Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e36342e3132382e302f31372d3234203d3e203532323238.roa
File:                     3138362e36342e3132382e302f31372d3234203d3e203532323238.roa (raw, json)
Hash identifier:          ZG1GcPjac510yqVAbfJUjGtWDMOKW41G1j7WOsn0nc8=
Subject key identifier:   ED:4F:3B:D0:15:C2:51:39:37:21:84:38:F8:13:86:E0:F1:2B:A6:C5
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       4C2545B66CC4E5D6B87AF9043978232345A4D2D7
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e36342e3132382e302f31372d3234203d3e203532323238.roa
Signing time:             Tue 05 Mar 2024 17:54:24 +0000
ROA not before:           Tue 05 Mar 2024 17:49:24 +0000
ROA not after:            Tue 04 Mar 2025 17:54:24 +0000
asID:                     52228
IP address blocks:        186.64.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:25:45:b6:6c:c4:e5:d6:b8:7a:f9:04:39:78:23:23:45:a4:d2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Mar  5 17:49:24 2024 GMT
            Not After : Mar  4 17:54:24 2025 GMT
        Subject: CN=ED4F3BD015C2513937218438F81386E0F12BA6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b5:2a:70:85:db:9f:32:cf:b7:ae:44:ed:ab:
                    37:df:41:3f:ae:d1:1f:3a:2e:c4:a8:a5:c3:b9:e9:
                    9e:ea:a2:ec:81:3a:ef:d8:48:27:68:b9:4e:ca:c2:
                    fc:63:43:0b:f2:15:be:e1:8f:36:21:4a:54:60:5c:
                    e0:b0:2b:8e:4d:16:b0:6f:18:a8:f4:6b:7b:b1:db:
                    d3:e1:7c:31:99:1b:e4:1e:75:b7:f2:6b:60:75:80:
                    c9:da:12:7e:b5:98:2a:d4:00:50:ce:68:e4:36:26:
                    36:07:32:b8:b8:c0:74:60:e2:aa:3e:2d:79:dc:b9:
                    63:89:8e:c0:97:6b:73:c0:ac:d0:0c:2d:17:5f:e5:
                    38:26:04:85:4f:a7:5c:1a:ac:ba:d5:80:c6:0f:8c:
                    9f:c9:f5:ce:0c:89:71:c1:40:c6:9f:ca:f5:86:ea:
                    47:0b:f0:d7:bc:76:ec:ee:ad:29:a7:b0:ff:8b:06:
                    75:5d:d3:bb:ee:ea:36:38:44:c2:ac:6d:fd:3c:36:
                    25:2c:db:38:cd:5a:bc:68:98:20:79:9e:f4:57:ca:
                    9e:f3:b1:8f:68:21:77:37:68:36:a5:94:a7:5c:b2:
                    0d:fa:a3:40:3f:dc:2f:21:0f:23:8d:71:d1:fa:69:
                    96:1b:d5:9a:a7:0a:fe:ff:a2:b0:f2:05:da:84:c0:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4F:3B:D0:15:C2:51:39:37:21:84:38:F8:13:86:E0:F1:2B:A6:C5
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e36342e3132382e302f31372d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.64.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         16:82:64:db:6d:95:df:79:66:17:86:41:6d:06:b7:2f:88:e3:
         b2:6e:e6:49:d6:56:a5:30:99:f3:95:56:30:61:f5:e3:bc:dc:
         67:72:57:69:8d:d4:ec:88:fe:20:25:f3:59:65:ed:d9:15:31:
         9c:46:f6:03:9c:b0:3e:c3:6a:10:41:06:67:5f:0d:bc:f7:3f:
         c0:44:7b:4b:77:0c:c0:57:31:2a:d1:aa:18:ea:a0:83:50:7f:
         45:c7:b4:c5:89:c6:54:18:5b:42:4e:45:29:5b:31:66:6b:c4:
         0b:6c:a4:27:c1:48:8c:2f:e7:28:aa:2f:00:54:0e:3a:99:30:
         de:93:fa:d3:f5:55:81:c6:8e:0f:8d:b7:ae:2e:50:c1:2c:2c:
         dd:9e:c0:ee:d0:ab:ba:95:1d:23:dc:1f:22:66:8a:49:a9:ab:
         4c:af:41:9e:af:95:fe:53:f5:17:2d:9e:d8:d9:24:35:01:a5:
         ee:40:90:35:76:42:f7:86:82:52:fa:25:75:48:bc:29:86:e7:
         1a:83:8b:ac:3d:84:b6:9d:f1:fa:63:d5:46:56:a3:71:ed:1b:
         86:8a:d3:9e:9e:30:93:6f:ab:9a:18:b6:1b:7c:81:33:de:3e:
         bb:aa:b6:2b:1a:ae:f2:35:c0:6f:26:98:16:c6:6c:53:b0:13:
         33:76:1e:0f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTCVFtmzE5da4evkEOXgjI0Wk0tcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxMUFDQkE3MkU4MEMwMEZFQzEzRDMwQUM2NzYxMzhB
N0FDNDhDNzAeFw0yNDAzMDUxNzQ5MjRaFw0yNTAzMDQxNzU0MjRaMDMxMTAvBgNV
BAMTKEVENEYzQkQwMTVDMjUxMzkzNzIxODQzOEY4MTM4NkUwRjEyQkE2QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOtSpwhdufMs+3rkTtqzffQT+u
0R86LsSopcO56Z7qouyBOu/YSCdouU7KwvxjQwvyFb7hjzYhSlRgXOCwK45NFrBv
GKj0a3ux29PhfDGZG+Qedbfya2B1gMnaEn61mCrUAFDOaOQ2JjYHMri4wHRg4qo+
LXncuWOJjsCXa3PArNAMLRdf5TgmBIVPp1warLrVgMYPjJ/J9c4MiXHBQMafyvWG
6kcL8Ne8duzurSmnsP+LBnVd07vu6jY4RMKsbf08NiUs2zjNWrxomCB5nvRXyp7z
sY9oIXc3aDallKdcsg36o0A/3C8hDyONcdH6aZYb1ZqnCv7/orDyBdqEwK1lAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7U870BXCUTk3IYQ4+BOG4PErpsUwHwYDVR0j
BBgwFoAU9RGsunLoDAD+wT0wrGdhOKesSMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUExQTQ3QzgyRTU0NDM1M0U0QkQzNjc5RDI1NTI4REQz
MzZDMEMzQkU3RjlDOEI4ODQ1NEU3QzQxN0I2OUZGLzAvRjUxMUFDQkE3MkU4MEMw
MEZFQzEzRDMwQUM2NzYxMzhBN0FDNDhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTExQUNCQTcyRTgwQzAwRkVD
MTNEMzBBQzY3NjEzOEE3QUM0OEM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVBMUE0N0M4MkU1NDQzNTNFNEJEMzY3OUQyNTUyOEREMzM2QzBDM0JF
N0Y5QzhCODg0NTRFN0M0MTdCNjlGRi8wLzMxMzgzNjJlMzYzNDJlMzEzMjM4MmUz
MDJmMzEzNzJkMzIzNDIwM2QzZTIwMzUzMjMyMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7pAgDAN
BgkqhkiG9w0BAQsFAAOCAQEAFoJk222V33lmF4ZBbQa3L4jjsm7mSdZWpTCZ85VW
MGH147zcZ3JXaY3U7Ij+ICXzWWXt2RUxnEb2A5ywPsNqEEEGZ18NvPc/wER7S3cM
wFcxKtGqGOqgg1B/Rce0xYnGVBhbQk5FKVsxZmvEC2ykJ8FIjC/nKKovAFQOOpkw
3pP60/VVgcaOD423ri5QwSws3Z7A7tCrupUdI9wfImaKSamrTK9Bnq+V/lP1Fy2e
2NkkNQGl7kCQNXZC94aCUvoldUi8KYbnGoOLrD2Etp3x+mPVRlajce0bhorTnp4w
k2+rmhi2G3yBM94+u6q2Kxqu8jXAbyaYFsZsU7ATM3YeDw==
-----END CERTIFICATE-----
Generated at Tue May 7 20:46:20 2024 by rpki-client on console-fra.rpki-client.org