Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3139322e302f31382d3234203d3e203532323238.roa
File:                     3138362e31352e3139322e302f31382d3234203d3e203532323238.roa (raw, json)
Hash identifier:          lB1+hBNPtDQyT0gXDbA/DITBOtsw8DkHwyvnByK3O0I=
Subject key identifier:   0C:CA:A9:F7:77:7C:0C:94:7C:FB:43:DD:51:50:71:A5:CF:6B:8B:15
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       0C95164986003DC0C34B6626F2D635FB1085AFC7
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3139322e302f31382d3234203d3e203532323238.roa
Signing time:             Tue 05 Mar 2024 17:54:23 +0000
ROA not before:           Tue 05 Mar 2024 17:49:23 +0000
ROA not after:            Tue 04 Mar 2025 17:54:23 +0000
asID:                     52228
IP address blocks:        186.15.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:95:16:49:86:00:3d:c0:c3:4b:66:26:f2:d6:35:fb:10:85:af:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Mar  5 17:49:23 2024 GMT
            Not After : Mar  4 17:54:23 2025 GMT
        Subject: CN=0CCAA9F7777C0C947CFB43DD515071A5CF6B8B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:86:da:d8:cf:5b:50:72:7e:79:5e:59:3b:
                    fd:af:13:59:3b:42:f2:50:7e:c1:9e:0c:c5:0a:91:
                    3e:0e:39:95:be:3e:6d:b5:95:0e:0c:28:dd:30:52:
                    b5:6d:15:e2:0a:f0:5e:4e:3f:12:d1:f6:7c:9a:43:
                    ab:5f:04:ec:a5:1a:80:97:85:28:e5:5a:57:51:09:
                    49:c9:11:5c:d5:46:88:03:c7:4d:9e:f1:18:62:37:
                    97:c8:09:d4:63:7b:9c:92:80:26:38:52:bd:8c:55:
                    d9:7e:14:80:f3:2c:ea:56:59:b0:50:3b:6c:a8:ea:
                    28:22:4f:e8:66:08:db:c3:2d:15:d3:98:58:f9:09:
                    40:78:0f:1a:db:bf:7c:6b:f4:e7:30:89:29:10:a1:
                    1e:fb:89:58:a8:f3:cb:f2:34:3d:4c:69:17:15:b6:
                    bd:c7:ac:a5:23:28:02:19:f8:f9:a2:75:58:d4:0a:
                    22:59:d0:d7:3f:f3:63:4a:50:a8:3e:2c:7a:a7:16:
                    3e:7c:df:ae:bb:fb:1d:13:51:aa:ca:df:fd:df:80:
                    b2:51:29:11:2e:75:ca:54:43:b3:65:5c:10:58:34:
                    dc:5d:e6:a1:13:3e:23:2a:41:13:31:bc:26:e5:27:
                    9b:e9:85:2c:cb:0f:06:aa:34:b3:ce:05:33:5f:94:
                    a5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CA:A9:F7:77:7C:0C:94:7C:FB:43:DD:51:50:71:A5:CF:6B:8B:15
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e3139322e302f31382d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.15.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         82:0f:08:8c:8b:c6:e0:f3:92:5e:4e:b4:05:09:e1:2e:2f:3e:
         bf:48:df:a7:61:1b:ed:b3:83:54:d4:af:1d:27:b3:a2:0e:c7:
