Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3134382e302f32342d3234203d3e203233333833.roa
File:                     3138362e322e3134382e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          KaLjvsAAsq4vqP/lJIsJAy5SgiiakP453JKV1Jk2rhE=
Subject key identifier:   B2:5D:9E:5D:AC:0A:A0:4C:B6:06:8C:F1:36:A7:91:1B:FD:15:3D:14
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       039F262050FDF6BD2D86F68AD452A2E387C2D32D
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3134382e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 18:08:16 +0000
ROA not before:           Tue 05 Mar 2024 18:03:16 +0000
ROA not after:            Tue 04 Mar 2025 18:08:16 +0000
asID:                     23383
IP address blocks:        186.2.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Apr 2024 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9f:26:20:50:fd:f6:bd:2d:86:f6:8a:d4:52:a2:e3:87:c2:d3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Mar  5 18:03:16 2024 GMT
            Not After : Mar  4 18:08:16 2025 GMT
        Subject: CN=B25D9E5DAC0AA04CB6068CF136A7911BFD153D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a9:54:e3:ef:8c:49:b6:07:4f:4a:bd:3e:7b:
                    5f:da:ec:63:9a:44:25:c2:14:73:19:c4:df:1e:c3:
                    7d:70:8c:cb:2c:9e:c5:69:d8:2a:5a:98:f8:4c:10:
                    06:45:98:52:30:d6:b8:2b:bf:6b:06:90:52:20:46:
                    55:80:cf:90:2e:47:04:a1:2d:4b:3c:c1:58:1f:b1:
                    7a:9d:91:62:82:7d:20:d5:a8:8f:11:fa:b0:88:cb:
                    02:86:e7:42:8a:f7:06:8c:e2:96:6a:77:19:06:e5:
                    88:c4:cd:04:ff:6f:2d:4b:b9:c2:4e:ba:5e:1f:35:
                    ae:4f:69:33:c1:17:e9:7f:ab:24:22:ff:0c:be:62:
                    33:83:16:ba:75:52:f5:27:70:4b:ee:ff:06:a0:65:
                    e2:41:9f:05:f7:d6:2c:a2:f1:99:84:a3:40:49:8f:
                    ec:ad:c0:3b:49:29:03:40:8d:55:66:5c:18:56:d8:
                    90:2d:1d:06:e5:eb:bd:a2:4d:b6:c6:7d:2f:41:da:
                    48:87:a1:a0:f1:0a:f2:56:64:8b:e3:27:61:3a:11:
                    d2:29:08:1a:23:cb:84:19:f0:f2:2c:3b:b5:2b:b6:
                    c2:0f:cc:15:95:bf:66:8a:37:39:38:c0:55:60:70:
                    49:fd:cf:88:fe:3f:59:65:05:5a:05:c7:c9:b1:dc:
                    73:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5D:9E:5D:AC:0A:A0:4C:B6:06:8C:F1:36:A7:91:1B:FD:15:3D:14
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/3138362e322e3134382e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:46:0f:29:64:29:64:b8:1c:e7:91:8f:f4:98:d3:8f:24:8f:
         d4:5c:0e:d3:15:3c:f0:4f:a0:93:40:b0:a8:86:01:fd:d7:a0:
         d5:e5:3b:8d:3f:9f:80:14:3a:9e:37:de:f2:0d:f6:2e:dd:06:
         55:17:7a:c2:49:75:7f:73:70:4a:57:1d:1b:db:38:96:f9:40:
         76:fb:4f:b3:aa:66:bd:17:09:48:59:c1:0b:6a:9a:33:76:ba:
         2d:f9:08:c8:29:76:fe:b0:9e:6e:64:d6:82:33:f8:e0:6c:c6:
         02:dd:a3:6c:78:de:f5:cd:6f:1f:a1:aa:0c:4a:64:93:ec:8f:
         f5:52:3d:21:ba:b9:7b:bd:13:37:99:34:97:c2:cb:c0:c6:7f:
         11:18:8e:0a:5c:d7:7f:91:02:c5:03:d3:cf:ef:e8:3e:98:cb:
         37:cf:65:48:b7:77:ca:51:ec:c9:9e:52:34:a8:ff:c4:ae:0b:
         ed:3b:0d:f4:28:41:e0:5b:bc:8b:78:fa:32:39:4d:14:14:7a:
         58:ba:9d:fb:86:66:75:c8:02:49:13:93:ab:53:73:3c:84:82:
         6e:85:38:1f:38:6f:e5:30:df:a7:b5:10:e9:72:f0:b4:d9:51:
         7b:92:95:8c:58:6e:21:4c:f0:24:83:e0:f9:8a:50:87:19:cd:
         31:55:ad:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:13:33 2024 by rpki-client on console-ams.rpki-client.org