Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3136302e302f32302d3234203d3e203532323238.roa
File:                     3138362e31352e3136302e302f32302d3234203d3e203532323238.roa (raw, json)
Hash identifier:          JQUXZn9LZhhnReD39uU43izcNp4AnnV4UYm0ZnE2Xfg=
Subject key identifier:   A4:1A:E3:DA:85:59:C5:18:42:0C:51:9A:3F:4C:81:66:F6:BF:62:1B
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       762ECE0ECE5F1B6F0EC54E61C85B3CB35A5DF5
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3136302e302f32302d3234203d3e203532323238.roa
Signing time:             Tue 05 Mar 2024 17:54:27 +0000
ROA not before:           Tue 05 Mar 2024 17:49:27 +0000
ROA not after:            Tue 04 Mar 2025 17:54:27 +0000
asID:                     52228
IP address blocks:        186.15.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2e:ce:0e:ce:5f:1b:6f:0e:c5:4e:61:c8:5b:3c:b3:5a:5d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Mar  5 17:49:27 2024 GMT
            Not After : Mar  4 17:54:27 2025 GMT
        Subject: CN=A41AE3DA8559C518420C519A3F4C8166F6BF621B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:4b:c3:b1:56:a9:77:5a:f9:ad:55:de:51:
                    4c:98:26:1a:49:60:d4:30:d1:1a:43:d4:bc:e6:bb:
                    0c:e3:81:7e:0b:da:61:1d:21:cd:c7:77:6a:42:20:
                    b2:57:6e:c7:42:b2:03:b7:c7:71:ac:86:7f:5d:44:
                    fd:f8:00:02:fe:f9:a2:b5:8e:cb:08:78:84:35:3a:
                    20:de:33:27:a7:f6:14:a4:62:63:8f:b8:e7:10:2a:
                    e9:57:28:f0:53:01:8f:b6:a2:78:80:99:9a:d5:54:
                    d8:65:aa:af:e9:28:de:c3:94:d5:4c:bc:97:f5:eb:
                    e0:6f:ca:64:66:e0:78:9d:b9:f1:fb:9a:8e:22:4c:
                    fc:4c:08:4f:8c:10:f1:74:12:d1:cb:78:81:53:88:
                    53:12:2e:fb:9f:cb:90:14:b9:0d:f6:4e:f5:5b:e4:
                    c4:51:14:5c:6f:48:ea:52:dd:0f:63:53:10:08:f2:
                    d4:97:b9:20:33:41:da:2a:75:32:7b:f7:1a:5c:af:
                    73:50:7a:69:d4:91:e5:f1:b0:77:2b:d2:4e:87:0c:
                    da:64:13:88:31:09:78:32:6e:de:b1:15:bf:96:61:
                    47:f8:ae:c6:e3:e5:fe:63:62:08:b2:88:67:d1:83:
                    0e:12:84:48:78:a4:2d:56:97:9e:d9:2e:e0:7b:24:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1A:E3:DA:85:59:C5:18:42:0C:51:9A:3F:4C:81:66:F6:BF:62:1B
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3136302e302f32302d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.15.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:e6:e8:8a:f1:af:27:95:c6:aa:dc:8d:4b:e5:09:9c:27:c7:
         76:f7:d9:4f:ca:74:f9:08:d0:be:23:6f:ae:a0:3d:fe:6d:23:
         9f:4f:a8:d3:17:80:60:cd:da:8c:14:47:a0:7a:f8:fb:77:25:
