Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3230312e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3230312e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          7M4pdMLryZxXtpkexShZ8xD4OyhVi+w2JRMThpZ6fXA=
Subject key identifier:   70:78:75:8B:3E:9E:A0:FB:13:F6:28:C3:4E:31:72:64:3C:B1:54:1E
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       308980D356CB65F2F0A586A10EE83BA9B39E0159
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3230312e302f32342d3234203d3e203232393237.roa
Signing time:             Wed 16 Oct 2024 17:25:00 +0000
ROA not before:           Wed 16 Oct 2024 17:20:00 +0000
ROA not after:            Wed 15 Oct 2025 17:25:00 +0000
asID:                     22927
IP address blocks:        186.141.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:89:80:d3:56:cb:65:f2:f0:a5:86:a1:0e:e8:3b:a9:b3:9e:01:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Oct 16 17:20:00 2024 GMT
            Not After : Oct 15 17:25:00 2025 GMT
        Subject: CN=7078758B3E9EA0FB13F628C34E3172643CB1541E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:aa:99:1d:2d:63:9e:8c:5b:09:8e:fd:92:
                    7f:60:53:d7:f8:41:63:f5:3c:02:26:2a:8d:2a:39:
                    5b:f3:82:9d:c8:20:f2:59:1c:f3:16:e7:51:95:84:
                    a0:8f:b7:dd:cc:17:73:94:b6:38:38:dc:b3:be:21:
                    1a:58:f3:41:e7:04:e7:a0:2b:71:2a:d4:ab:b3:a0:
                    2b:9c:8e:9c:99:8e:73:39:a6:1b:8f:03:85:c2:25:
                    04:12:7a:cf:8a:8b:d9:f9:22:59:e0:69:4d:62:8f:
                    5e:f5:a7:54:ab:d7:ec:68:5e:e6:9c:50:f2:c3:05:
                    f3:5a:69:0f:37:c4:4b:6d:94:4b:1a:6b:d3:f7:69:
                    ba:18:9e:cd:eb:03:2b:41:4e:18:20:fd:8b:fd:24:
                    88:ff:89:d0:e0:b2:2c:56:00:f4:d4:63:47:1c:3d:
                    cb:ab:9f:bf:e7:79:93:ca:87:91:56:02:15:36:2a:
                    40:76:df:9d:15:f0:d6:e3:76:05:5b:70:3d:9b:16:
                    34:c9:f9:1f:96:f8:63:42:f7:de:45:7e:8f:73:a8:
                    01:42:32:49:d2:18:c5:b2:7c:a6:91:e3:68:da:b0:
                    e3:f7:a0:33:7e:33:72:e1:7e:c3:d5:56:11:ee:56:
                    ad:a3:5b:b4:f4:15:0b:09:40:1e:db:2f:8d:64:4d:
                    48:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:78:75:8B:3E:9E:A0:FB:13:F6:28:C3:4E:31:72:64:3C:B1:54:1E
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3230312e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:3c:d8:b7:8d:e9:aa:f8:8b:e1:ef:68:8a:e4:76:44:d7:
         b2:7b:f7:4e:b5:60:69:2c:71:b4:bc:74:80:e1:fb:b0:91:d0:
         8f:1b:4a:e1:78:c6:b5:6f:f0:ac:00:ae:cb:b5:87:63:0f:4c:
         d5:8e:cb:02:08:d6:d7:85:93:4d:b7:12:b5:19:2a:01:ef:dc:
         19:dd:2e:bd:51:08:a7:75:fb:8a:63:c8:95:5d:99:b6:ba:44:
         e9:64:fb:3e:a5:85:04:c8:40:de:67:02:53:e7:8f:05:81:a5:
         2e:24:c4:66:4e:c4:16:72:d1:98:15:8e:b2:ff:d3:81:9c:80:
         d2:28:0f:7e:5d:07:21:a4:6e:78:93:c0:a6:aa:93:63:39:71:
         78:79:ae:9c:40:d9:b0:14:0a:d0:c1:d8:36:43:54:45:9b:b6:
         38:d0:27:fa:0a:cb:a9:15:ed:3d:5f:7f:8b:cf:2c:8a:0c:2c:
         c5:ce:6c:2b:d5:57:52:33:1b:b5:c6:89:82:a0:70:8f:68:2f:
         1a:46:84:74:37:bc:66:84:a0:1e:31:44:5c:2d:b9:ec:eb:5f:
         08:1e:87:50:c8:00:07:ea:25:22:16:24:25:ce:c8:cd:48:0a:
         d5:e7:b3:50:1f:7b:a0:0a:82:d6:a3:fc:0c:fd:5f:1e:76:f9:
         09:0e:fd:aa
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMImA01bLZfLwpYahDug7qbOeAVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNDEwMTYxNzIwMDBaFw0yNTEwMTUxNzI1MDBaMDMxMTAvBgNV
BAMTKDcwNzg3NThCM0U5RUEwRkIxM0Y2MjhDMzRFMzE3MjY0M0NCMTU0MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQI6qZHS1jnoxbCY79kn9gU9f4
QWP1PAImKo0qOVvzgp3IIPJZHPMW51GVhKCPt93MF3OUtjg43LO+IRpY80HnBOeg
K3Eq1KuzoCucjpyZjnM5phuPA4XCJQQSes+Ki9n5IlngaU1ij171p1Sr1+xoXuac
UPLDBfNaaQ83xEttlEsaa9P3aboYns3rAytBThgg/Yv9JIj/idDgsixWAPTUY0cc
Pcurn7/neZPKh5FWAhU2KkB2350V8NbjdgVbcD2bFjTJ+R+W+GNC995Ffo9zqAFC
MknSGMWyfKaR42jasOP3oDN+M3LhfsPVVhHuVq2jW7T0FQsJQB7bL41kTUhtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcHh1iz6eoPsT9ijDTjFyZDyxVB4wHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMxMzgzNjJlMzEzNDMxMmUzMjMwMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzkzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuo3J
MA0GCSqGSIb3DQEBCwUAA4IBAQAQ/zzYt43pqviL4e9oiuR2RNeye/dOtWBpLHG0
vHSA4fuwkdCPG0rheMa1b/CsAK7LtYdjD0zVjssCCNbXhZNNtxK1GSoB79wZ3S69
UQindfuKY8iVXZm2ukTpZPs+pYUEyEDeZwJT548FgaUuJMRmTsQWctGYFY6y/9OB
nIDSKA9+XQchpG54k8CmqpNjOXF4ea6cQNmwFArQwdg2Q1RFm7Y40Cf6CsupFe09
X3+LzyyKDCzFzmwr1VdSMxu1xomCoHCPaC8aRoR0N7xmhKAeMURcLbns618IHodQ
yAAH6iUiFiQlzsjNSArV57NQH3ugCoLWo/wM/V8edvkJDv2q
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org