Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3138362e3139302e3232342e302f32312d3234203d3e20323632313836.roa
File:                     3138362e3139302e3232342e302f32312d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          UYM099aQpuNa1g0clo9zVj/bq0CIBIDwsRBNqOc85+0=
Subject key identifier:   1F:CC:70:A6:E3:16:98:C9:9A:98:E7:A7:1C:7A:B7:30:6A:3F:08:52
Certificate issuer:       /CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
Certificate serial:       2659D670762429A1AA3C79E587C1DCDD181D63BE
Authority key identifier: 81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3138362e3139302e3232342e302f32312d3234203d3e20323632313836.roa
Signing time:             Tue 05 Mar 2024 18:11:04 +0000
ROA not before:           Tue 05 Mar 2024 18:06:04 +0000
ROA not after:            Tue 04 Mar 2025 18:11:04 +0000
asID:                     262186
IP address blocks:        186.190.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 23:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:59:d6:70:76:24:29:a1:aa:3c:79:e5:87:c1:dc:dd:18:1d:63:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
        Validity
            Not Before: Mar  5 18:06:04 2024 GMT
            Not After : Mar  4 18:11:04 2025 GMT
        Subject: CN=1FCC70A6E31698C99A98E7A71C7AB7306A3F0852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:db:85:e4:db:ab:c4:07:39:a6:a2:a0:e1:
                    d5:e2:70:ce:75:3c:f2:ca:aa:4f:e1:62:10:6d:60:
                    7c:81:75:07:cf:33:8c:19:63:4a:5c:36:9c:b3:f3:
                    ef:7e:80:be:74:91:c9:60:e2:68:72:a1:e6:71:49:
                    61:5d:ed:69:a9:4c:26:94:c4:90:b3:f5:da:2e:be:
                    c0:f3:4d:bb:8e:74:11:35:23:0c:1d:07:43:8e:90:
                    9b:f3:91:eb:3b:aa:6f:45:9f:b3:2c:fc:fc:d3:1f:
                    71:3a:5d:a1:ac:a4:cc:09:98:f7:43:1e:6e:c9:90:
                    f4:f7:05:c3:ae:7e:19:a3:bb:24:7a:a8:7b:ef:83:
                    81:b8:1c:5d:64:a5:1a:58:ad:fa:e5:25:75:57:b3:
                    6d:fd:05:95:c9:09:b9:dc:e2:7d:d0:38:45:24:da:
                    5b:88:c1:7f:95:80:8f:6b:43:6b:78:8f:17:73:f2:
                    3f:f2:e2:de:8e:72:5c:02:c0:4a:b4:92:a1:15:bc:
                    ab:d4:4e:98:ee:a7:dd:ad:21:b1:fa:af:87:30:ed:
                    aa:77:86:df:5a:ac:45:f3:f0:0d:80:98:2f:35:64:
                    c9:0b:ed:c6:92:fe:9c:85:f3:71:be:a8:11:48:24:
                    13:ec:0a:ad:ec:53:28:ae:a3:5a:07:62:e1:f1:a6:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CC:70:A6:E3:16:98:C9:9A:98:E7:A7:1C:7A:B7:30:6A:3F:08:52
            X509v3 Authority Key Identifier:
                keyid:81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3138362e3139302e3232342e302f32312d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:b8:42:76:c5:f2:72:59:79:51:8c:d6:1a:13:df:00:0e:
         a7:67:9a:ac:05:05:c4:9a:5d:89:8d:9d:e9:95:2e:d2:f2:8d:
         94:03:52:6a:ef:c7:75:d2:ac:3d:b3:4c:ba:1f:31:dc:bc:cf:
         b4:42:fe:f5:a6:9b:2f:59:42:01:30:c8:13:26:db:7d:87:fe:
         2f:66:f3:cc:0c:50:89:52:a1:d6:15:51:c7:de:31:7a:03:93:
         c6:eb:9a:4e:ff:b2:dc:f7:a7:9f:c5:18:41:41:ec:f4:a1:7f:
         0b:bf:23:86:0a:7d:c6:ae:bc:da:87:28:62:cc:2e:28:e7:cb:
         ac:35:23:3f:35:3c:f4:6f:6f:fc:77:22:ff:ed:c4:69:b6:d6:
         3b:0c:3f:9b:de:db:99:9c:00:4d:e3:26:db:e2:a8:e3:9e:f2:
         6a:2b:01:da:ea:c5:89:33:3b:34:e7:7c:ea:0f:5d:b4:26:65:
         cb:c7:d8:da:9c:b1:d8:19:c9:5c:0f:03:b9:87:a2:b6:bc:d6:
         56:b8:db:fe:e2:9e:e4:91:e9:ef:b4:be:8d:cd:a7:94:6e:7a:
         dd:f5:99:0a:7c:ac:33:5a:66:14:ff:54:a5:ce:b2:30:47:66:
         d2:a2:d8:34:a6:10:fa:19:a5:ca:84:44:97:ad:c5:1a:75:dc:
         f0:07:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:47:05 2024 by rpki-client on console-ams.rpki-client.org