Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3132382e302f31382d3234203d3e203532323238.roa
File:                     3138362e3135392e3132382e302f31382d3234203d3e203532323238.roa (raw, json)
Hash identifier:          XUi+STt5NoptPf0c9TKr9nssx06LxoDvyyLCvjsxJa0=
Subject key identifier:   E1:AF:0F:BE:EB:58:E8:1E:0B:8E:08:D9:65:B6:A1:58:46:A1:94:AD
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       69C3DCC32B0F89FF19D773A2BDB539BE34473FD7
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3132382e302f31382d3234203d3e203532323238.roa
Signing time:             Tue 05 Mar 2024 17:54:25 +0000
ROA not before:           Tue 05 Mar 2024 17:49:25 +0000
ROA not after:            Tue 04 Mar 2025 17:54:25 +0000
asID:                     52228
IP address blocks:        186.159.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c3:dc:c3:2b:0f:89:ff:19:d7:73:a2:bd:b5:39:be:34:47:3f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Mar  5 17:49:25 2024 GMT
            Not After : Mar  4 17:54:25 2025 GMT
        Subject: CN=E1AF0FBEEB58E81E0B8E08D965B6A15846A194AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:30:86:c5:2a:30:a0:00:fc:84:5b:8d:f7:d5:
                    c8:b2:13:f6:ea:e0:5c:21:cc:b0:7b:74:87:93:18:
                    a2:c4:96:88:94:7e:e1:83:e9:cc:a3:90:cc:30:61:
                    f3:15:91:9b:58:95:49:84:cf:90:39:e8:4e:4b:f6:
                    cd:1a:33:e0:fe:e0:c3:75:fa:bb:5b:5c:46:5f:4e:
                    fa:52:93:75:57:b0:3e:7b:38:5f:d1:a3:5b:e3:ca:
                    3c:31:46:c6:ce:c6:4f:ea:30:01:da:ac:98:8a:60:
                    fb:9d:52:2c:cb:ce:bd:85:3e:0f:5d:0d:08:6f:f5:
                    19:4f:39:24:73:e9:ef:22:68:48:fa:63:eb:c4:c4:
                    73:30:b6:d4:bf:b3:9e:26:e0:c9:65:63:eb:20:94:
                    51:8d:a6:45:07:5e:b3:a7:dd:8b:16:b2:ad:70:27:
                    35:43:88:f6:03:ef:f5:f7:bb:cc:4b:e5:c8:33:09:
                    5b:c0:1d:a2:92:04:2e:62:34:b6:0e:2e:06:2a:db:
                    ae:55:2b:1a:00:fa:15:ef:2f:83:d4:c3:ae:e1:ec:
                    3c:e7:35:3e:06:d6:56:fb:3e:88:e0:ad:9b:bf:d2:
                    6e:5a:1c:68:a4:64:11:f5:35:33:94:4b:ad:bf:21:
                    5c:aa:84:5c:8c:75:e8:f0:c8:c2:13:ee:13:74:d8:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AF:0F:BE:EB:58:E8:1E:0B:8E:08:D9:65:B6:A1:58:46:A1:94:AD
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3132382e302f31382d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         64:61:b5:2c:ed:79:2c:5e:e8:ab:e1:d6:57:a5:f3:f0:79:9b:
         95:4c:16:98:ce:8b:e6:d4:2d:0f:5a:13:29:e6:e7:10:a4:85:
         81:07:22:46:5b:90:c0:4a:70:67:71:ff:d7:a0:66:cd:71:b6:
         ad:fe:e0:4e:32:74:5f:0c:38:a9:bf:37:8a:58:18:13:12:67:
         2a:ed:3f:45:d6:4d:fc:6d:0c:93:52:00:24:34:c7:92:eb:07:
         5b:29:6a:07:f5:55:fc:b9:c5:16:2d:86:3d:49:96:ee:2c:db:
         13:df:c6:9b:5e:09:72:e0:2c:a6:c7:4e:c7:74:18:6f:e9:ee:
         34:6a:67:ba:53:af:51:db:0b:eb:ec:24:86:ff:9c:01:15:f0:
         57:2d:74:e2:c3:94:d1:66:68:f4:9e:70:fe:5a:e9:41:af:17:
         c3:cf:91:a5:85:45:75:da:5b:8b:b1:8f:dd:e7:6e:db:e4:5a:
         43:20:3a:02:4e:9b:8f:62:8f:f1:f6:c4:92:68:d4:ee:05:12:
         ef:ac:1b:72:9b:cd:7d:d8:f4:07:8c:b3:17:e4:5d:0b:41:22:
         fb:06:0b:e6:57:8f:f2:d2:a6:f6:c9:89:87:17:23:73:1f:ec:
         ab:61:1c:76:33:a8:1d:96:ae:30:db:9a:68:57:5f:bf:62:94:
         34:89:98:32
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUacPcwysPif8Z13OivbU5vjRHP9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxMUFDQkE3MkU4MEMwMEZFQzEzRDMwQUM2NzYxMzhB
N0FDNDhDNzAeFw0yNDAzMDUxNzQ5MjVaFw0yNTAzMDQxNzU0MjVaMDMxMTAvBgNV
BAMTKEUxQUYwRkJFRUI1OEU4MUUwQjhFMDhEOTY1QjZBMTU4NDZBMTk0QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhMIbFKjCgAPyEW4331ciyE/bq
4FwhzLB7dIeTGKLEloiUfuGD6cyjkMwwYfMVkZtYlUmEz5A56E5L9s0aM+D+4MN1
+rtbXEZfTvpSk3VXsD57OF/Ro1vjyjwxRsbOxk/qMAHarJiKYPudUizLzr2FPg9d
DQhv9RlPOSRz6e8iaEj6Y+vExHMwttS/s54m4MllY+sglFGNpkUHXrOn3YsWsq1w
JzVDiPYD7/X3u8xL5cgzCVvAHaKSBC5iNLYOLgYq265VKxoA+hXvL4PUw67h7Dzn
NT4G1lb7PojgrZu/0m5aHGikZBH1NTOUS62/IVyqhFyMdejwyMIT7hN02G/vAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU4a8PvutY6B4LjgjZZbahWEahlK0wHwYDVR0j
BBgwFoAU9RGsunLoDAD+wT0wrGdhOKesSMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUExQTQ3QzgyRTU0NDM1M0U0QkQzNjc5RDI1NTI4REQz
MzZDMEMzQkU3RjlDOEI4ODQ1NEU3QzQxN0I2OUZGLzAvRjUxMUFDQkE3MkU4MEMw
MEZFQzEzRDMwQUM2NzYxMzhBN0FDNDhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTExQUNCQTcyRTgwQzAwRkVD
MTNEMzBBQzY3NjEzOEE3QUM0OEM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVBMUE0N0M4MkU1NDQzNTNFNEJEMzY3OUQyNTUyOEREMzM2QzBDM0JF
N0Y5QzhCODg0NTRFN0M0MTdCNjlGRi8wLzMxMzgzNjJlMzEzNTM5MmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzNTMyMzIzMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGup+A
MA0GCSqGSIb3DQEBCwUAA4IBAQBkYbUs7XksXuir4dZXpfPweZuVTBaYzovm1C0P
WhMp5ucQpIWBByJGW5DASnBncf/XoGbNcbat/uBOMnRfDDipvzeKWBgTEmcq7T9F
1k38bQyTUgAkNMeS6wdbKWoH9VX8ucUWLYY9SZbuLNsT38abXgly4Cymx07HdBhv
6e40ame6U69R2wvr7CSG/5wBFfBXLXTiw5TRZmj0nnD+WulBrxfDz5GlhUV12luL
sY/d527b5FpDIDoCTpuPYo/x9sSSaNTuBRLvrBtym8192PQHjLMX5F0LQSL7Bgvm
V4/y0qb2yYmHFyNzH+yrYRx2M6gdlq4w25poV1+/YpQ0iZgy
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org