Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/3138362e3134382e3139322e302f32332d3233203d3e203631343631.roa
File:                     3138362e3134382e3139322e302f32332d3233203d3e203631343631.roa (raw, json)
Hash identifier:          koLNecyslXFCDvPu3cQ33ulJaiDXzyrLg/C5+dAR9r0=
Subject key identifier:   37:0F:51:15:16:83:B3:39:02:CA:2E:07:68:5A:C1:4E:0F:59:7D:FB
Certificate issuer:       /CN=6A09FD170F0661512CCD03A620291BCAB5068D05
Certificate serial:       7592B66A46D14E04C4704DA06ADBD27DAF0848C1
Authority key identifier: 6A:09:FD:17:0F:06:61:51:2C:CD:03:A6:20:29:1B:CA:B5:06:8D:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A09FD170F0661512CCD03A620291BCAB5068D05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/3138362e3134382e3139322e302f32332d3233203d3e203631343631.roa
Signing time:             Tue 05 Mar 2024 18:03:42 +0000
ROA not before:           Tue 05 Mar 2024 17:58:42 +0000
ROA not after:            Tue 04 Mar 2025 18:03:42 +0000
asID:                     61461
IP address blocks:        186.148.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/6A09FD170F0661512CCD03A620291BCAB5068D05.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/6A09FD170F0661512CCD03A620291BCAB5068D05.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A09FD170F0661512CCD03A620291BCAB5068D05.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:92:b6:6a:46:d1:4e:04:c4:70:4d:a0:6a:db:d2:7d:af:08:48:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A09FD170F0661512CCD03A620291BCAB5068D05
        Validity
            Not Before: Mar  5 17:58:42 2024 GMT
            Not After : Mar  4 18:03:42 2025 GMT
        Subject: CN=370F51151683B33902CA2E07685AC14E0F597DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:ae:3b:3f:06:b3:09:62:31:0f:bb:9a:d9:
                    21:14:21:da:85:95:7b:56:7f:85:95:09:88:8b:fb:
                    b9:d0:a2:92:96:a6:f6:6a:89:27:28:f9:94:0a:dd:
                    b8:e8:cd:f9:fa:3e:b7:55:14:4b:82:f3:6e:81:2d:
                    e7:74:29:8b:fc:34:cc:3b:cd:d4:73:90:4c:42:3e:
                    d3:4e:59:bb:e0:25:ce:93:35:f8:29:75:eb:a6:59:
                    c7:98:8a:0c:a7:62:40:56:97:a3:2a:9a:f2:0b:79:
                    a5:f2:22:b8:1b:1c:0c:e2:2c:f9:21:d9:32:21:88:
                    22:59:41:c9:77:29:af:1f:7d:cf:96:28:b7:14:f2:
                    da:3e:43:01:03:5f:72:ca:4d:09:25:cf:79:bd:e5:
                    65:54:e4:5a:31:a7:fc:5f:bb:e7:11:aa:fc:e3:3d:
                    bf:b8:f1:92:b8:84:0b:3e:b7:71:00:1e:67:56:ec:
                    80:06:ae:fa:22:73:f8:aa:86:69:a4:17:e9:36:73:
                    fa:e4:f5:a9:87:cb:41:47:34:ed:8c:ef:de:82:44:
                    43:e6:ba:71:01:ab:65:f4:72:d3:62:4b:c0:ce:93:
                    f4:75:72:c5:3a:a5:08:fd:22:20:2b:73:ac:0c:6a:
                    c1:67:56:ae:3c:d5:fe:49:91:a4:fa:c2:88:47:7c:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0F:51:15:16:83:B3:39:02:CA:2E:07:68:5A:C1:4E:0F:59:7D:FB
            X509v3 Authority Key Identifier:
                keyid:6A:09:FD:17:0F:06:61:51:2C:CD:03:A6:20:29:1B:CA:B5:06:8D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/6A09FD170F0661512CCD03A620291BCAB5068D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A09FD170F0661512CCD03A620291BCAB5068D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CC4368A5836B0113520E079F476D54875EA8C3D974DB6F2B33C93E3841D4E06/0/3138362e3134382e3139322e302f32332d3233203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:38:89:37:21:ab:75:65:20:49:04:b1:64:4b:81:df:fe:53:
         73:a7:54:e5:cd:12:28:86:4a:de:9c:03:5f:a4:27:50:06:07:
         c3:db:3a:39:37:92:39:dc:be:6d:61:5d:3c:05:69:1f:44:72:
         86:d4:e4:66:96:b2:af:41:04:58:a7:30:32:5c:75:85:2f:79:
         50:03:70:cb:a6:8d:30:91:d3:84:b9:1c:de:74:32:17:88:13:
         cb:44:19:41:5f:08:ac:86:8b:5b:91:00:63:b9:e3:79:3d:ba:
         fc:0c:e4:29:71:b6:15:df:75:3d:8b:64:5d:23:57:76:8d:94:
         54:8b:50:8e:fe:7e:fc:b0:cd:5d:d0:14:ca:1c:a6:fd:6d:43:
         6c:1b:e0:95:a1:59:95:2e:0b:13:71:94:73:91:17:51:d4:03:
         79:5f:ec:74:6a:af:ff:19:a6:7d:d3:22:ad:20:a4:07:c9:8a:
         8f:8b:15:71:72:ec:8d:01:b1:b9:c1:c3:b3:16:ac:c1:2d:9c:
         4f:70:f4:fc:33:74:82:a7:60:b9:5d:12:26:2a:e5:85:75:e6:
         a6:b6:5d:1a:d7:df:94:5f:ef:62:7c:c0:4e:91:10:ca:ef:dc:
         7b:63:77:ad:ed:d2:99:89:ba:85:0f:c6:ff:4a:89:cf:c5:85:
         68:c0:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org