Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3134382e302f32332d3234203d3e203233333833.roa
File:                     3138362e322e3134382e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier:          F+DvccotgRZlNy4sIIFjInj2+ZebPrnsVtsShO6XXzE=
Subject key identifier:   48:C2:4E:0B:40:04:41:8F:CD:F2:88:A3:85:DA:F1:3B:AF:8B:06:11
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       6603A193EDA35C1640A6B670E3DFD7D68B85E436
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3134382e302f32332d3234203d3e203233333833.roa
Signing time:             Mon 29 Apr 2024 23:45:00 +0000
ROA not before:           Mon 29 Apr 2024 23:40:00 +0000
ROA not after:            Mon 28 Apr 2025 23:45:00 +0000
asID:                     23383
IP address blocks:        186.2.148.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:03:a1:93:ed:a3:5c:16:40:a6:b6:70:e3:df:d7:d6:8b:85:e4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Apr 29 23:40:00 2024 GMT
            Not After : Apr 28 23:45:00 2025 GMT
        Subject: CN=48C24E0B4004418FCDF288A385DAF13BAF8B0611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:56:92:2a:60:c0:55:5b:da:62:0c:e7:cf:
                    9a:ef:dc:de:22:b3:95:66:8e:6a:f9:68:da:0b:a7:
                    50:d4:23:05:44:60:d1:99:17:41:69:2f:b4:bd:7f:
                    a4:59:b0:0e:ac:06:84:10:30:95:b8:e0:2d:fc:29:
                    79:63:0d:81:74:e1:20:19:4d:e4:32:91:c8:cf:ac:
                    77:f0:3c:19:de:b6:0a:f6:e7:87:f0:a5:eb:14:0f:
                    dc:ea:db:a1:9b:01:6d:d7:ec:5e:86:4e:fe:df:31:
                    67:c3:52:ad:ec:c2:48:71:73:11:71:f4:74:42:03:
                    68:e1:cc:81:ff:9b:dd:85:16:4d:f3:9c:7d:92:75:
                    e4:f5:24:30:27:ac:a3:f4:a8:dc:dc:d0:8a:86:e5:
                    0f:31:37:28:ea:03:b6:08:49:df:55:ea:fb:8e:ca:
                    59:be:f3:4f:f9:48:03:c3:f1:3f:fd:c3:92:d6:b2:
                    d8:60:a5:ae:2c:d5:4e:8b:31:07:8b:6a:c5:63:5f:
                    00:47:a8:df:3f:91:57:a3:b1:e5:7f:69:30:54:f0:
                    8f:97:d1:e9:a7:f2:5a:f5:f2:8e:3e:30:cb:36:2a:
                    6c:e9:8d:59:70:e8:f7:a7:88:57:b2:60:ca:49:89:
                    33:84:11:1e:a3:ee:44:67:0b:fe:7b:3c:bd:99:62:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C2:4E:0B:40:04:41:8F:CD:F2:88:A3:85:DA:F1:3B:AF:8B:06:11
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3134382e302f32332d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:9c:98:3c:38:a2:72:2a:83:d8:51:37:20:5c:18:9a:b1:
         86:7c:c9:5c:a8:5a:c5:6e:30:f1:ad:91:2c:79:e2:cd:55:05:
         da:fa:1b:01:f8:06:4c:ae:15:3b:f0:6c:47:8d:1f:e5:7b:cc:
