Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136362e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3136362e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          Et3+4AkRCzMy7xdQcERhX8u4593DbTPJXVdvdkQ7dmI=
Subject key identifier:   43:B9:9A:58:BF:4D:40:0E:A5:CC:A4:5B:44:54:9A:9E:FE:2B:1D:CB
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       1E5D65FC7136DECE23E3836CACFFD73604D34FBA
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136362e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 05 Mar 2024 18:07:45 +0000
ROA not before:           Tue 05 Mar 2024 18:02:45 +0000
ROA not after:            Tue 04 Mar 2025 18:07:45 +0000
asID:                     22927
IP address blocks:        186.141.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5d:65:fc:71:36:de:ce:23:e3:83:6c:ac:ff:d7:36:04:d3:4f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:45 2024 GMT
            Not After : Mar  4 18:07:45 2025 GMT
        Subject: CN=43B99A58BF4D400EA5CCA45B44549A9EFE2B1DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:f3:bc:95:8e:0a:23:e2:46:df:b1:c3:b2:
                    a0:db:81:8f:76:6b:f9:10:6e:4a:07:00:e4:d1:24:
                    2e:d5:4d:5d:e6:e1:73:3b:74:1c:13:a7:36:6b:53:
                    e9:16:70:d9:cf:98:27:f8:c3:b2:00:82:e3:9a:03:
                    4b:e0:da:80:dc:8b:76:bb:4f:ee:4e:1a:d2:6d:8c:
                    a2:56:84:9f:ea:e1:1b:bd:d0:52:e7:82:98:41:f9:
                    99:fe:4f:c0:1a:e9:84:6d:b5:37:56:bb:aa:34:25:
                    65:03:29:51:72:11:bc:68:16:39:a3:55:eb:89:ec:
                    86:30:b3:b4:a8:2a:fc:75:c0:a4:18:c4:0f:b8:9d:
                    36:72:ba:48:af:e2:11:3f:a7:e3:88:d2:2b:dc:15:
                    ba:9e:fb:d7:71:b5:0a:20:62:f4:f4:02:55:02:7f:
                    0a:7f:69:c7:04:63:2a:71:65:d4:56:8c:cb:41:55:
                    09:d5:f4:52:54:e6:bb:e9:f1:e8:19:ae:73:48:c0:
                    38:b1:0a:7a:3a:b0:f5:c3:f7:ea:fa:a7:a6:f3:f8:
                    cc:0f:ab:46:6d:a2:8e:5d:3c:15:15:81:68:23:ad:
                    d6:9d:6b:e1:e2:b6:03:36:22:b1:c8:20:48:57:3c:
                    c9:34:f7:00:c8:ff:29:19:47:b3:63:fb:aa:b1:c3:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B9:9A:58:BF:4D:40:0E:A5:CC:A4:5B:44:54:9A:9E:FE:2B:1D:CB
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3136362e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d3:6f:90:87:53:40:0e:ca:a9:c6:d1:5c:97:78:fe:4d:ab:
         77:52:57:56:b0:2f:42:da:d6:94:16:ab:68:e1:44:f9:54:6c:
         24:ba:3d:2f:37:eb:b8:f9:64:e6:57:c3:68:07:05:51:42:99:
         40:35:74:21:74:1c:1a:36:23:d1:70:ab:d9:5e:fc:e8:ad:f8:
         46:ca:00:52:a0:09:98:05:ca:f3:88:94:e2:0f:52:89:13:8a:
         63:e0:62:05:35:b6:bd:f7:ba:b2:27:b9:a1:2f:c9:90:bc:1e:
         a1:68:86:62:66:2c:5f:48:46:03:c5:82:64:e9:f0:69:96:92:
         7b:0c:e1:b4:91:e3:ab:fd:91:30:14:2b:53:f8:69:dd:f6:ca:
         42:9b:61:a3:1a:26:88:03:15:49:19:2e:61:61:e8:3f:96:68:
         c4:72:5a:6d:7b:fb:d4:cb:88:04:be:71:c9:3d:7a:80:f1:88:
         19:34:77:88:31:32:f7:35:6f:4a:39:c3:1c:ec:2f:24:81:dd:
         75:41:8c:28:b7:4f:b5:4b:83:b0:0a:27:20:9b:32:af:89:9e:
         1f:09:3d:46:ac:3b:17:76:49:56:66:d2:05:c3:f0:e2:cd:14:
         7b:fb:14:36:9b:e7:2b:1f:ff:f0:c2:c1:e7:3c:5d:a9:a3:e0:
         d0:8f:55:64
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHl1l/HE23s4j44NsrP/XNgTTT7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNDAzMDUxODAyNDVaFw0yNTAzMDQxODA3NDVaMDMxMTAvBgNV
BAMTKDQzQjk5QTU4QkY0RDQwMEVBNUNDQTQ1QjQ0NTQ5QTlFRkUyQjFEQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyevO8lY4KI+JG37HDsqDbgY92
a/kQbkoHAOTRJC7VTV3m4XM7dBwTpzZrU+kWcNnPmCf4w7IAguOaA0vg2oDci3a7
T+5OGtJtjKJWhJ/q4Ru90FLngphB+Zn+T8Aa6YRttTdWu6o0JWUDKVFyEbxoFjmj
VeuJ7IYws7SoKvx1wKQYxA+4nTZyukiv4hE/p+OI0ivcFbqe+9dxtQogYvT0AlUC
fwp/accEYypxZdRWjMtBVQnV9FJU5rvp8egZrnNIwDixCno6sPXD9+r6p6bz+MwP
q0Ztoo5dPBUVgWgjrdada+HitgM2IrHIIEhXPMk09wDI/ykZR7Nj+6qxw7EDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQ7maWL9NQA6lzKRbRFSanv4rHcswHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMxMzgzNjJlMzEzNDMxMmUzMTM2MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzkzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuo2m
MA0GCSqGSIb3DQEBCwUAA4IBAQBd02+Qh1NADsqpxtFcl3j+Tat3UldWsC9C2taU
Fqto4UT5VGwkuj0vN+u4+WTmV8NoBwVRQplANXQhdBwaNiPRcKvZXvzorfhGygBS
oAmYBcrziJTiD1KJE4pj4GIFNba997qyJ7mhL8mQvB6haIZiZixfSEYDxYJk6fBp
lpJ7DOG0keOr/ZEwFCtT+Gnd9spCm2GjGiaIAxVJGS5hYeg/lmjEclpte/vUy4gE
vnHJPXqA8YgZNHeIMTL3NW9KOcMc7C8kgd11QYwot0+1S4OwCicgmzKviZ4fCT1G
rDsXdklWZtIFw/DizRR7+xQ2m+crH//wwsHnPF2po+DQj1Vk
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org