Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133372e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3133372e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          jVsb2emsmDOaEp52ZnUdDLNZj3d+Qvf5v8xwxNlFOh0=
Subject key identifier:   B0:53:9B:78:6B:BA:1B:2A:8B:8E:8A:67:A1:65:D4:05:C4:86:37:B7
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       6D2A0643A52FF19163C3401D19E3A6C0A54B0B2D
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133372e302f32342d3234203d3e203232393237.roa
Signing time:             Fri 22 Nov 2024 20:25:02 +0000
ROA not before:           Fri 22 Nov 2024 20:20:02 +0000
ROA not after:            Fri 21 Nov 2025 20:25:02 +0000
asID:                     22927
IP address blocks:        186.141.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2a:06:43:a5:2f:f1:91:63:c3:40:1d:19:e3:a6:c0:a5:4b:0b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Nov 22 20:20:02 2024 GMT
            Not After : Nov 21 20:25:02 2025 GMT
        Subject: CN=B0539B786BBA1B2A8B8E8A67A165D405C48637B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:39:96:eb:90:37:d5:e0:c6:51:a5:05:f1:65:
                    65:f7:01:5c:a0:da:82:bc:5d:d5:78:ae:a1:e7:94:
                    84:3d:ae:44:31:be:1d:12:73:bb:e1:b1:32:26:7b:
                    53:0d:4b:6b:67:e9:f0:2c:11:fb:b0:54:b6:13:b2:
                    3b:74:82:3a:45:1d:89:63:f9:92:49:a1:33:8a:fe:
                    3a:d8:7f:83:3a:c3:62:24:d0:28:ed:4d:32:5d:ae:
                    64:24:25:90:61:55:55:9d:27:a7:a3:f8:26:3c:cd:
                    b1:ae:aa:36:43:e1:c7:77:49:41:de:5c:0e:9a:41:
                    2c:5d:97:c6:a7:b2:e3:63:90:6a:13:7e:c2:10:3b:
                    48:a2:84:84:03:75:05:d3:d9:f6:9e:49:e4:95:de:
                    56:d0:57:bf:d1:a1:3f:c6:a6:c1:f6:a3:68:b9:65:
                    b3:03:31:de:e5:70:d5:26:77:34:09:5b:f6:e7:c2:
                    56:14:84:01:98:31:65:6c:90:90:42:63:88:48:47:
                    83:54:c8:35:ce:2f:a7:39:be:31:a5:aa:86:e3:09:
                    11:ee:1a:d4:be:42:e4:6d:ac:55:36:9b:11:e4:c5:
                    65:ee:eb:ab:12:18:03:c0:ae:26:2e:5e:4c:f1:de:
                    2f:02:63:95:40:0e:62:a4:6f:9f:d6:c1:7b:8a:d5:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:53:9B:78:6B:BA:1B:2A:8B:8E:8A:67:A1:65:D4:05:C4:86:37:B7
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3133372e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:4c:38:ef:10:97:2c:da:b3:63:99:de:e3:e2:4a:10:4c:70:
         62:10:72:ec:14:70:ed:0d:fc:0f:bf:31:a2:0a:2b:49:f8:28:
         fd:0a:7d:8b:5c:6c:91:29:72:bf:6d:e6:b5:7d:e2:0d:92:a2:
         37:71:76:78:9b:65:75:b8:9d:99:5c:ba:4e:d7:e5:66:40:09:
         e5:62:da:11:e1:63:de:2c:0a:c9:a6:36:18:9b:c3:cd:e2:05:
         af:58:cf:08:7b:e8:5d:44:9f:c4:4d:56:90:d7:c5:0e:d8:38:
         bf:bf:bc:7e:06:48:33:61:86:13:e6:c5:0f:7e:80:f5:c8:48:
         10:19:ca:36:9a:c2:15:09:35:db:cc:97:5e:cb:c5:51:6f:78:
         64:a3:69:64:cc:51:66:67:ee:3c:a8:63:e2:52:cd:f1:d1:66:
         68:77:2b:b8:a7:04:a5:1e:43:38:53:c7:95:0e:51:2d:98:71:
         3b:c0:48:f9:41:6a:d3:94:83:05:8a:b0:42:8f:69:e6:c3:8e:
         28:80:c0:58:5d:e0:48:d4:14:5b:9d:7e:f4:72:36:4e:1f:fe:
         84:86:02:5c:68:db:0f:13:70:c3:cd:de:cd:3e:5e:81:da:16:
         e0:de:3b:c9:94:ed:7a:6c:b1:97:2c:93:c2:0b:a1:b0:16:cf:
         3c:78:45:06
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbSoGQ6Uv8ZFjw0AdGeOmwKVLCy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNDExMjIyMDIwMDJaFw0yNTExMjEyMDI1MDJaMDMxMTAvBgNV
BAMTKEIwNTM5Qjc4NkJCQTFCMkE4QjhFOEE2N0ExNjVENDA1QzQ4NjM3QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOZbrkDfV4MZRpQXxZWX3AVyg
2oK8XdV4rqHnlIQ9rkQxvh0Sc7vhsTIme1MNS2tn6fAsEfuwVLYTsjt0gjpFHYlj
+ZJJoTOK/jrYf4M6w2Ik0CjtTTJdrmQkJZBhVVWdJ6ej+CY8zbGuqjZD4cd3SUHe
XA6aQSxdl8ansuNjkGoTfsIQO0iihIQDdQXT2faeSeSV3lbQV7/RoT/GpsH2o2i5
ZbMDMd7lcNUmdzQJW/bnwlYUhAGYMWVskJBCY4hIR4NUyDXOL6c5vjGlqobjCRHu
GtS+QuRtrFU2mxHkxWXu66sSGAPAriYuXkzx3i8CY5VADmKkb5/WwXuK1XbxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUsFObeGu6GyqLjopnoWXUBcSGN7cwHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMxMzgzNjJlMzEzNDMxMmUzMTMzMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzkzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuo2J
MA0GCSqGSIb3DQEBCwUAA4IBAQBmTDjvEJcs2rNjmd7j4koQTHBiEHLsFHDtDfwP
vzGiCitJ+Cj9Cn2LXGyRKXK/bea1feINkqI3cXZ4m2V1uJ2ZXLpO1+VmQAnlYtoR
4WPeLArJpjYYm8PN4gWvWM8Ie+hdRJ/ETVaQ18UO2Di/v7x+BkgzYYYT5sUPfoD1
yEgQGco2msIVCTXbzJdey8VRb3hko2lkzFFmZ+48qGPiUs3x0WZodyu4pwSlHkM4
U8eVDlEtmHE7wEj5QWrTlIMFirBCj2nmw44ogMBYXeBI1BRbnX70cjZOH/6EhgJc
aNsPE3DDzd7NPl6B2hbg3jvJlO16bLGXLJPCC6GwFs88eEUG
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:34:17 2024 by rpki-client on console-fra.rpki-client.org