/Vu2YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQTBGMDY0MzhBNkQyQ0I3RTc2RENDQUFCOTU1Q0FBNzVE
OTZEMzlEMUMzRUY0MEQ1NzYwQkQ3MDY5QUY2MzhGLzAvRTEyRTVBODFGRjYxNUQz
NkVFNURGQTQyNzgyQ0NCN0UxRkQ1QkI2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMTJFNUE4MUZGNjE1RDM2RUU1
REZBNDI3ODJDQ0I3RTFGRDVCQjY2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUEwRjA2NDM4QTZEMkNCN0U3NkRDQ0FBQjk1NUNBQTc1RDk2RDM5RDFD
M0VGNDBENTc2MEJENzA2OUFGNjM4Ri8wLzMxMzgzNjJlMzIyZTMxMzMzNjJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDM1MzIzMjM2MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO6AogwDQYJ
KoZIhvcNAQELBQADggEBAHZ89Il3Kwmtn7QM1DUcxN7YioY8FaOBXuymsc/PzWKn
EpOpl6p/8lpsSvRX24V1Ykhur6ZY0ob68HHldh8/MV5w4FJt9fQKJ0HM6yr9v7zT
R7ItkfVCEW7WYexWOo/RLUAvv9N/5SHeiEFEqZCGDIGBVOScHzaLRKvTSJmpE/oT
loTzfTgDz7iikBc6VfLXR/ieTqnHfBeKl8lHG81gPC1HmCBzGbsAEVtiQIa/DIyt
ra5cN6EYrUs8rFfmt+zb1Oopqlagwl8BH6FqCPZAbJ+epWC2miNrHhNnepAjK32w
WTC13ABTNpi6lKLajxlm+QNIDy4GsfVbTVouS9sVHQc=
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:35 2024 by rpki-client on console-ams.rpki-client.org