Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59C309A622CB5FE765EBFE53726DDA237F5D19499290DCFDC6BD1B72736E61BF/0/3138362e3139352e3234382e302f32322d3234203d3e20323730303430.roa
File:                     3138362e3139352e3234382e302f32322d3234203d3e20323730303430.roa (raw, json)
Hash identifier:          laXAIKbDsG8gD2KH0kYJL4PjKSsq3jSDm9a8lH3C62k=
Subject key identifier:   2D:E0:96:48:D9:2B:33:78:C7:4C:9E:F2:51:8F:E0:D2:6C:32:BB:64
Certificate issuer:       /CN=8B1611C244523EC9C11F004445CE4D43BBDAB765
Certificate serial:       2A31008B2570C47E43D6AA69E770FCB8145CD199
Authority key identifier: 8B:16:11:C2:44:52:3E:C9:C1:1F:00:44:45:CE:4D:43:BB:DA:B7:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B1611C244523EC9C11F004445CE4D43BBDAB765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59C309A622CB5FE765EBFE53726DDA237F5D19499290DCFDC6BD1B72736E61BF/0/3138362e3139352e3234382e302f32322d3234203d3e20323730303430.roa
Signing time:             Tue 05 Mar 2024 18:00:10 +0000
ROA not before:           Tue 05 Mar 2024 17:55:10 +0000
ROA not after:            Tue 04 Mar 2025 18:00:10 +0000
asID:                     270040
IP address blocks:        186.195.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59C309A622CB5FE765EBFE53726DDA237F5D19499290DCFDC6BD1B72736E61BF/0/8B1611C244523EC9C11F004445CE4D43BBDAB765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59C309A622CB5FE765EBFE53726DDA237F5D19499290DCFDC6BD1B72736E61BF/0/8B1611C244523EC9C11F004445CE4D43BBDAB765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B1611C244523EC9C11F004445CE4D43BBDAB765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:31:00:8b:25:70:c4:7e:43:d6:aa:69:e7:70:fc:b8:14:5c:d1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B1611C244523EC9C11F004445CE4D43BBDAB765
        Validity
            Not Before: Mar  5 17:55:10 2024 GMT
            Not After : Mar  4 18:00:10 2025 GMT
        Subject: CN=2DE09648D92B3378C74C9EF2518FE0D26C32BB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:48:35:98:ae:60:42:86:fb:8d:5d:8c:59:3c:
                    ac:35:a8:0e:3f:69:b1:b9:a1:80:2b:04:8f:f8:76:
                    3d:ce:c0:53:d6:9b:70:e5:4b:d4:4e:a6:c2:e1:14:
                    a5:8c:43:41:4a:fc:05:b2:23:bc:e8:27:59:af:69:
                    18:7d:16:7c:80:13:b3:f2:2f:0f:fe:3a:5e:d4:75:
                    64:76:84:84:e8:5c:5b:1b:8d:8a:1d:e5:f1:d8:ad:
                    a7:7b:0a:eb:63:5f:c1:c2:da:ab:6a:2a:7c:e2:ba:
                    9e:60:c9:a5:e9:16:c4:41:ef:f2:6b:6f:24:b8:a7:
                    e1:ea:ad:5a:26:52:5f:8a:78:91:dc:f4:28:ec:8d:
                    7b:f8:ec:a4:44:83:68:57:42:f3:a0:83:26:a2:47:
                    b7:b4:13:b6:d1:8d:da:18:33:a6:0a:af:57:3f:d2:
                    4f:7b:cd:5b:98:15:43:de:5b:12:91:58:56:7f:48:
                    d5:49:03:eb:24:30:6d:f1:65:e5:5e:7f:f9:c2:24:
                    f2:1d:0d:28:1b:b8:a7:1d:30:50:51:c4:ac:00:d0:
                    a4:b8:ab:a9:b9:d6:7c:51:3a:4c:4b:33:b2:8c:e9:
                    f1:e3:f5:54:67:89:2f:f9:99:b3:30:e2:4b:2e:b9:
                    a3:f2:aa:85:88:62:f6:ae:f3:5d:5f:9a:c2:b3:cc:
                    c5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E0:96:48:D9:2B:33:78:C7:4C:9E:F2:51:8F:E0:D2:6C:32:BB:64
            X509v3 Authority Key Identifier:
                keyid:8B:16:11:C2:44:52:3E:C9:C1:1F:00:44:45:CE:4D:43:BB:DA:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59C309A622CB5FE765EBFE53726DDA237F5D19499290DCFDC6BD1B72736E61BF/0/8B1611C244523EC9C11F004445CE4D43BBDAB765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B1611C244523EC9C11F004445CE4D43BBDAB765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59C309A622CB5FE765EBFE53726DDA237F5D19499290DCFDC6BD1B72736E61BF/0/3138362e3139352e3234382e302f32322d3234203d3e20323730303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:e7:a2:ac:25:2a:a1:02:53:6b:69:89:07:2d:6e:23:a5:ac:
         01:75:9f:b8:f6:0e:53:ac:82:04:ec:b5:d4:63:7a:fb:8c:71:
         2c:6c:01:3e:a1:95:b5:ba:aa:ce:40:d6:7e:2a:5f:89:a8:7c:
         cf:51:d3:8c:46:2c:2a:02:8b:62:99:d3:7b:e3:e0:1f:5f:ed:
         8c:a5:84:78:2c:01:da:56:f6:d2:88:5d:bf:40:50:f1:6f:d1:
         f9:79:35:bd:c0:39:8c:55:b0:bb:9d:85:fe:bf:d0:ab:f8:7d:
         58:d1:b8:2f:d1:b7:e7:ea:c4:e6:4e:57:18:ca:66:c1:a2:2f:
         8b:e0:05:a5:b9:66:78:16:fd:0d:09:9c:57:ef:54:ee:09:65:
         22:a7:f9:d7:32:39:b8:12:81:e2:78:69:90:05:a7:ff:32:74:
         ed:54:e8:97:a3:47:17:bd:50:ca:3d:c8:e8:05:b7:ad:3c:b0:
         d5:24:94:9e:3e:8f:ee:5b:7c:8f:49:36:df:41:47:15:51:f1:
         89:52:88:e0:9f:51:56:27:db:d2:98:6d:e6:22:e6:c5:f3:29:
         50:22:d8:d6:e5:b9:74:97:c6:23:c7:8c:f8:cc:3f:54:30:35:
         49:b8:2e:10:bd:d0:4d:21:24:f0:ba:4b:1e:2c:80:2b:e3:19:
         1c:a1:7c:28
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUKjEAiyVwxH5D1qpp53D8uBRc0ZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIxNjExQzI0NDUyM0VDOUMxMUYwMDQ0NDVDRTRENDNC
QkRBQjc2NTAeFw0yNDAzMDUxNzU1MTBaFw0yNTAzMDQxODAwMTBaMDMxMTAvBgNV
BAMTKDJERTA5NjQ4RDkyQjMzNzhDNzRDOUVGMjUxOEZFMEQyNkMzMkJCNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgSDWYrmBChvuNXYxZPKw1qA4/
abG5oYArBI/4dj3OwFPWm3DlS9ROpsLhFKWMQ0FK/AWyI7zoJ1mvaRh9FnyAE7Py
Lw/+Ol7UdWR2hIToXFsbjYod5fHYrad7CutjX8HC2qtqKnziup5gyaXpFsRB7/Jr
byS4p+HqrVomUl+KeJHc9CjsjXv47KREg2hXQvOggyaiR7e0E7bRjdoYM6YKr1c/
0k97zVuYFUPeWxKRWFZ/SNVJA+skMG3xZeVef/nCJPIdDSgbuKcdMFBRxKwA0KS4
q6m51nxROkxLM7KM6fHj9VRniS/5mbMw4ksuuaPyqoWIYvau811fmsKzzMX9AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQULeCWSNkrM3jHTJ7yUY/g0mwyu2QwHwYDVR0j
BBgwFoAUixYRwkRSPsnBHwBERc5NQ7vat2UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OUMzMDlBNjIyQ0I1RkU3NjVFQkZFNTM3MjZEREEyMzdG
NUQxOTQ5OTI5MERDRkRDNkJEMUI3MjczNkU2MUJGLzAvOEIxNjExQzI0NDUyM0VD
OUMxMUYwMDQ0NDVDRTRENDNCQkRBQjc2NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QjE2MTFDMjQ0NTIzRUM5QzEx
RjAwNDQ0NUNFNEQ0M0JCREFCNzY1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTlDMzA5QTYyMkNCNUZFNzY1RUJGRTUzNzI2RERBMjM3RjVEMTk0OTky
OTBEQ0ZEQzZCRDFCNzI3MzZFNjFCRi8wLzMxMzgzNjJlMzEzOTM1MmUzMjM0Mzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAzMDM0MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK6
w/gwDQYJKoZIhvcNAQELBQADggEBAHTnoqwlKqECU2tpiQctbiOlrAF1n7j2DlOs
ggTstdRjevuMcSxsAT6hlbW6qs5A1n4qX4mofM9R04xGLCoCi2KZ03vj4B9f7Yyl
hHgsAdpW9tKIXb9AUPFv0fl5Nb3AOYxVsLudhf6/0Kv4fVjRuC/Rt+fqxOZOVxjK
ZsGiL4vgBaW5ZngW/Q0JnFfvVO4JZSKn+dcyObgSgeJ4aZAFp/8ydO1U6JejRxe9
UMo9yOgFt608sNUklJ4+j+5bfI9JNt9BRxVR8YlSiOCfUVYn29KYbeYi5sXzKVAi
2NbluXSXxiPHjPjMP1QwNUm4LhC90E0hJPC6Sx4sgCvjGRyhfCg=
-----END CERTIFICATE-----
Generated at Sat May 18 03:47:50 2024 by rpki-client on console-fra.rpki-client.org