Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e39362e302f32312d3234203d3e203532343638.roa
File:                     3138362e3134382e39362e302f32312d3234203d3e203532343638.roa (raw, json)
Hash identifier:          5P+9w/2Fd6mzTczf2d94GyQ+h0MhGdmVjcW0E8izG4Q=
Subject key identifier:   2B:C8:B5:62:92:27:DE:18:22:FC:DA:06:E6:65:F7:A6:A0:05:BE:86
Certificate issuer:       /CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
Certificate serial:       02BF8C98EFF6549FC5D850E0194223D450E4D375
Authority key identifier: 15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e39362e302f32312d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:59:01 +0000
ROA not before:           Tue 05 Mar 2024 17:54:01 +0000
ROA not after:            Tue 04 Mar 2025 17:59:01 +0000
asID:                     52468
IP address blocks:        186.148.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bf:8c:98:ef:f6:54:9f:c5:d8:50:e0:19:42:23:d4:50:e4:d3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
        Validity
            Not Before: Mar  5 17:54:01 2024 GMT
            Not After : Mar  4 17:59:01 2025 GMT
        Subject: CN=2BC8B5629227DE1822FCDA06E665F7A6A005BE86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:c6:4e:c3:f1:ca:d5:bd:3c:e5:40:bd:34:
                    5b:fe:83:4f:2b:46:d0:e3:7f:92:ee:49:5b:22:ea:
                    f0:2a:42:e6:78:9a:87:11:60:31:c5:73:dc:a2:18:
                    67:c1:75:b5:01:11:01:60:fb:b0:00:e9:38:6e:cc:
                    05:5d:99:05:01:ad:d1:6a:56:22:d2:b6:1e:2d:ee:
                    c6:77:1d:6b:09:61:2d:dc:20:5d:70:b5:a2:fa:96:
                    85:0e:fc:5b:09:0b:a4:7e:40:bd:ae:41:b6:3c:62:
                    67:16:d8:08:31:2f:5e:a4:2e:92:2a:9d:0c:7f:e8:
                    c8:81:db:70:91:34:7e:fe:f6:57:7e:9c:0f:9b:85:
                    38:e2:8b:45:91:f4:2b:ba:a8:4a:66:03:7c:05:dc:
                    45:6e:a4:89:2a:8d:b6:31:70:5a:97:6f:a5:1e:83:
                    b7:99:31:75:1d:d3:5e:64:41:e9:f6:79:27:78:29:
                    b2:0a:22:81:ad:c6:ae:39:4d:34:6e:0f:ce:ba:fc:
                    c1:73:30:49:a1:2a:0a:45:3c:b4:b8:1c:34:e7:17:
                    f4:f2:7b:2b:9b:c1:a8:a5:82:4f:91:3d:24:02:ed:
                    bd:03:9c:64:5e:02:d6:d2:51:bd:6a:d3:18:b7:fd:
                    30:b9:06:56:14:a4:c0:08:03:63:8d:10:39:a0:0a:
                    0c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C8:B5:62:92:27:DE:18:22:FC:DA:06:E6:65:F7:A6:A0:05:BE:86
            X509v3 Authority Key Identifier:
                keyid:15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/3138362e3134382e39362e302f32312d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:a4:55:fc:5c:1c:c7:b4:00:16:26:a6:ff:54:a5:b1:b8:20:
         ed:15:9c:d2:93:0a:8e:63:3a:55:1e:04:cb:80:cc:b6:3c:92:
         24:85:e1:93:8e:f9:a0:7c:13:d2:26:94:cc:17:14:8e:04:29:
         73:d4:55:e2:93:51:b7:c6:c8:3a:2a:ab:6e:ea:47:8b:37:da:
         34:55:8b:ed:36:00:58:b9:f9:06:a4:d9:79:f8:2f:88:80:d7:
         a4:90:49:32:db:20:6e:f9:6f:9f:58:04:b8:60:b0:64:67:f2:
         af:47:e4:24:fc:49:fc:39:50:ab:69:da:eb:49:aa:54:98:65:
         50:f4:be:13:8c:37:0e:73:0e:83:01:87:8c:8e:35:00:73:96:
         ae:9d:11:26:14:a6:77:12:8a:7e:5d:e2:36:c4:cd:55:f1:ee:
         67:39:93:72:4c:ad:e1:04:63:2b:4a:df:7c:51:49:d0:d2:17:
         2d:87:7e:85:da:0f:c7:a1:c4:b4:b4:a5:89:d6:6d:a9:7d:d7:
         c6:6d:34:a3:89:1e:7b:b3:09:3a:8d:66:01:e6:5f:31:dc:e5:
         e0:05:59:62:f3:d1:e1:d5:d3:f6:3a:0b:fe:ab:7e:c9:b8:d4:
         07:43:7f:52:6e:92:79:db:57:3f:11:34:ea:ef:c1:ed:ce:5b:
         42:23:94:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org