Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134302e302e302f31342d3234203d3e203131333135.roa
File:                     3138362e3134302e302e302f31342d3234203d3e203131333135.roa (raw, json)
Hash identifier:          D3rc2DaDdienAstSTkIB3MMuW4VrNWd2tGLQlGNKkIo=
Subject key identifier:   E5:C1:D3:77:EE:A2:07:5E:C1:24:3F:5C:72:4F:E3:65:11:97:A3:B1
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       78F1914F4404298E5C57AE21096CEC5EA26A5894
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134302e302e302f31342d3234203d3e203131333135.roa
Signing time:             Tue 05 Mar 2024 18:07:44 +0000
ROA not before:           Tue 05 Mar 2024 18:02:44 +0000
ROA not after:            Tue 04 Mar 2025 18:07:44 +0000
asID:                     11315
IP address blocks:        186.140.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f1:91:4f:44:04:29:8e:5c:57:ae:21:09:6c:ec:5e:a2:6a:58:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:44 2024 GMT
            Not After : Mar  4 18:07:44 2025 GMT
        Subject: CN=E5C1D377EEA2075EC1243F5C724FE3651197A3B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:4c:e3:ff:75:6b:f4:0d:e0:95:41:5a:0e:
                    e2:5c:19:16:62:1f:a4:00:43:63:e2:69:75:91:fa:
                    e5:5c:97:ac:39:a4:fd:5d:02:dc:c9:08:ea:95:86:
                    73:1c:c9:9b:8b:35:41:dd:4f:1f:1f:69:38:3e:af:
                    0c:21:43:5b:bf:5d:14:0e:e7:25:4d:8b:5b:64:a3:
                    65:d1:5f:e7:83:c0:00:85:82:ba:65:b2:3e:0f:86:
                    52:0c:d6:b4:a8:06:bd:ad:d9:3c:57:6c:eb:47:31:
                    30:3c:2e:47:e3:ea:4f:56:e3:6d:9a:e9:bc:73:fa:
                    86:9f:a7:79:66:77:8b:73:67:91:e1:98:96:ec:36:
                    3f:1c:39:bf:b0:80:9c:fb:74:ff:be:b8:f7:f9:1e:
                    1f:eb:c4:86:a2:72:0a:b7:91:13:f7:99:f5:76:80:
                    bd:a4:9a:91:64:7a:05:af:d5:45:bf:c0:a6:4e:08:
                    39:bc:61:17:0c:ee:9d:c2:fd:20:f7:a4:66:12:d9:
                    63:f1:3c:fc:1b:7c:99:49:fe:09:1a:a8:54:b1:c9:
                    c6:77:87:6e:a3:ec:35:87:91:85:be:74:26:22:4c:
                    c4:1e:7b:d1:aa:5a:37:b9:45:56:08:88:f8:c4:59:
                    46:05:e4:f1:08:2a:e6:fb:81:a2:73:3b:5d:7a:c6:
                    a6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C1:D3:77:EE:A2:07:5E:C1:24:3F:5C:72:4F:E3:65:11:97:A3:B1
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134302e302e302f31342d3234203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.140.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         46:26:5d:99:e9:f3:f2:24:6f:b0:06:34:b3:7d:7b:01:3a:f1:
         70:58:55:6c:64:19:28:91:77:f6:30:7c:ae:ad:9e:eb:4f:7d:
         1b:2b:55:f6:44:7d:f2:3a:ef:63:69:01:aa:46:a2:82:b5:3c:
         79:74:2a:30:cd:43:b2:f6:2f:32:f6:23:a4:f9:c2:b0:7b:b8:
         c2:06:e0:3f:5c:17:ea:da:d5:e3:c1:a6:ba:58:c2:75:92:4f:
         b9:8b:89:23:6c:92:5f:2e:44:d8:0f:dd:a0:a0:f0:52:20:c2:
         ee:3f:f8:4a:7f:dd:1d:5e:8d:76:a8:2e:45:38:25:c1:da:63:
         88:df:ba:98:e2:ca:e9:67:bd:75:39:2a:56:ab:6c:f8:e2:e7:
         44:ae:79:b2:f4:ba:06:2d:5c:ba:46:11:23:35:a2:92:3f:8c:
         9c:2b:83:ee:bc:dc:72:3d:fb:7f:dd:7e:0d:bd:dc:f5:43:4f:
         d9:ce:5d:02:74:7b:ff:e1:82:08:70:5e:bd:cb:4e:d1:51:95:
         a6:03:d4:b8:15:8a:ad:de:db:3d:9b:ec:b1:4e:78:0c:8a:c0:
         87:43:d4:0c:34:a2:c5:c2:9a:12:e1:ca:2a:13:58:ec:13:e1:
         4b:ca:bd:d7:cc:7c:21:9c:c5:51:b6:c4:6a:39:3c:c8:f6:2d:
         01:11:1b:03
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUePGRT0QEKY5cV64hCWzsXqJqWJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNDAzMDUxODAyNDRaFw0yNTAzMDQxODA3NDRaMDMxMTAvBgNV
BAMTKEU1QzFEMzc3RUVBMjA3NUVDMTI0M0Y1QzcyNEZFMzY1MTE5N0EzQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Rkzj/3Vr9A3glUFaDuJcGRZi
H6QAQ2PiaXWR+uVcl6w5pP1dAtzJCOqVhnMcyZuLNUHdTx8faTg+rwwhQ1u/XRQO
5yVNi1tko2XRX+eDwACFgrplsj4PhlIM1rSoBr2t2TxXbOtHMTA8Lkfj6k9W422a
6bxz+oafp3lmd4tzZ5HhmJbsNj8cOb+wgJz7dP++uPf5Hh/rxIaicgq3kRP3mfV2
gL2kmpFkegWv1UW/wKZOCDm8YRcM7p3C/SD3pGYS2WPxPPwbfJlJ/gkaqFSxycZ3
h26j7DWHkYW+dCYiTMQee9GqWje5RVYIiPjEWUYF5PEIKub7gaJzO116xqbdAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU5cHTd+6iB17BJD9cck/jZRGXo7EwHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMxMzgzNjJlMzEzNDMwMmUzMDJlMzAy
ZjMxMzQyZDMyMzQyMDNkM2UyMDMxMzEzMzMxMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwK6jDANBgkq
hkiG9w0BAQsFAAOCAQEARiZdmenz8iRvsAY0s317ATrxcFhVbGQZKJF39jB8rq2e
6099GytV9kR98jrvY2kBqkaigrU8eXQqMM1DsvYvMvYjpPnCsHu4wgbgP1wX6trV
48GmuljCdZJPuYuJI2ySXy5E2A/doKDwUiDC7j/4Sn/dHV6NdqguRTglwdpjiN+6
mOLK6We9dTkqVqts+OLnRK55svS6Bi1cukYRIzWikj+MnCuD7rzccj37f91+Db3c
9UNP2c5dAnR7/+GCCHBevctO0VGVpgPUuBWKrd7bPZvssU54DIrAh0PUDDSixcKa
EuHKKhNY7BPhS8q918x8IZzFUbbEajk8yPYtAREbAw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org