         f0:f7:a7:17:5d:e4:d0:ec:60:4b:51:cb:2b:d0:f9:cb:4d:64:
         52:37:e6:94:f9:3f:7e:17:08:4e:fa:61:f1:b2:3d:4e:45:d5:
         e5:bb:97:e1:e8:c5:03:6d:7e:5a:49:f3:2d:1d:75:7f:40:64:
         a6:b3:67:05:68:e8:99:38:5c:d0:be:11:58:b1:a6:4d:20:42:
         bc:eb:f7:74:6f:ca:34:08:ac:95:08:b9:ac:83:d9:52:45:e1:
         d5:a3:ef:47:c6:f5:50:8d:36:ef:a5:e3:90:a6:8e:93:20:53:
         6b:9b:22:1d:5f:a4:80:8a:23:15:85:ea:fc:33:2c:2b:c8:eb:
         c5:04:50:a9:0e:fd:53:11:6e:e4:31:89:42:ee:f7:e3:28:2a:
         8c:d9:2f:22:c0:5b:2f:aa:87:f1:5e:02:77:b7:6c:ec:54:ec:
         ed:6c:f7:0b:02:3d:68:08:21:05:ea:68:b5:9d:67:27:df:08:
         79:07:85:16:e8:96:00:7f:32:c3:92:d1:06:fe:47:06:9c:25:
         c7:8d:75:cc:29:3a:2a:bc:7a:7b:81:07:37:cc:28:1f:10:0b:
         8d:35:54:fb
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDJUWSYYAPcDDS2Ym8tY1+xCFr8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxMUFDQkE3MkU4MEMwMEZFQzEzRDMwQUM2NzYxMzhB
N0FDNDhDNzAeFw0yNDAzMDUxNzQ5MjNaFw0yNTAzMDQxNzU0MjNaMDMxMTAvBgNV
BAMTKDBDQ0FBOUY3Nzc3QzBDOTQ3Q0ZCNDNERDUxNTA3MUE1Q0Y2QjhCMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDoba2M9bUHJ+eV5ZO/2vE1k7
QvJQfsGeDMUKkT4OOZW+Pm21lQ4MKN0wUrVtFeIK8F5OPxLR9nyaQ6tfBOylGoCX
hSjlWldRCUnJEVzVRogDx02e8RhiN5fICdRje5ySgCY4Ur2MVdl+FIDzLOpWWbBQ
O2yo6igiT+hmCNvDLRXTmFj5CUB4Dxrbv3xr9OcwiSkQoR77iVio88vyND1MaRcV
tr3HrKUjKAIZ+PmidVjUCiJZ0Nc/82NKUKg+LHqnFj583667+x0TUarK3/3fgLJR
KREudcpUQ7NlXBBYNNxd5qETPiMqQRMxvCblJ5vphSzLDwaqNLPOBTNflKU7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUDMqp93d8DJR8+0PdUVBxpc9rixUwHwYDVR0j
BBgwFoAU9RGsunLoDAD+wT0wrGdhOKesSMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUExQTQ3QzgyRTU0NDM1M0U0QkQzNjc5RDI1NTI4REQz
MzZDMEMzQkU3RjlDOEI4ODQ1NEU3QzQxN0I2OUZGLzAvRjUxMUFDQkE3MkU4MEMw
MEZFQzEzRDMwQUM2NzYxMzhBN0FDNDhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTExQUNCQTcyRTgwQzAwRkVD
MTNEMzBBQzY3NjEzOEE3QUM0OEM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVBMUE0N0M4MkU1NDQzNTNFNEJEMzY3OUQyNTUyOEREMzM2QzBDM0JF
N0Y5QzhCODg0NTRFN0M0MTdCNjlGRi8wLzMxMzgzNjJlMzEzNTJlMzEzOTMyMmUz
MDJmMzEzODJkMzIzNDIwM2QzZTIwMzUzMjMyMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBroPwDAN
BgkqhkiG9w0BAQsFAAOCAQEAgg8IjIvG4POSXk60BQnhLi8+v0jfp2Eb7bODVNSv
HSezog7H8PenF13k0OxgS1HLK9D5y01kUjfmlPk/fhcITvph8bI9TkXV5buX4ejF
A21+WknzLR11f0BkprNnBWjomThc0L4RWLGmTSBCvOv3dG/KNAislQi5rIPZUkXh
1aPvR8b1UI0276XjkKaOkyBTa5siHV+kgIojFYXq/DMsK8jrxQRQqQ79UxFu5DGJ
Qu734ygqjNkvIsBbL6qH8V4Cd7ds7FTs7Wz3CwI9aAghBepotZ1nJ98IeQeFFuiW
AH8yw5LRBv5HBpwlx411zCk6Krx6e4EHN8woHxALjTVU+w==
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org