Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133332e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3133332e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          i+COyv5BhBY9p3eeKM9OzXtGW4Rn235QtsCr3W5RiVs=
Subject key identifier:   3E:3A:E1:00:0F:62:B4:AF:F4:C4:87:08:C4:CA:EA:2B:67:5E:EB:73
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       7AEA3E87BAD20A9C9190F994841A1241196795B4
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133332e302f32342d3234203d3e203232393237.roa
Signing time:             Fri 22 Nov 2024 20:25:00 +0000
ROA not before:           Fri 22 Nov 2024 20:20:00 +0000
ROA not after:            Fri 21 Nov 2025 20:25:00 +0000
asID:                     22927
IP address blocks:        186.141.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ea:3e:87:ba:d2:0a:9c:91:90:f9:94:84:1a:12:41:19:67:95:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Nov 22 20:20:00 2024 GMT
            Not After : Nov 21 20:25:00 2025 GMT
        Subject: CN=3E3AE1000F62B4AFF4C48708C4CAEA2B675EEB73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:8e:57:df:01:f5:cf:bb:3c:6c:22:b1:09:
                    38:1e:24:7b:e2:7d:c5:aa:80:03:45:77:6a:31:3f:
                    9d:cd:f4:7f:59:84:8b:d3:94:3b:2b:d1:1e:20:2d:
                    0d:5d:cf:c4:55:4b:8c:a6:83:e4:ca:19:0c:e7:5c:
                    43:8f:53:f4:bb:f2:11:cf:a2:38:ca:d6:b7:60:75:
                    3d:9b:02:af:d3:28:6c:f2:89:80:cd:23:f7:8b:83:
                    d8:7b:cf:4a:d7:3a:36:f4:54:d8:b9:e5:89:4b:46:
                    01:65:fc:9d:d7:45:ba:91:14:61:d7:64:4f:9f:8e:
                    5e:24:8e:8b:21:4d:84:ce:03:81:c8:a0:e0:74:49:
                    6e:81:36:66:30:77:18:ff:f4:99:d7:13:8e:c5:86:
                    a1:12:82:3d:d4:80:e8:fa:9a:3c:c2:60:95:35:b5:
                    85:c4:df:d5:e9:cc:a8:13:d1:c4:d0:fb:f2:92:a1:
                    d1:6c:0d:ad:ca:21:6b:16:59:76:d8:9c:a2:1a:20:
                    03:40:bc:28:41:97:d6:b2:04:32:79:03:b5:3b:6f:
                    d5:b3:ec:69:f4:89:f5:7b:a0:0a:da:4e:ef:89:4e:
                    a7:7b:28:a8:8d:c1:47:0b:ba:b5:83:29:ce:34:ce:
                    54:a3:45:d9:93:d4:3b:92:3b:b2:31:e4:fc:62:ae:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3A:E1:00:0F:62:B4:AF:F4:C4:87:08:C4:CA:EA:2B:67:5E:EB:73
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133332e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e5:8d:9d:d0:c7:d4:0f:3a:a2:c4:54:04:6d:fb:a7:8f:40:
         f7:c5:9e:1b:2c:2c:4f:8f:c2:4b:7d:97:88:a8:61:5f:b5:e4:
         61:d8:16:69:4a:d8:03:13:52:39:40:55:7a:73:35:9a:e1:5a:
         a8:4e:8b:bf:09:dd:ae:66:6a:62:7e:40:a7:93:ae:05:15:50:
         5b:ac:fe:ad:fe:eb:46:cd:27:ac:5a:86:82:22:84:cd:75:b9:
         d7:67:16:4c:8f:60:5a:19:fa:a5:cf:57:7a:01:65:15:68:13:
         13:2f:fb:d3:5c:e6:52:f7:2a:57:50:1d:43:00:cd:c6:2c:cf:
         3e:3d:70:78:3e:5a:71:01:87:61:dd:06:d1:5d:8b:65:67:c8:
         fe:25:f0:eb:e3:f1:e0:da:fb:bd:6a:7c:09:1e:9b:a7:18:80:
         e2:bb:3e:c1:29:85:96:a8:97:a4:00:4f:01:f7:14:7f:21:fd:
         66:fe:5a:90:af:d0:fd:9b:0a:c0:41:29:0f:de:f5:aa:5a:96:
         c7:a7:66:f8:d8:19:43:84:ef:7c:b4:7e:69:2f:0f:f5:ec:07:
         9d:95:9e:b0:ff:02:cc:1d:be:2e:d6:38:f4:ba:76:7c:03:37:
         a6:66:1f:70:4b:d0:49:e4:22:b7:c1:d7:01:02:15:c0:e5:b0:
         ce:2d:13:46
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeuo+h7rSCpyRkPmUhBoSQRlnlbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNDExMjIyMDIwMDBaFw0yNTExMjEyMDI1MDBaMDMxMTAvBgNV
BAMTKDNFM0FFMTAwMEY2MkI0QUZGNEM0ODcwOEM0Q0FFQTJCNjc1RUVCNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIY5X3wH1z7s8bCKxCTgeJHvi
fcWqgANFd2oxP53N9H9ZhIvTlDsr0R4gLQ1dz8RVS4ymg+TKGQznXEOPU/S78hHP
ojjK1rdgdT2bAq/TKGzyiYDNI/eLg9h7z0rXOjb0VNi55YlLRgFl/J3XRbqRFGHX
ZE+fjl4kjoshTYTOA4HIoOB0SW6BNmYwdxj/9JnXE47FhqESgj3UgOj6mjzCYJU1
tYXE39XpzKgT0cTQ+/KSodFsDa3KIWsWWXbYnKIaIANAvChBl9ayBDJ5A7U7b9Wz
7Gn0ifV7oAraTu+JTqd7KKiNwUcLurWDKc40zlSjRdmT1DuSO7Ix5PxirgAnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUPjrhAA9itK/0xIcIxMrqK2de63MwHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMxMzgzNjJlMzEzNDMxMmUzMTMzMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzkzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuo2F
MA0GCSqGSIb3DQEBCwUAA4IBAQB55Y2d0MfUDzqixFQEbfunj0D3xZ4bLCxPj8JL
fZeIqGFfteRh2BZpStgDE1I5QFV6czWa4VqoTou/Cd2uZmpifkCnk64FFVBbrP6t
/utGzSesWoaCIoTNdbnXZxZMj2BaGfqlz1d6AWUVaBMTL/vTXOZS9ypXUB1DAM3G
LM8+PXB4PlpxAYdh3QbRXYtlZ8j+JfDr4/Hg2vu9anwJHpunGIDiuz7BKYWWqJek
AE8B9xR/If1m/lqQr9D9mwrAQSkP3vWqWpbHp2b42BlDhO98tH5pLw/17AedlZ6w
/wLMHb4u1jj0unZ8AzemZh9wS9BJ5CK3wdcBAhXA5bDOLRNG
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:34:17 2024 by rpki-client on console-fra.rpki-client.org