Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e38382e302f32342d3234203d3e203238313134.roa
File:                     3138362e3138332e38382e302f32342d3234203d3e203238313134.roa (raw, json)
Hash identifier:          7+efhiGZbY0EwFcCxo9W1XQVKJCOyRKTURL9GiZizas=
Subject key identifier:   DC:AB:CA:F0:E1:F1:24:09:A3:C7:72:95:13:24:79:6D:BA:95:A4:90
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       4E0A7A880F9567A01D609701D4838A9B953AF885
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e38382e302f32342d3234203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:12 +0000
ROA not before:           Tue 05 Mar 2024 17:53:12 +0000
ROA not after:            Tue 04 Mar 2025 17:58:12 +0000
asID:                     28114
IP address blocks:        186.183.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0a:7a:88:0f:95:67:a0:1d:60:97:01:d4:83:8a:9b:95:3a:f8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:12 2024 GMT
            Not After : Mar  4 17:58:12 2025 GMT
        Subject: CN=DCABCAF0E1F12409A3C772951324796DBA95A490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:96:1c:fa:d5:6b:d5:3b:ff:a2:35:b2:7c:
                    1d:21:2c:e2:44:4a:24:f7:c4:99:94:4b:5d:23:20:
                    fe:0b:d3:6e:82:72:d9:27:f4:c3:e4:2c:e6:00:20:
                    a6:27:52:cd:76:cb:03:4e:03:0b:1f:d5:bb:d4:7d:
                    77:7a:8b:20:db:72:a7:46:54:08:7a:77:1b:6c:69:
                    e9:07:22:39:65:bb:ca:a8:3c:b6:92:0d:b7:62:13:
                    4c:9d:ae:0e:dd:37:e2:08:62:b9:d3:c6:47:01:0d:
                    bc:df:6e:04:ee:86:ec:72:9b:65:e3:e4:61:eb:79:
                    f7:83:ae:70:14:ce:eb:e5:95:56:51:c6:7f:23:21:
                    ce:aa:16:42:3e:94:35:5a:b2:ad:ff:66:e8:c4:f7:
                    94:72:dc:71:b9:48:8a:05:24:6f:de:05:dc:e0:bd:
                    9e:22:ed:dc:3b:c5:74:e0:4e:ef:af:d9:cb:01:8e:
                    15:8a:6a:2d:d3:5d:48:19:c9:84:9c:48:a2:9e:c7:
                    a6:bd:c1:ba:50:7d:8d:b5:45:5f:31:10:38:2d:ab:
                    23:06:ec:8f:02:65:b8:34:a6:fa:f5:d1:01:02:a9:
                    06:71:5e:0f:40:e2:34:c8:97:e9:20:68:b6:87:15:
                    8f:4d:ba:5c:5f:16:30:67:f6:46:d0:69:25:74:14:
                    52:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AB:CA:F0:E1:F1:24:09:A3:C7:72:95:13:24:79:6D:BA:95:A4:90
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e38382e302f32342d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:4a:dc:94:30:82:1c:3b:cb:8d:6d:d4:ee:32:c7:2d:85:85:
         88:55:4c:9e:38:60:52:2f:a7:42:24:4e:44:17:a4:3d:c1:af:
         8c:58:73:be:19:1e:45:ec:e7:c5:00:61:df:e6:0c:ff:f5:2f:
         a3:e3:f5:12:6b:a5:cd:22:b7:0f:21:d7:f6:a1:b3:38:3f:6c:
         19:b3:57:f0:d4:03:48:69:98:59:3d:7b:5a:84:a6:de:a9:8c:
         20:3e:b9:df:3f:e8:be:5a:29:8e:be:99:98:21:86:be:33:39:
         63:53:80:27:c7:da:3f:1a:84:e4:20:32:f1:36:f5:e4:66:87:
         44:16:fd:d9:2f:da:e6:6b:98:09:c3:99:b2:39:7c:78:2a:19:
         4e:c6:c2:18:7e:4a:12:fc:bf:4a:72:0e:d9:ed:b7:71:49:6b:
         1c:d6:12:e4:74:00:0a:62:7f:3c:09:9a:85:92:fe:49:ea:cd:
         d0:fa:df:c3:e6:81:19:f5:66:57:e2:96:2e:75:84:a9:d8:80:
         ba:8b:d6:9c:8c:18:99:66:8a:3a:89:b6:ca:b8:1e:b9:68:91:
         5e:5b:7b:df:ad:c0:2f:90:52:41:24:18:2c:41:5e:ba:bd:9f:
         ef:4d:0f:50:c8:74:e7:53:44:86:18:c0:27:18:ad:d8:7f:e6:
         14:b1:2a:cd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTgp6iA+VZ6AdYJcB1IOKm5U6+IUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNDAzMDUxNzUzMTJaFw0yNTAzMDQxNzU4MTJaMDMxMTAvBgNV
BAMTKERDQUJDQUYwRTFGMTI0MDlBM0M3NzI5NTEzMjQ3OTZEQkE5NUE0OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChEZYc+tVr1Tv/ojWyfB0hLOJE
SiT3xJmUS10jIP4L026Cctkn9MPkLOYAIKYnUs12ywNOAwsf1bvUfXd6iyDbcqdG
VAh6dxtsaekHIjllu8qoPLaSDbdiE0ydrg7dN+IIYrnTxkcBDbzfbgTuhuxym2Xj
5GHrefeDrnAUzuvllVZRxn8jIc6qFkI+lDVasq3/ZujE95Ry3HG5SIoFJG/eBdzg
vZ4i7dw7xXTgTu+v2csBjhWKai3TXUgZyYScSKKex6a9wbpQfY21RV8xEDgtqyMG
7I8CZbg0pvr10QECqQZxXg9A4jTIl+kgaLaHFY9NulxfFjBn9kbQaSV0FFINAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3KvK8OHxJAmjx3KVEyR5bbqVpJAwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMxMzgzNjJlMzEzODMzMmUzODM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMxMzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALq3WDAN
BgkqhkiG9w0BAQsFAAOCAQEAA0rclDCCHDvLjW3U7jLHLYWFiFVMnjhgUi+nQiRO
RBekPcGvjFhzvhkeReznxQBh3+YM//Uvo+P1EmulzSK3DyHX9qGzOD9sGbNX8NQD
SGmYWT17WoSm3qmMID653z/ovlopjr6ZmCGGvjM5Y1OAJ8faPxqE5CAy8Tb15GaH
RBb92S/a5muYCcOZsjl8eCoZTsbCGH5KEvy/SnIO2e23cUlrHNYS5HQACmJ/PAma
hZL+SerN0Prfw+aBGfVmV+KWLnWEqdiAuovWnIwYmWaKOom2yrgeuWiRXlt7363A
L5BSQSQYLEFeur2f700PUMh051NEhhjAJxit2H/mFLEqzQ==
-----END CERTIFICATE-----
Generated at Thu May 2 04:01:24 2024 by rpki-client on console-fra.rpki-client.org