         fa:9c:d6:d9:f1:46:91:19:b0:80:a7:a0:fd:89:47:10:84:1a:
         26:36:7e:27:76:d2:01:11:f2:d0:26:b3:e2:5c:2f:74:a3:50:
         fe:d4:ac:2c:cb:3f:38:d4:fb:20:af:a2:eb:a6:50:5e:b9:53:
         bc:88:70:e2:f5:50:4f:65:8e:bd:ef:1d:7a:f2:50:23:99:0c:
         00:3e:bc:a0:60:4a:7d:c5:1d:89:7f:9c:53:ad:10:df:4f:22:
         b3:ea:d4:9e:12:b6:91:a4:c0:b7:ac:99:f7:b9:ee:2c:9c:be:
         67:63:46:e5:1c:b1:e6:f6:33:70:9a:83:9b:ae:2c:c3:84:f4:
         73:f4:9a:69:96:4c:70:8b:0b:4c:b0:0b:23:bd:85:b1:9d:86:
         f6:3d:49:0e:df:9d:8b:86:a0:94:f3:fa:bb:07:6b:54:a0:45:
         4e:35:cd:e6:ae:2d:f4:ed:9c:43:b7:98:28:06:d2:a3:ee:0a:
         99:8f:75:db:55:c7:ad:9d:be:85:c1:a9:d2:82:f5:aa:11:86:
         40:06:05:84
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgITdi7ODs5fG28OxU5hyFs8s1pd9TANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhGNTExQUNCQTcyRTgwQzAwRkVDMTNEMzBBQzY3NjEzOEE3
QUM0OEM3MB4XDTI0MDMwNTE3NDkyN1oXDTI1MDMwNDE3NTQyN1owMzExMC8GA1UE
AxMoQTQxQUUzREE4NTU5QzUxODQyMEM1MTlBM0Y0QzgxNjZGNkJGNjIxQjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMu+S8OxVql3WvmtVd5RTJgmGklg
1DDRGkPUvOa7DOOBfgvaYR0hzcd3akIgsldux0KyA7fHcayGf11E/fgAAv75orWO
ywh4hDU6IN4zJ6f2FKRiY4+45xAq6Vco8FMBj7aieICZmtVU2GWqr+ko3sOU1Uy8
l/Xr4G/KZGbgeJ258fuajiJM/EwIT4wQ8XQS0ct4gVOIUxIu+5/LkBS5DfZO9Vvk
xFEUXG9I6lLdD2NTEAjy1Je5IDNB2ip1Mnv3Glyvc1B6adSR5fGwdyvSTocM2mQT
iDEJeDJu3rEVv5ZhR/iuxuPl/mNiCLKIZ9GDDhKESHikLVaXntku4HskYSMCAwEA
AaOCAsgwggLEMB0GA1UdDgQWBBSkGuPahVnFGEIMUZo/TIFm9r9iGzAfBgNVHSME
GDAWgBT1Eay6cugMAP7BPTCsZ2E4p6xIxzAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljLzM1QTFBNDdDODJFNTQ0MzUzRTRCRDM2NzlEMjU1MjhERDMz
NkMwQzNCRTdGOUM4Qjg4NDU0RTdDNDE3QjY5RkYvMC9GNTExQUNCQTcyRTgwQzAw
RkVDMTNEMzBBQzY3NjEzOEE3QUM0OEM3LmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wL0Y1MTFBQ0JBNzJFODBDMDBGRUMx
M0QzMEFDNjc2MTM4QTdBQzQ4QzcuY2VyMIHHBggrBgEFBQcBCwSBujCBtzCBtAYI
KwYBBQUHMAuGgadyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8zNUExQTQ3QzgyRTU0NDM1M0U0QkQzNjc5RDI1NTI4REQzMzZDMEMzQkU3
RjlDOEI4ODQ1NEU3QzQxN0I2OUZGLzAvMzEzODM2MmUzMTM1MmUzMTM2MzAyZTMw
MmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMyMzIzMjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEug+gMA0G
CSqGSIb3DQEBCwUAA4IBAQA+5uiK8a8nlcaq3I1L5QmcJ8d299lPynT5CNC+I2+u
oD3+bSOfT6jTF4BgzdqMFEegevj7dyX6nNbZ8UaRGbCAp6D9iUcQhBomNn4ndtIB
EfLQJrPiXC90o1D+1Kwsyz841Psgr6LrplBeuVO8iHDi9VBPZY697x168lAjmQwA
PrygYEp9xR2Jf5xTrRDfTyKz6tSeEraRpMC3rJn3ue4snL5nY0blHLHm9jNwmoOb
rizDhPRz9JpplkxwiwtMsAsjvYWxnYb2PUkO352LhqCU8/q7B2tUoEVONc3mri30
7ZxDt5goBtKj7gqZj3XbVcetnb6FwanSgvWqEYZABgWE
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org