         76:01:fc:eb:fd:e0:00:39:21:08:56:6c:c5:88:8d:07:73:b1:
         8e:c3:cc:05:eb:59:2e:75:28:32:81:0c:f3:15:08:f9:e2:d4:
         f6:b8:66:31:5d:4d:7e:73:6c:89:1a:55:38:71:74:0c:22:0c:
         23:c1:83:43:75:d0:c6:52:05:77:8d:9e:ae:df:81:8f:ce:69:
         78:96:eb:6e:36:1f:02:39:e5:09:19:6f:ba:76:32:31:77:f1:
         bd:d7:82:af:dc:d2:a6:47:99:11:98:62:5a:75:bb:6e:fc:b9:
         14:d3:e3:96:58:e5:c5:69:79:a7:2e:9f:9b:1e:cf:82:89:bf:
         b1:5b:c6:b3:03:08:ec:f5:a6:f1:59:37:f5:8b:c7:64:99:e1:
         26:37:e2:2f:c4:5f:3f:17:41:fc:17:10:04:d6:52:0c:c3:24:
         14:26:76:f6:91:6f:3e:66:32:09:9f:3d:b5:a9:7c:5b:00:a7:
         f6:af:76:bf:5b:5e:76:e9:7e:69:7e:8c:38:62:a5:65:ea:9b:
         42:56:60:c4
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZgOhk+2jXBZAprZw49/X1ouF5DYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEyRTVBODFGRjYxNUQzNkVFNURGQTQyNzgyQ0NCN0Ux
RkQ1QkI2NjAeFw0yNDA0MjkyMzQwMDBaFw0yNTA0MjgyMzQ1MDBaMDMxMTAvBgNV
BAMTKDQ4QzI0RTBCNDAwNDQxOEZDREYyODhBMzg1REFGMTNCQUY4QjA2MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRlaSKmDAVVvaYgznz5rv3N4i
s5Vmjmr5aNoLp1DUIwVEYNGZF0FpL7S9f6RZsA6sBoQQMJW44C38KXljDYF04SAZ
TeQykcjPrHfwPBnetgr254fwpesUD9zq26GbAW3X7F6GTv7fMWfDUq3swkhxcxFx
9HRCA2jhzIH/m92FFk3znH2SdeT1JDAnrKP0qNzc0IqG5Q8xNyjqA7YISd9V6vuO
ylm+80/5SAPD8T/9w5LWsthgpa4s1U6LMQeLasVjXwBHqN8/kVejseV/aTBU8I+X
0emn8lr18o4+MMs2KmzpjVlw6PeniFeyYMpJiTOEER6j7kRnC/57PL2ZYl+nAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUSMJOC0AEQY/N8oijhdrxO6+LBhEwHwYDVR0j
BBgwFoAU4S5agf9hXTbuXfpCeCzLfh/Vu2YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQTBGMDY0MzhBNkQyQ0I3RTc2RENDQUFCOTU1Q0FBNzVE
OTZEMzlEMUMzRUY0MEQ1NzYwQkQ3MDY5QUY2MzhGLzAvRTEyRTVBODFGRjYxNUQz
NkVFNURGQTQyNzgyQ0NCN0UxRkQ1QkI2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMTJFNUE4MUZGNjE1RDM2RUU1
REZBNDI3ODJDQ0I3RTFGRDVCQjY2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUEwRjA2NDM4QTZEMkNCN0U3NkRDQ0FBQjk1NUNBQTc1RDk2RDM5RDFD
M0VGNDBENTc2MEJENzA2OUFGNjM4Ri8wLzMxMzgzNjJlMzIyZTMxMzQzODJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzMzMzM4MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG6ApQwDQYJ
KoZIhvcNAQELBQADggEBABSrnJg8OKJyKoPYUTcgXBiasYZ8yVyoWsVuMPGtkSx5
4s1VBdr6GwH4BkyuFTvwbEeNH+V7zHYB/Ov94AA5IQhWbMWIjQdzsY7DzAXrWS51
KDKBDPMVCPni1Pa4ZjFdTX5zbIkaVThxdAwiDCPBg0N10MZSBXeNnq7fgY/OaXiW
6242HwI55QkZb7p2MjF38b3Xgq/c0qZHmRGYYlp1u278uRTT45ZY5cVpeacun5se
z4KJv7FbxrMDCOz1pvFZN/WLx2SZ4SY34i/EXz8XQfwXEATWUgzDJBQmdvaRbz5m
MgmfPbWpfFsAp/avdr9bXnbpfml+jDhipWXqm0JWYMQ=
-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:21 2024 by rpki-client on console-fra.rpki-client.org