Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3139322e302f32302d3234203d3e203532323238.roa
File:                     3138362e3135392e3139322e302f32302d3234203d3e203532323238.roa (raw, json)
Hash identifier:          8DnBmw8PQsWS+F0ktTdSSnnLXvSy0riIaYIuIHF9UOo=
Subject key identifier:   4D:15:1C:BE:49:30:AD:74:5C:9E:47:CE:49:23:17:97:0F:0C:B1:79
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       54A4C501D296780709EB0E3463AE4242F264511C
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3139322e302f32302d3234203d3e203532323238.roa
Signing time:             Tue 05 Mar 2024 17:54:24 +0000
ROA not before:           Tue 05 Mar 2024 17:49:24 +0000
ROA not after:            Tue 04 Mar 2025 17:54:24 +0000
asID:                     52228
IP address blocks:        186.159.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a4:c5:01:d2:96:78:07:09:eb:0e:34:63:ae:42:42:f2:64:51:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Mar  5 17:49:24 2024 GMT
            Not After : Mar  4 17:54:24 2025 GMT
        Subject: CN=4D151CBE4930AD745C9E47CE492317970F0CB179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:cd:7a:8b:8b:a0:89:3b:7d:29:55:2a:d6:5f:
                    61:24:07:0e:e1:36:ba:bb:b4:0c:19:52:82:a8:24:
                    42:ce:ee:52:1b:9c:51:0a:f1:4c:bf:c7:d3:3e:d2:
                    d1:eb:c4:bc:da:30:0c:16:88:e6:60:16:78:b1:c2:
                    92:20:db:3b:39:ab:5e:bb:35:f4:9a:d0:4f:05:6f:
                    9f:14:c9:72:55:18:dd:5e:c5:f5:cb:7a:ba:f9:54:
                    ac:01:29:bf:57:00:22:d0:a1:ae:9b:2c:e4:bd:5b:
                    0b:d4:b0:65:66:62:f2:13:20:61:53:43:3e:dd:84:
                    b0:4b:9b:3c:23:7b:f6:54:4d:43:63:ea:39:aa:c4:
                    94:69:5d:51:8e:63:f1:ff:7d:4c:4c:2e:a6:a0:b4:
                    56:58:8f:b4:3b:09:5e:24:ea:d8:da:da:40:18:a3:
                    ba:b8:be:37:ca:8d:0c:e1:fb:69:01:ed:9a:fe:e0:
                    e8:5a:fe:d4:0d:2e:22:31:0d:65:b7:3f:be:90:3b:
                    96:eb:09:b0:8e:bb:89:52:14:be:df:1e:e6:f2:fc:
                    54:4b:b3:48:a3:63:72:6e:7e:44:2e:97:0f:af:1c:
                    d9:63:f2:ec:a7:81:9e:56:fc:5a:38:00:4e:e4:3f:
                    e7:a6:33:46:e0:b0:9c:f9:fb:ea:31:ad:ba:45:65:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:15:1C:BE:49:30:AD:74:5C:9E:47:CE:49:23:17:97:0F:0C:B1:79
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3139322e302f32302d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:92:b8:59:4a:32:9f:4d:0d:a8:71:7c:7d:73:57:f4:30:d9:
         7c:04:15:36:cd:6c:b2:c2:57:4b:04:14:0b:16:05:55:f9:2d:
         66:38:aa:fc:0b:29:33:bd:03:a1:fd:ee:de:72:c1:b8:8d:94:
         73:36:57:06:44:64:d4:73:de:8b:ee:2f:54:74:8e:a8:7c:72:
         d7:d1:6d:09:4f:78:75:1d:36:2d:c3:98:fb:22:7b:c8:78:0a:
         6d:d1:1b:ad:0e:51:74:e6:be:8a:d6:25:e4:2a:9c:85:1a:35:
         8b:c8:c5:8e:8e:d5:25:8a:02:dc:1b:8e:aa:01:4f:3f:85:59:
         ac:c3:16:99:e7:77:12:6c:40:5f:cf:5d:e1:ee:e2:36:0f:b6:
         1e:7a:96:aa:6f:20:ce:32:53:be:13:ca:09:cc:fc:13:7e:33:
         3f:86:85:d2:d8:d4:52:20:ab:28:de:5a:9c:ec:08:ca:a9:b9:
         b1:46:c4:2e:18:ce:91:e9:35:31:e5:4f:85:82:d5:a0:55:6b:
         8e:e1:e3:e3:eb:e3:3a:a5:99:ca:db:4f:b3:36:1a:e8:c6:0d:
         22:5f:2a:2d:1a:9d:04:fa:60:30:a1:39:75:d3:12:bf:ff:5c:
         82:f4:dc:7a:09:12:58:f2:f7:29:7f:71:a4:d4:06:83:f9:64:
         ca:1f:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 00:33:42 2024 by rpki-client on console-fra.rpki-client.org