Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e39352e302f32342d3234203d3e203134373534.roa
File:                     3138362e3135312e39352e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier:          gLbHHGtpjQx6WXLbVoqqPM9EoxAXo+V/Pnbi/Mvinz0=
Subject key identifier:   8B:6D:BA:DB:2D:94:D4:42:CB:74:0C:E1:83:E6:0F:E5:4D:FE:E0:B4
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       3A3B84069CE0D16C9D8BC05FCFC0921220D336B3
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e39352e302f32342d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:28 +0000
ROA not before:           Tue 05 Mar 2024 17:37:28 +0000
ROA not after:            Tue 04 Mar 2025 17:42:28 +0000
asID:                     14754
IP address blocks:        186.151.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3b:84:06:9c:e0:d1:6c:9d:8b:c0:5f:cf:c0:92:12:20:d3:36:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:28 2024 GMT
            Not After : Mar  4 17:42:28 2025 GMT
        Subject: CN=8B6DBADB2D94D442CB740CE183E60FE54DFEE0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:cd:59:68:03:da:28:57:e9:ce:90:b1:30:
                    24:a4:6d:21:f5:bb:03:db:f8:5f:ac:8d:5e:f5:83:
                    69:3b:68:6c:e1:c2:89:e8:99:b0:4a:02:c6:ee:d1:
                    13:e1:04:e5:5d:a0:8c:da:e1:0e:6e:74:45:01:dc:
                    f1:ab:d7:04:f2:83:87:b6:c5:76:52:10:8f:28:48:
                    d1:c2:ef:57:f9:5c:fc:c9:f4:44:73:dd:50:9f:03:
                    86:85:e3:52:90:c8:ac:10:65:f2:b4:37:28:d3:ad:
                    36:19:b1:d0:8f:14:24:8e:b7:32:50:9b:7b:64:c7:
                    f7:c0:93:c2:78:a8:3b:3c:75:3a:16:49:b3:17:40:
                    06:5d:be:bd:3f:c5:20:fd:b5:08:f4:ed:68:de:28:
                    19:ec:78:08:3a:2f:43:bc:1c:b2:f2:9c:c3:62:5a:
                    c3:ef:ca:32:69:4f:73:2f:b4:5b:8a:a1:83:26:04:
                    78:66:ec:78:d3:41:25:1b:c9:a4:b1:c3:5a:00:36:
                    b0:90:cd:62:2a:97:3a:f0:21:20:4c:20:b2:e2:cd:
                    87:ba:6a:fa:c0:68:fc:2e:77:82:cf:fa:5c:c8:b8:
                    4b:c2:99:c7:f9:d8:af:58:19:62:c9:8d:0e:23:d6:
                    42:17:d9:a9:6a:f2:aa:4d:c8:cb:e4:85:3e:a5:cc:
                    80:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6D:BA:DB:2D:94:D4:42:CB:74:0C:E1:83:E6:0F:E5:4D:FE:E0:B4
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e39352e302f32342d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:8a:12:31:1c:ef:f4:89:51:b6:35:1b:ad:40:fd:ae:cd:36:
         e7:1f:4a:d0:c3:7b:21:23:2e:ec:d3:e6:36:fe:53:47:d2:af:
         fb:b1:19:b3:3b:08:2b:0a:3c:4c:7f:1b:9c:88:18:00:37:17:
         3f:a7:ef:04:03:b1:29:75:5c:ce:8d:f6:70:7d:b7:7b:23:5b:
         0b:e5:12:64:43:ec:1f:50:b5:4c:d9:36:9a:a1:55:8d:23:7d:
         a6:93:c0:72:8f:4e:57:9b:9b:2c:67:8b:44:7a:71:e9:64:64:
         79:c5:5f:b5:57:e7:d8:b4:9c:2b:fa:8b:e9:34:e0:7e:1e:e2:
         77:5b:18:27:a9:97:cf:6b:f0:90:4a:13:50:73:91:7b:6f:65:
         d7:7f:71:21:62:b4:e9:6b:b9:f5:f6:de:28:32:ca:b6:52:1c:
         a6:64:5a:6f:98:28:26:90:95:c8:34:a3:dd:2a:6f:0e:ff:71:
         04:a9:19:06:a1:d2:12:d5:c6:22:a7:ba:e1:c7:81:34:dc:5b:
         eb:da:31:2a:b9:54:7c:ca:8e:d7:10:56:1f:11:7b:e5:66:59:
         e5:ea:bd:dc:3e:3c:1c:ca:1c:9f:be:2f:3f:d6:c6:bc:cf:e9:
         7a:a5:fb:1c:71:12:03:d0:35:ef:d0:9a:e0:73:76:6c:26:90:
         42:cb:d2:58
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOjuEBpzg0Wydi8Bfz8CSEiDTNrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNDAzMDUxNzM3MjhaFw0yNTAzMDQxNzQyMjhaMDMxMTAvBgNV
BAMTKDhCNkRCQURCMkQ5NEQ0NDJDQjc0MENFMTgzRTYwRkU1NERGRUUwQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMs1ZaAPaKFfpzpCxMCSkbSH1
uwPb+F+sjV71g2k7aGzhwonombBKAsbu0RPhBOVdoIza4Q5udEUB3PGr1wTyg4e2
xXZSEI8oSNHC71f5XPzJ9ERz3VCfA4aF41KQyKwQZfK0NyjTrTYZsdCPFCSOtzJQ
m3tkx/fAk8J4qDs8dToWSbMXQAZdvr0/xSD9tQj07WjeKBnseAg6L0O8HLLynMNi
WsPvyjJpT3MvtFuKoYMmBHhm7HjTQSUbyaSxw1oANrCQzWIqlzrwISBMILLizYe6
avrAaPwud4LP+lzIuEvCmcf52K9YGWLJjQ4j1kIX2alq8qpNyMvkhT6lzICVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUi2262y2U1ELLdAzhg+YP5U3+4LQwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMxMzgzNjJlMzEzNTMxMmUzOTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALqXXzAN
BgkqhkiG9w0BAQsFAAOCAQEApYoSMRzv9IlRtjUbrUD9rs025x9K0MN7ISMu7NPm
Nv5TR9Kv+7EZszsIKwo8TH8bnIgYADcXP6fvBAOxKXVczo32cH23eyNbC+USZEPs
H1C1TNk2mqFVjSN9ppPAco9OV5ubLGeLRHpx6WRkecVftVfn2LScK/qL6TTgfh7i
d1sYJ6mXz2vwkEoTUHORe29l139xIWK06Wu59fbeKDLKtlIcpmRab5goJpCVyDSj
3SpvDv9xBKkZBqHSEtXGIqe64ceBNNxb69oxKrlUfMqO1xBWHxF75WZZ5eq93D48
HMocn74vP9bGvM/peqX7HHESA9A179Ca4HN2bCaQQsvSWA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org