Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/3138372e36322e3131302e302f32332d3234203d3e20323639393132.roa
File:                     3138372e36322e3131302e302f32332d3234203d3e20323639393132.roa (raw, json)
Hash identifier:          PMgK8q1KH4QdqO7hT5o+d8ne5ygFG5t7OIo8SPydTpg=
Subject key identifier:   1E:1E:AF:5E:3E:06:F1:8A:9B:97:7F:3B:D8:2E:66:E0:07:3A:30:8E
Certificate issuer:       /CN=46D3178B495C2A0C7A73539DDACF7B18B4300E83
Certificate serial:       6251D4DBB24D3896185FD0617813EADAE611F32A
Authority key identifier: 46:D3:17:8B:49:5C:2A:0C:7A:73:53:9D:DA:CF:7B:18:B4:30:0E:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/3138372e36322e3131302e302f32332d3234203d3e20323639393132.roa
Signing time:             Tue 05 Mar 2024 18:06:55 +0000
ROA not before:           Tue 05 Mar 2024 18:01:55 +0000
ROA not after:            Tue 04 Mar 2025 18:06:55 +0000
asID:                     269912
IP address blocks:        187.62.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:51:d4:db:b2:4d:38:96:18:5f:d0:61:78:13:ea:da:e6:11:f3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46D3178B495C2A0C7A73539DDACF7B18B4300E83
        Validity
            Not Before: Mar  5 18:01:55 2024 GMT
            Not After : Mar  4 18:06:55 2025 GMT
        Subject: CN=1E1EAF5E3E06F18A9B977F3BD82E66E0073A308E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:d6:b8:30:57:79:fe:75:cc:d2:03:33:b8:
                    77:b6:c0:0a:11:3d:d1:ba:04:23:c1:56:1f:10:e6:
                    fc:2e:93:ff:3c:9e:76:21:f3:5b:e5:60:63:e6:d3:
                    4e:96:3a:1a:23:e8:53:44:ce:e3:9c:71:74:49:1b:
                    8d:b0:a9:6c:5b:f6:45:4e:c5:82:2b:42:7e:9e:db:
                    a9:b5:c5:8a:e1:06:60:cc:85:d0:5f:fb:d8:c8:11:
                    97:3c:77:a6:e1:90:5e:e0:40:ef:06:d1:d0:f3:9d:
                    9b:66:2a:6b:a6:f5:51:90:ca:e3:fa:a2:da:2a:21:
                    f2:34:d7:a6:cc:2d:9e:57:7a:8e:4a:be:88:e1:d8:
                    1f:9e:99:d9:31:7d:d7:58:35:f4:25:36:e7:65:dd:
                    c1:95:eb:68:4c:f5:de:aa:14:6b:77:94:2f:ad:24:
                    2b:3d:0d:b4:5a:18:26:84:8b:e6:3d:0c:ce:f3:0b:
                    0a:48:05:00:37:94:bc:f7:8c:0b:ab:66:57:79:4b:
                    82:bc:21:d5:e3:d4:fa:ee:93:7b:34:53:a5:fd:5d:
                    3a:cb:3d:e4:ce:5b:78:0a:6b:29:fe:e7:3e:aa:83:
                    05:fd:14:b4:a1:c0:bf:b2:58:78:93:f5:37:e6:99:
                    95:ca:fd:da:27:2e:c2:d9:1a:9c:e5:c2:a8:24:75:
                    9e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1E:AF:5E:3E:06:F1:8A:9B:97:7F:3B:D8:2E:66:E0:07:3A:30:8E
            X509v3 Authority Key Identifier:
                keyid:46:D3:17:8B:49:5C:2A:0C:7A:73:53:9D:DA:CF:7B:18:B4:30:0E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46D3178B495C2A0C7A73539DDACF7B18B4300E83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3BC8517B9828B64136428D7E1D2949C8C05BE57ED40F12A0DD7BA6DB1C978776/0/3138372e36322e3131302e302f32332d3234203d3e20323639393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:17:c3:d7:bf:5e:f5:29:87:3d:87:50:aa:82:12:73:8c:e3:
