Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3138362e3134382e3132302e302f32312d3234203d3e203532343733.roa
File:                     3138362e3134382e3132302e302f32312d3234203d3e203532343733.roa (raw, json)
Hash identifier:          webSPt00Em36Gzklx0K6K0InpHvzvJDBiBP0uWOOc8o=
Subject key identifier:   B7:D3:83:42:4B:FE:C7:86:D1:81:B3:C5:2E:79:AD:FE:56:1E:27:CD
Certificate issuer:       /CN=D7363F403DF6F6AE0C574D827665A0235A1DED01
Certificate serial:       458F2C8B27D92D193935201E71E7AC009E27D1FA
Authority key identifier: D7:36:3F:40:3D:F6:F6:AE:0C:57:4D:82:76:65:A0:23:5A:1D:ED:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3138362e3134382e3132302e302f32312d3234203d3e203532343733.roa
Signing time:             Tue 05 Mar 2024 18:00:40 +0000
ROA not before:           Tue 05 Mar 2024 17:55:40 +0000
ROA not after:            Tue 04 Mar 2025 18:00:40 +0000
asID:                     52473
IP address blocks:        186.148.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8f:2c:8b:27:d9:2d:19:39:35:20:1e:71:e7:ac:00:9e:27:d1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7363F403DF6F6AE0C574D827665A0235A1DED01
        Validity
            Not Before: Mar  5 17:55:40 2024 GMT
            Not After : Mar  4 18:00:40 2025 GMT
        Subject: CN=B7D383424BFEC786D181B3C52E79ADFE561E27CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:b9:f4:ca:5b:31:93:92:89:2a:22:3f:01:
                    29:87:64:61:d1:41:94:7e:99:c1:8f:52:35:7d:66:
                    42:69:cf:e2:ae:61:2d:20:aa:76:8b:8d:03:e8:4e:
                    4e:e4:16:54:fb:7c:02:44:41:da:2a:08:fc:2d:f4:
                    c9:68:d4:32:87:80:d9:6e:6c:40:04:02:7c:53:29:
                    3b:5f:25:d4:1c:c4:8e:d6:9e:6c:5e:4a:f5:5d:65:
                    c9:34:fa:77:85:99:63:57:26:dd:76:8b:d9:9a:a4:
                    b9:37:10:00:5f:d5:4d:b8:b6:44:6a:51:f9:8e:8e:
                    fc:08:42:cb:ec:6f:e1:ac:01:78:97:6d:89:df:d4:
                    72:f7:4b:48:a0:83:cc:6f:2a:dc:92:58:5c:15:85:
                    b9:52:30:ec:8e:48:26:fb:55:ae:29:e1:08:13:4f:
                    2e:4c:62:bd:80:41:06:cc:88:e3:ba:dc:ae:8b:a3:
                    3a:bc:d1:d0:6f:61:d1:4f:e3:c1:30:3e:33:d9:2f:
                    b6:4e:47:67:6d:d8:1b:35:6b:df:23:a2:cd:87:4d:
                    77:65:0b:54:e6:57:41:65:a5:08:d8:64:a9:a9:ab:
                    e8:ff:3c:f9:d7:48:7c:2c:53:da:ea:dd:02:ea:99:
                    0f:39:0a:a5:58:77:f4:29:67:2f:6e:74:d1:44:64:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D3:83:42:4B:FE:C7:86:D1:81:B3:C5:2E:79:AD:FE:56:1E:27:CD
            X509v3 Authority Key Identifier:
                keyid:D7:36:3F:40:3D:F6:F6:AE:0C:57:4D:82:76:65:A0:23:5A:1D:ED:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3138362e3134382e3132302e302f32312d3234203d3e203532343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:4f:e0:a4:ff:72:c6:24:30:2f:2f:9a:96:be:4f:4b:08:49:
         3b:3b:cf:06:70:28:74:12:65:f5:b1:a5:db:90:7e:92:54:73:
         bc:74:4d:4b:4d:ac:32:47:44:4d:fa:c9:cd:7b:35:04:09:65:
         3d:1d:be:5e:90:f5:98:77:e6:3b:1f:1b:b6:fb:d5:31:1b:06:
         46:dc:3c:c0:a3:9f:c9:0c:de:8d:14:da:fe:00:04:4f:70:0e:
         46:c7:0a:b1:a9:2c:98:ee:0d:4e:69:5f:9d:30:d1:16:c1:51:
         40:16:8c:b7:78:d8:2d:66:d8:1c:88:14:ec:2a:52:94:c2:6d:
         a2:e1:ad:19:eb:3f:8d:a0:1c:98:c4:49:4e:f7:9e:1b:bb:53:
         90:3d:61:ae:54:fa:17:ce:86:34:50:3f:68:38:7e:84:5e:ea:
         ca:5f:4b:7d:fa:b4:86:22:45:cd:5e:08:03:03:c4:3e:df:ba:
         23:d0:7a:32:ec:93:a7:8f:a3:68:66:c1:bc:3f:e3:05:ea:3c:
         6f:24:59:53:6c:af:f9:f1:84:68:8f:b2:a0:ee:0e:54:56:5b:
         22:c9:e4:30:8c:53:58:67:1f:da:ff:60:a5:0d:bb:fb:c8:ac:
         3e:a8:0a:3d:6f:3a:ed:83:b4:9d:58:22:e4:8c:1b:03:14:88:
         c6:64:c5:a9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURY8siyfZLRk5NSAeceesAJ4n0fowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDczNjNGNDAzREY2RjZBRTBDNTc0RDgyNzY2NUEwMjM1
QTFERUQwMTAeFw0yNDAzMDUxNzU1NDBaFw0yNTAzMDQxODAwNDBaMDMxMTAvBgNV
BAMTKEI3RDM4MzQyNEJGRUM3ODZEMTgxQjNDNTJFNzlBREZFNTYxRTI3Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpkrn0ylsxk5KJKiI/ASmHZGHR
QZR+mcGPUjV9ZkJpz+KuYS0gqnaLjQPoTk7kFlT7fAJEQdoqCPwt9Mlo1DKHgNlu
bEAEAnxTKTtfJdQcxI7WnmxeSvVdZck0+neFmWNXJt12i9mapLk3EABf1U24tkRq
UfmOjvwIQsvsb+GsAXiXbYnf1HL3S0igg8xvKtySWFwVhblSMOyOSCb7Va4p4QgT
Ty5MYr2AQQbMiOO63K6Lozq80dBvYdFP48EwPjPZL7ZOR2dt2Bs1a98jos2HTXdl
C1TmV0FlpQjYZKmpq+j/PPnXSHwsU9rq3QLqmQ85CqVYd/QpZy9udNFEZI0BAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUt9ODQkv+x4bRgbPFLnmt/lYeJ80wHwYDVR0j
BBgwFoAU1zY/QD329q4MV02CdmWgI1od7QEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QUY4QTNCREZBMTNBRDQyREI2NDI2RUE0M0U0MzJEOTFC
RUQ4QUJCOUUzMzhENDc3MEMxMjUyMTBGQUY2REI0LzAvRDczNjNGNDAzREY2RjZB
RTBDNTc0RDgyNzY2NUEwMjM1QTFERUQwMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENzM2M0Y0MDNERjZGNkFFMEM1
NzREODI3NjY1QTAyMzVBMURFRDAxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkFGOEEzQkRGQTEzQUQ0MkRCNjQyNkVBNDNFNDMyRDkxQkVEOEFCQjlF
MzM4RDQ3NzBDMTI1MjEwRkFGNkRCNC8wLzMxMzgzNjJlMzEzNDM4MmUzMTMyMzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMyMzQzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDupR4
MA0GCSqGSIb3DQEBCwUAA4IBAQBjT+Ck/3LGJDAvL5qWvk9LCEk7O88GcCh0EmX1
saXbkH6SVHO8dE1LTawyR0RN+snNezUECWU9Hb5ekPWYd+Y7Hxu2+9UxGwZG3DzA
o5/JDN6NFNr+AARPcA5GxwqxqSyY7g1OaV+dMNEWwVFAFoy3eNgtZtgciBTsKlKU
wm2i4a0Z6z+NoByYxElO954bu1OQPWGuVPoXzoY0UD9oOH6EXurKX0t9+rSGIkXN
XggDA8Q+37oj0Hoy7JOnj6NoZsG8P+MF6jxvJFlTbK/58YRoj7Kg7g5UVlsiyeQw
jFNYZx/a/2ClDbv7yKw+qAo9bzrtg7SdWCLkjBsDFIjGZMWp
-----END CERTIFICATE-----
Generated at Thu May 16 21:44:39 2024 by rpki-client on console-fra.rpki-client.org