Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e3130352e302f32342d3234203d3e203532343638.roa
File:                     3138362e3134382e3130352e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          aaQBj6eyUuufFp0Q6NF2uyMsx3kKSzqw14J/YQcevf0=
Subject key identifier:   EE:7D:C4:A8:AB:43:D8:8E:3C:7E:7E:72:6D:F7:B2:28:97:50:F4:16
Certificate issuer:       /CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
Certificate serial:       789AB99354C504EFC68741388B4935562A3845B6
Authority key identifier: 15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e3130352e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:59:00 +0000
ROA not before:           Tue 05 Mar 2024 17:54:00 +0000
ROA not after:            Tue 04 Mar 2025 17:59:00 +0000
asID:                     52468
IP address blocks:        186.148.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9a:b9:93:54:c5:04:ef:c6:87:41:38:8b:49:35:56:2a:38:45:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
        Validity
            Not Before: Mar  5 17:54:00 2024 GMT
            Not After : Mar  4 17:59:00 2025 GMT
        Subject: CN=EE7DC4A8AB43D88E3C7E7E726DF7B2289750F416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8f:15:f0:75:f1:df:49:c5:79:06:24:a8:e7:
                    8c:98:ee:e2:95:6a:91:75:0d:27:02:9a:b9:c4:7f:
                    c1:4b:ca:37:74:b2:5e:e3:6b:53:8d:e8:69:a3:d0:
                    80:d0:33:f0:b5:02:5d:08:c6:69:94:71:d6:fe:f8:
                    12:45:96:df:e6:87:7a:e9:c3:84:18:75:ff:f9:40:
                    e6:67:c3:65:36:ad:dc:ed:b5:db:e8:da:bb:cf:89:
                    57:80:f2:7c:b8:03:ce:fe:74:99:12:d1:43:bf:be:
                    f4:19:0b:23:ef:88:db:c6:7d:29:4f:cc:86:64:a9:
                    c0:ce:97:73:be:b3:8d:5d:df:6a:23:f2:62:d1:6f:
                    dd:0f:e9:47:31:2b:64:44:60:9e:5b:ef:b2:4e:46:
                    8d:ab:69:66:cb:4d:12:cf:d7:a2:75:4f:52:dd:43:
                    77:dd:6e:90:87:04:51:7e:80:a4:ec:5d:89:22:e2:
                    61:2e:d8:03:c6:4a:23:a9:91:d6:82:c4:a1:8d:eb:
                    c9:49:ed:73:fb:2c:ab:be:58:bd:8a:41:36:31:ec:
                    c5:7d:56:3b:5e:a6:d0:fb:e5:81:dc:18:7e:0e:4c:
                    b3:39:1b:ed:23:ab:64:e4:49:dd:21:d5:ec:de:70:
                    dc:8f:50:bb:88:d4:34:41:ce:9f:64:a4:8f:1c:82:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7D:C4:A8:AB:43:D8:8E:3C:7E:7E:72:6D:F7:B2:28:97:50:F4:16
            X509v3 Authority Key Identifier:
                keyid:15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e3130352e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:46:71:d5:c6:88:51:1f:ed:c8:a4:b7:35:89:fa:a9:64:e8:
         3e:ff:b6:e5:0b:6a:67:71:8f:a1:3d:c2:a1:9c:b7:42:3b:2e:
         43:5c:c1:5a:a8:cf:c5:2d:d1:b7:b8:98:35:cb:25:44:6d:32:
         4a:81:e2:9a:ac:c9:b1:10:54:30:42:89:aa:b7:a0:1b:71:9a:
         01:ac:08:9a:e9:bd:46:c6:8e:44:47:69:56:fd:26:06:ad:db:
         50:c0:7e:b5:fb:72:29:2e:fc:78:d3:ef:1b:02:61:6f:50:63:
         5b:78:9d:54:d9:28:75:52:31:e1:e9:a1:29:b5:a6:01:a0:9a:
         45:8a:ad:71:cc:da:de:59:09:3e:55:29:7e:6e:b7:90:25:92:
         20:0d:98:c4:53:70:32:9c:bd:d3:0d:3a:6b:1c:94:b3:4a:eb:
         31:d3:7e:d9:4f:ed:4a:87:c6:f8:3d:99:21:83:a5:8f:84:a8:
         78:fd:bb:15:d4:16:83:8b:02:c3:b7:dd:0e:61:50:c8:58:ca:
         42:a1:18:36:85:9d:a8:a7:ab:64:b2:16:08:14:64:b4:6e:28:
         05:04:31:e9:4b:01:b6:4e:0d:dd:4b:7b:e4:86:27:b2:48:de:
         ef:70:76:d3:df:1e:a8:4a:2b:28:ef:03:b2:32:de:4f:8c:16:
         a1:b3:d0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:19 2024 by rpki-client on console-fra.rpki-client.org