Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3234203d3e203238313134.roa
File:                     3138362e3138332e3132302e302f32312d3234203d3e203238313134.roa (raw, json)
Hash identifier:          ywzWbQQ9NrtZvSMc+4GiNCqlSBWgGMpq8Ich85dYpnw=
Subject key identifier:   DB:13:A1:28:17:33:DF:BB:BC:01:BF:D5:9B:17:18:14:01:56:AA:E4
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       61BBD49D45467076669B400A4D54985378132862
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3234203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:17 +0000
ROA not before:           Tue 05 Mar 2024 17:53:17 +0000
ROA not after:            Tue 04 Mar 2025 17:58:17 +0000
asID:                     28114
IP address blocks:        186.183.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bb:d4:9d:45:46:70:76:66:9b:40:0a:4d:54:98:53:78:13:28:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:17 2024 GMT
            Not After : Mar  4 17:58:17 2025 GMT
        Subject: CN=DB13A1281733DFBBBC01BFD59B1718140156AAE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:dd:29:c5:66:c5:cb:59:ee:20:45:cf:a4:
                    90:a2:18:a4:dc:c6:7f:4b:b0:3c:f8:cf:aa:84:e8:
                    e3:93:22:7b:fd:7e:8e:c2:2f:e7:ae:3a:40:2f:10:
                    df:3f:7c:73:62:11:7c:f4:c2:da:56:e2:a6:e9:bc:
                    1c:c1:f1:61:94:dc:e8:46:af:67:a8:8d:f8:11:77:
                    9a:07:b4:ff:11:fc:43:50:cd:94:4d:b6:13:8f:16:
                    5c:00:14:71:c0:67:56:98:49:f0:c9:cb:6f:76:2a:
                    63:ce:14:c8:c4:2a:05:89:1f:85:4c:e3:19:2a:62:
                    91:58:46:7a:48:d1:85:7c:42:07:54:69:5d:f0:7b:
                    ea:62:92:06:f8:46:bf:f4:ae:c7:27:48:ce:36:a4:
                    49:77:b7:89:4c:dc:ab:20:d9:37:a9:c6:99:a7:35:
                    3c:95:2e:ce:dd:49:9f:0f:b7:8e:3f:c7:db:f5:27:
                    8a:cb:df:4f:60:57:e7:14:91:78:40:aa:16:81:f6:
                    25:b3:e4:4a:5e:06:15:c5:e0:83:da:78:a9:37:18:
                    ad:af:dc:50:e1:ee:ba:39:33:94:4d:b9:4e:ec:63:
                    a6:cc:18:f7:e7:2d:6c:2d:d5:29:2e:a0:85:63:eb:
                    a0:66:fc:d7:eb:24:08:94:da:3b:f8:4f:b9:fc:71:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:13:A1:28:17:33:DF:BB:BC:01:BF:D5:9B:17:18:14:01:56:AA:E4
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:10:9a:55:5a:bd:c1:6b:86:bc:ca:a1:a2:6e:82:98:49:2d:
         52:d6:b2:5b:88:a0:43:a0:b5:58:c0:f0:1d:66:1f:f6:b3:72:
         44:1e:71:cf:8f:ba:04:07:54:de:a8:52:54:e5:6a:6c:a9:08:
         36:d8:ac:8a:3f:de:e1:98:b2:fd:ad:64:1f:99:af:18:7d:7f:
         f9:e8:60:06:94:c3:a7:6f:17:80:06:fd:0c:e3:c5:5d:3a:63:
         51:c3:af:1e:49:9e:a2:20:68:19:fb:61:6c:95:63:59:33:b2:
         32:cb:8b:cc:26:93:92:76:6b:de:84:76:b9:67:2a:22:93:f1:
         65:29:d6:3e:9d:1c:09:1a:e8:9c:97:50:3e:cc:db:09:fa:a9:
         73:45:94:2c:bd:48:95:e6:a0:cf:9f:14:81:21:cc:d1:43:e3:
         1b:9d:04:ed:8d:8e:fc:60:0c:f0:f0:e9:59:ce:ce:a9:ea:20:
         2b:3a:9f:b8:a8:38:02:a2:b0:9f:dc:70:5c:50:7c:e2:3d:6a:
         55:ec:ad:b0:bb:d5:b3:91:c1:66:14:85:77:1f:e2:56:bf:6b:
         6e:ff:b9:71:90:d8:f3:8b:3a:54:68:bd:a4:fd:be:d7:b5:c2:
         2b:6c:c4:7c:67:2a:e3:1b:5c:6d:27:01:5c:96:f7:71:5b:09:
         b2:37:93:9e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYbvUnUVGcHZmm0AKTVSYU3gTKGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNDAzMDUxNzUzMTdaFw0yNTAzMDQxNzU4MTdaMDMxMTAvBgNV
BAMTKERCMTNBMTI4MTczM0RGQkJCQzAxQkZENTlCMTcxODE0MDE1NkFBRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0t0pxWbFy1nuIEXPpJCiGKTc
xn9LsDz4z6qE6OOTInv9fo7CL+euOkAvEN8/fHNiEXz0wtpW4qbpvBzB8WGU3OhG
r2eojfgRd5oHtP8R/ENQzZRNthOPFlwAFHHAZ1aYSfDJy292KmPOFMjEKgWJH4VM
4xkqYpFYRnpI0YV8QgdUaV3we+pikgb4Rr/0rscnSM42pEl3t4lM3Ksg2Tepxpmn
NTyVLs7dSZ8Pt44/x9v1J4rL309gV+cUkXhAqhaB9iWz5EpeBhXF4IPaeKk3GK2v
3FDh7ro5M5RNuU7sY6bMGPfnLWwt1SkuoIVj66Bm/NfrJAiU2jv4T7n8cQgrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2xOhKBcz37u8Ab/VmxcYFAFWquQwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMxMzgzNjJlMzEzODMzMmUzMTMyMzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzEzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDurd4
MA0GCSqGSIb3DQEBCwUAA4IBAQAhEJpVWr3Ba4a8yqGiboKYSS1S1rJbiKBDoLVY
wPAdZh/2s3JEHnHPj7oEB1TeqFJU5WpsqQg22KyKP97hmLL9rWQfma8YfX/56GAG
lMOnbxeABv0M48VdOmNRw68eSZ6iIGgZ+2FslWNZM7Iyy4vMJpOSdmvehHa5Zyoi
k/FlKdY+nRwJGuicl1A+zNsJ+qlzRZQsvUiV5qDPnxSBIczRQ+MbnQTtjY78YAzw
8OlZzs6p6iArOp+4qDgCorCf3HBcUHziPWpV7K2wu9WzkcFmFIV3H+JWv2tu/7lx
kNjzizpUaL2k/b7XtcIrbMR8ZyrjG1xtJwFclvdxWwmyN5Oe
-----END CERTIFICATE-----
Generated at Thu May 2 04:01:24 2024 by rpki-client on console-fra.rpki-client.org