         85:72:3c:1f:4e:0c:e9:11:03:2a:0b:19:c0:33:52:4a:71:dd:
         16:28:01:89:fb:4b:f9:ee:79:23:3a:bd:3e:3b:bd:e3:89:9b:
         72:77:5a:b9:d3:bf:0b:8c:3b:78:6c:e1:ce:23:ee:13:83:9d:
         ad:72:ae:3c:f2:1b:b5:b9:79:27:cd:88:c2:dc:5e:f0:ab:cd:
         1c:62:43:8e:87:f2:57:35:a2:7f:9e:e0:34:2b:a7:d3:63:72:
         c3:3b:20:d8:58:36:4f:ac:5c:30:62:f3:62:93:5d:d2:89:58:
         19:db:be:23:f3:3d:65:45:56:a7:8a:c2:64:9e:41:c9:dd:39:
         33:a8:7e:01:dc:4e:68:29:1e:83:09:cb:36:d2:eb:12:17:98:
         96:51:21:e2:20:34:43:a6:23:ac:bc:db:e1:ab:93:6f:37:bd:
         0a:14:3a:62:0b:da:76:47:35:59:d6:34:fa:ce:97:d5:fd:9f:
         29:6a:20:da:b2:9f:fe:49:d3:66:17:20:47:15:21:5c:42:e7:
         84:ac:a4:84:e6:68:7e:aa:6c:7a:63:a9:f5:38:af:04:b8:20:
         bd:82:3e:f0:9b:e8:3d:69:ef:04:5b:db:8c:58:eb:7e:df:df:
         fd:e5:7a:35
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYlHU27JNOJYYX9BheBPq2uYR8yowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZEMzE3OEI0OTVDMkEwQzdBNzM1MzlEREFDRjdCMThC
NDMwMEU4MzAeFw0yNDAzMDUxODAxNTVaFw0yNTAzMDQxODA2NTVaMDMxMTAvBgNV
BAMTKDFFMUVBRjVFM0UwNkYxOEE5Qjk3N0YzQkQ4MkU2NkUwMDczQTMwOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrNa4MFd5/nXM0gMzuHe2wAoR
PdG6BCPBVh8Q5vwuk/88nnYh81vlYGPm006WOhoj6FNEzuOccXRJG42wqWxb9kVO
xYIrQn6e26m1xYrhBmDMhdBf+9jIEZc8d6bhkF7gQO8G0dDznZtmKmum9VGQyuP6
otoqIfI016bMLZ5Xeo5Kvojh2B+emdkxfddYNfQlNudl3cGV62hM9d6qFGt3lC+t
JCs9DbRaGCaEi+Y9DM7zCwpIBQA3lLz3jAurZld5S4K8IdXj1Pruk3s0U6X9XTrL
PeTOW3gKayn+5z6qgwX9FLShwL+yWHiT9TfmmZXK/donLsLZGpzlwqgkdZ5hAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUHh6vXj4G8Yqbl3872C5m4Ac6MI4wHwYDVR0j
BBgwFoAURtMXi0lcKgx6c1Od2s97GLQwDoMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQkM4NTE3Qjk4MjhCNjQxMzY0MjhEN0UxRDI5NDlDOEMw
NUJFNTdFRDQwRjEyQTBERDdCQTZEQjFDOTc4Nzc2LzAvNDZEMzE3OEI0OTVDMkEw
QzdBNzM1MzlEREFDRjdCMThCNDMwMEU4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NkQzMTc4QjQ5NUMyQTBDN0E3
MzUzOUREQUNGN0IxOEI0MzAwRTgzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0JDODUxN0I5ODI4QjY0MTM2NDI4RDdFMUQyOTQ5QzhDMDVCRTU3RUQ0
MEYxMkEwREQ3QkE2REIxQzk3ODc3Ni8wLzMxMzgzNzJlMzYzMjJlMzEzMTMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzMTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuz5u
MA0GCSqGSIb3DQEBCwUAA4IBAQB9F8PXv171KYc9h1CqghJzjOOFcjwfTgzpEQMq
CxnAM1JKcd0WKAGJ+0v57nkjOr0+O73jiZtyd1q5078LjDt4bOHOI+4Tg52tcq48
8hu1uXknzYjC3F7wq80cYkOOh/JXNaJ/nuA0K6fTY3LDOyDYWDZPrFwwYvNik13S
iVgZ274j8z1lRVanisJknkHJ3TkzqH4B3E5oKR6DCcs20usSF5iWUSHiIDRDpiOs
vNvhq5NvN70KFDpiC9p2RzVZ1jT6zpfV/Z8paiDasp/+SdNmFyBHFSFcQueErKSE
5mh+qmx6Y6n1OK8EuCC9gj7wm+g9ae8EW9uMWOt+39/95Xo1
-----END CERTIFICATE-----
Generated at Wed May 15 03:47:40 2024 by rpki-client on console-fra.rpki-client.org