Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e3130382e302f32322d3234203d3e203532343638.roa
File:                     3138362e3134382e3130382e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          WUQdg0g1drrNGrukaHfDQ1162YVOa7Fw4d/FAroeKxo=
Subject key identifier:   F4:A4:1E:2B:46:92:E0:9B:3C:31:61:58:94:0C:D9:48:18:D5:09:D6
Certificate issuer:       /CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
Certificate serial:       690804220FA441B690186AF826B581EC877EE7D1
Authority key identifier: 15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e3130382e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:59:01 +0000
ROA not before:           Tue 05 Mar 2024 17:54:01 +0000
ROA not after:            Tue 04 Mar 2025 17:59:01 +0000
asID:                     52468
IP address blocks:        186.148.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:08:04:22:0f:a4:41:b6:90:18:6a:f8:26:b5:81:ec:87:7e:e7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
        Validity
            Not Before: Mar  5 17:54:01 2024 GMT
            Not After : Mar  4 17:59:01 2025 GMT
        Subject: CN=F4A41E2B4692E09B3C316158940CD94818D509D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:1c:1c:76:66:0b:44:ae:bf:dd:0d:58:fe:
                    81:ee:4c:67:9c:2b:07:6b:0f:d0:8c:d5:74:a9:a8:
                    ea:51:b5:62:64:a1:07:75:ba:16:6a:02:4b:7b:fe:
                    49:8a:85:2d:81:2c:ef:ce:2b:d3:fb:b1:cd:0a:aa:
                    c4:91:90:ef:85:19:69:06:e8:bd:59:af:4f:6d:ae:
                    6c:d2:45:cc:80:18:ba:3c:68:93:0d:f7:ef:a1:a9:
                    55:3f:65:7b:43:87:3a:e3:b1:7f:b4:b2:b1:20:64:
                    e7:6a:ef:63:ef:cd:1d:fb:b4:bd:fa:2b:72:2c:89:
                    c0:8e:3a:d6:70:9c:fc:d2:41:b7:4a:5f:f0:06:60:
                    cd:ee:a3:57:4a:af:93:82:27:b4:0b:a7:c3:21:74:
                    23:eb:b6:9b:90:ab:b6:74:7a:1f:12:79:db:7e:ec:
                    73:9d:d6:75:88:ec:36:e7:f9:02:04:68:73:37:9f:
                    41:1f:44:80:34:df:76:9b:d0:80:e4:d8:11:b1:e8:
                    ea:16:1d:2e:06:5c:32:81:c8:3e:ee:91:d7:a2:8a:
                    f2:40:4e:b6:bb:31:ad:15:ec:49:4b:18:45:e4:34:
                    e6:df:f4:52:e8:0e:5d:21:d4:74:4c:d8:89:57:99:
                    c1:21:de:59:58:f4:ab:28:d1:d5:22:df:bc:95:a1:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A4:1E:2B:46:92:E0:9B:3C:31:61:58:94:0C:D9:48:18:D5:09:D6
            X509v3 Authority Key Identifier:
                keyid:15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e3130382e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:21:a9:e8:05:e6:1d:b7:3d:0b:76:16:9d:a1:a9:04:bf:0c:
         97:66:17:cd:39:c0:e0:e9:24:93:f7:7b:db:92:a1:b1:f4:69:
         34:bc:70:f5:45:57:de:37:40:b3:3c:d4:9f:69:de:32:b8:78:
         33:82:db:be:d4:b0:a4:71:e1:c3:91:ba:8b:85:06:7d:6e:83:
         b1:15:e0:c9:04:c3:ac:64:52:73:4a:41:b1:64:09:8c:6b:6c:
         d4:bd:70:b3:ba:f8:bc:29:5a:3e:ef:8c:15:e1:b8:83:52:73:
         aa:1a:e8:30:91:8b:b6:b5:da:ab:4c:88:22:b2:1d:81:d8:f0:
         9b:3a:a6:ed:cd:ed:da:08:56:99:79:68:58:21:04:0c:64:84:
         c1:38:e0:b4:bb:dc:d8:61:60:dd:84:1a:5a:d2:56:6c:1e:ac:
         e9:48:57:37:c3:58:de:70:ac:c0:3c:79:ee:7c:33:6b:e9:8b:
         1e:c9:92:24:5f:4c:fa:bf:cc:a2:7f:c4:05:c0:57:f1:49:d3:
         0f:54:d1:29:e7:79:fa:d8:cb:09:ce:9f:71:41:25:ea:42:68:
         4f:49:b6:6d:e9:8a:43:47:dc:21:f3:1e:36:18:3a:d5:ab:e0:
         66:82:7d:53:a4:8d:e3:a1:d5:75:fc:6d:c4:5b:cd:dd:56:bb:
         33:aa:a5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org