Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3132382e302f32322d3232203d3e203233353230.roa
File:                     3138362e352e3132382e302f32322d3232203d3e203233353230.roa (raw, json)
Hash identifier:          J06g3r1oSd3oGzda7jmOMurA5LzWevP86Ng6cGi3VdM=
Subject key identifier:   59:0D:D8:04:B2:48:31:79:60:6B:54:84:69:A0:10:BF:38:F4:AE:B8
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       27F279EB88475386411E6CA5A7A609640F7C7BE4
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3132382e302f32322d3232203d3e203233353230.roa
Signing time:             Wed 11 Sep 2024 14:35:00 +0000
ROA not before:           Wed 11 Sep 2024 14:30:00 +0000
ROA not after:            Wed 10 Sep 2025 14:35:00 +0000
asID:                     23520
IP address blocks:        186.5.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f2:79:eb:88:47:53:86:41:1e:6c:a5:a7:a6:09:64:0f:7c:7b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Sep 11 14:30:00 2024 GMT
            Not After : Sep 10 14:35:00 2025 GMT
        Subject: CN=590DD804B2483179606B548469A010BF38F4AEB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:72:a7:5b:04:dc:00:ee:82:f6:71:6f:28:
                    77:f8:5b:fc:97:93:08:86:3b:3d:26:e3:7b:d1:8e:
                    05:ca:9f:77:d0:8f:76:bf:ed:1a:0e:6e:17:ab:45:
                    14:f2:31:22:3d:d7:30:c0:52:90:3f:c2:f3:e5:e6:
                    ee:17:34:1b:91:67:5a:2d:7a:0e:47:74:02:7e:73:
                    37:b2:f3:7b:9a:6e:b6:dd:72:dc:b3:c8:1c:43:e4:
                    bf:6e:24:5d:0b:e3:fe:17:61:e1:a6:d1:88:0f:a8:
                    46:30:74:5d:be:6c:de:df:e5:f7:6c:ce:b7:79:5e:
                    5c:7e:a1:ba:e2:0d:c2:42:2b:00:28:5a:ed:ae:2d:
                    ed:db:77:a6:ae:11:39:c5:6d:d0:db:a6:c2:85:e1:
                    91:b2:f2:41:b7:44:48:31:ef:e1:a0:73:24:a0:a2:
                    a1:05:a7:68:f9:d2:c1:00:e6:b1:1f:1c:3b:b3:cd:
                    9b:1a:30:37:e3:0f:fd:88:aa:cb:ea:20:b8:8f:8e:
                    33:0a:b4:3b:96:e0:56:d8:4d:b8:1e:ec:57:7b:45:
                    7b:ca:f0:32:96:57:0e:19:8f:ed:0f:88:55:e2:6e:
                    02:88:b8:be:63:cd:62:d6:11:a6:fb:5c:bd:f4:c9:
                    78:0d:b9:56:3c:dc:19:40:32:7c:c9:84:d3:f9:02:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0D:D8:04:B2:48:31:79:60:6B:54:84:69:A0:10:BF:38:F4:AE:B8
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3138362e352e3132382e302f32322d3232203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:4b:02:44:fa:4f:eb:a5:d4:79:67:76:47:0a:10:c6:4b:
         06:14:ee:ad:78:75:c3:3e:83:0c:0f:86:f1:ac:7e:5b:dc:22:
         22:07:6b:7e:85:8e:87:83:d9:de:94:03:14:b5:e3:e4:f3:0f:
         7a:97:e7:47:e5:e2:56:63:ea:46:3f:2b:5f:10:32:18:df:c2:
         9a:df:56:58:03:1b:b5:0d:a3:b0:1a:79:54:f5:f7:7d:ed:6b:
         42:d0:9a:89:f0:cd:ed:78:f2:cf:2a:12:c9:7e:80:c3:2e:f3:
         5d:c1:84:ae:ce:7c:38:60:89:73:9e:b7:4c:77:ba:a7:8e:2a:
         31:2c:a7:92:0a:0f:fa:24:2e:2a:63:4b:87:c4:70:d9:a1:6d:
         04:53:45:87:0f:58:3e:97:10:ba:63:3c:a9:d9:1c:e3:7f:d6:
         df:7a:10:85:c2:44:c5:ea:b0:ff:48:a7:e4:d5:60:b6:c6:e0:
         a9:04:55:3a:75:26:32:78:2b:b7:9a:79:c8:cc:66:bf:ce:42:
         58:91:59:b8:f6:2a:08:5f:f5:fb:37:5d:d9:ea:56:66:d6:cd:
         03:c9:18:b6:7e:f9:d5:d7:b8:3b:75:82:ff:c4:e1:20:01:c9:
         58:4c:b6:9f:c5:f0:5b:3b:41:2a:d5:ea:6d:43:a8:47:af:4b:
         fe:8e:02:98
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJ/J564hHU4ZBHmylp6YJZA98e+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIwRkU4QTZFMzUyQzlDOUVDOUI0QzdDRkZGRjc3QjMy
MzkzNkMxNDAeFw0yNDA5MTExNDMwMDBaFw0yNTA5MTAxNDM1MDBaMDMxMTAvBgNV
BAMTKDU5MEREODA0QjI0ODMxNzk2MDZCNTQ4NDY5QTAxMEJGMzhGNEFFQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvsXKnWwTcAO6C9nFvKHf4W/yX
kwiGOz0m43vRjgXKn3fQj3a/7RoObherRRTyMSI91zDAUpA/wvPl5u4XNBuRZ1ot
eg5HdAJ+czey83uabrbdctyzyBxD5L9uJF0L4/4XYeGm0YgPqEYwdF2+bN7f5fds
zrd5Xlx+obriDcJCKwAoWu2uLe3bd6auETnFbdDbpsKF4ZGy8kG3REgx7+GgcySg
oqEFp2j50sEA5rEfHDuzzZsaMDfjD/2IqsvqILiPjjMKtDuW4FbYTbge7Fd7RXvK
8DKWVw4Zj+0PiFXibgKIuL5jzWLWEab7XL30yXgNuVY83BlAMnzJhNP5AiAZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUWQ3YBLJIMXlga1SEaaAQvzj0rrgwHwYDVR0j
BBgwFoAUog/opuNSycnsm0x8//93syOTbBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QjMzOTE2NUZDMjkyQUM5RDEzMjZEQ0E3OUIwNUYxN0Qz
OUY4Nzg1MDVDRjMxNkJCNzA2NTA2RjBBQUJERkY1LzAvQTIwRkU4QTZFMzUyQzlD
OUVDOUI0QzdDRkZGRjc3QjMyMzkzNkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMjBGRThBNkUzNTJDOUM5RUM5
QjRDN0NGRkZGNzdCMzIzOTM2QzE0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUIzMzkxNjVGQzI5MkFDOUQxMzI2RENBNzlCMDVGMTdEMzlGODc4NTA1
Q0YzMTZCQjcwNjUwNkYwQUFCREZGNS8wLzMxMzgzNjJlMzUyZTMxMzIzODJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzMzNTMyMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK6BYAwDQYJ
KoZIhvcNAQELBQADggEBAG3HSwJE+k/rpdR5Z3ZHChDGSwYU7q14dcM+gwwPhvGs
flvcIiIHa36FjoeD2d6UAxS14+TzD3qX50fl4lZj6kY/K18QMhjfwprfVlgDG7UN
o7AaeVT1933ta0LQmonwze148s8qEsl+gMMu813BhK7OfDhgiXOet0x3uqeOKjEs
p5IKD/okLipjS4fEcNmhbQRTRYcPWD6XELpjPKnZHON/1t96EIXCRMXqsP9Ip+TV
YLbG4KkEVTp1JjJ4K7eaecjMZr/OQliRWbj2Kghf9fs3XdnqVmbWzQPJGLZ++dXX
uDt1gv/E4SAByVhMtp/F8Fs7QSrV6m1DqEevS/6OApg=
-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:24 2024 by rpki-client on console-fra.rpki-client.org