Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232362e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134312e3232362e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          y28PNM5X+wizzcD53YOZu27eNQoTfoJFyZDWkzm8Qh4=
Subject key identifier:   A7:32:AD:11:38:D0:C8:07:B5:E6:A0:D8:E1:94:BB:6C:9C:46:52:25
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       3A25E8E2E18167DD58607244D5EC13434883C321
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232362e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 05 Mar 2024 18:07:45 +0000
ROA not before:           Tue 05 Mar 2024 18:02:45 +0000
ROA not after:            Tue 04 Mar 2025 18:07:45 +0000
asID:                     22927
IP address blocks:        186.141.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:25:e8:e2:e1:81:67:dd:58:60:72:44:d5:ec:13:43:48:83:c3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:45 2024 GMT
            Not After : Mar  4 18:07:45 2025 GMT
        Subject: CN=A732AD1138D0C807B5E6A0D8E194BB6C9C465225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2f:68:26:87:38:3e:c5:4e:48:e4:d3:26:62:
                    d6:cb:2c:d7:c7:64:75:d8:84:24:34:b5:39:96:4e:
                    bb:14:40:6d:13:71:a7:86:7a:e6:eb:3d:0f:34:63:
                    32:89:a1:cb:47:9e:04:46:01:9c:25:6e:fa:0e:46:
                    cb:e6:e1:c4:04:da:00:b1:46:96:11:90:5c:17:ae:
                    24:f2:4b:4e:8d:73:fb:ec:35:b1:aa:8d:7f:a1:6d:
                    cc:e8:72:43:c6:92:7d:69:84:81:e6:82:b9:f9:af:
                    6a:18:09:75:a1:7c:19:8a:1c:24:2a:30:01:2d:bd:
                    19:b3:2b:e3:7c:24:77:4f:87:4d:66:16:6d:a4:0f:
                    03:7f:b5:1f:f8:fc:6f:48:70:3a:2f:66:ad:81:f4:
                    5f:07:ef:b0:3f:8b:f7:30:22:6c:a1:e7:27:e5:85:
                    e8:87:2a:27:3e:be:eb:c7:62:f4:46:70:42:2d:48:
                    36:7a:b2:ba:3d:c6:9d:fa:f4:bf:29:6a:83:12:bc:
                    ce:bf:81:9a:97:70:53:c2:81:a9:1b:ef:d8:d9:5e:
                    9b:6a:02:4a:26:b3:df:c4:df:39:e4:91:f2:67:17:
                    ae:84:ac:2d:e7:01:1c:6a:93:be:dc:5e:a3:c5:a1:
                    1f:9f:d2:30:fa:28:b8:75:c4:be:61:9c:0f:5a:d0:
                    47:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:32:AD:11:38:D0:C8:07:B5:E6:A0:D8:E1:94:BB:6C:9C:46:52:25
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134312e3232362e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.141.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:3a:b4:5c:65:d7:35:8d:c1:93:38:59:b3:66:4c:60:bb:6d:
         4d:e9:c6:47:82:ce:32:9c:64:a7:29:ec:e5:41:5e:dc:d5:0c:
         22:8c:41:24:5c:25:cf:45:50:04:6c:6e:e8:29:4d:d2:43:1e:
         52:82:7e:92:8d:ef:03:d3:73:f6:b5:23:dd:4f:d5:59:d3:c6:
         27:a6:49:2e:3e:bb:de:3b:a8:20:d8:95:0e:d9:10:dc:aa:94:
         08:f8:98:9a:0b:6d:82:1d:98:72:89:7f:15:67:9d:e5:2f:e2:
         f6:46:d5:47:61:3c:27:d9:25:f0:1c:74:f2:a6:17:3b:55:d2:
         b6:44:a5:73:93:45:40:ef:36:80:3f:12:bb:85:08:35:ae:62:
         6d:60:ef:3b:a3:78:8a:d8:7b:bb:36:3d:a5:22:4a:01:40:9d:
         62:c2:72:aa:21:7c:a1:1a:b1:82:a0:b1:8c:1e:15:91:f2:6c:
         98:14:3a:6b:d1:e3:6f:d1:be:a0:19:c0:bd:34:48:fb:38:52:
         24:2f:13:ca:19:0c:34:10:08:d1:0c:0d:94:dd:14:bd:55:46:
         d0:52:15:43:ea:f5:5b:6e:31:6f:fa:bd:d2:3d:5c:d6:02:84:
         87:1a:f0:dd:48:c5:21:cd:6d:05:0f:44:01:c3:d8:e0:7e:bf:
         71:26:de:ed
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOiXo4uGBZ91YYHJE1ewTQ0iDwyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNDAzMDUxODAyNDVaFw0yNTAzMDQxODA3NDVaMDMxMTAvBgNV
BAMTKEE3MzJBRDExMzhEMEM4MDdCNUU2QTBEOEUxOTRCQjZDOUM0NjUyMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTL2gmhzg+xU5I5NMmYtbLLNfH
ZHXYhCQ0tTmWTrsUQG0TcaeGeubrPQ80YzKJoctHngRGAZwlbvoORsvm4cQE2gCx
RpYRkFwXriTyS06Nc/vsNbGqjX+hbczockPGkn1phIHmgrn5r2oYCXWhfBmKHCQq
MAEtvRmzK+N8JHdPh01mFm2kDwN/tR/4/G9IcDovZq2B9F8H77A/i/cwImyh5yfl
heiHKic+vuvHYvRGcEItSDZ6sro9xp369L8paoMSvM6/gZqXcFPCgakb79jZXptq
Akoms9/E3znkkfJnF66ErC3nARxqk77cXqPFoR+f0jD6KLh1xL5hnA9a0EffAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUpzKtETjQyAe15qDY4ZS7bJxGUiUwHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMxMzgzNjJlMzEzNDMxMmUzMjMyMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzkzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuo3i
MA0GCSqGSIb3DQEBCwUAA4IBAQBKOrRcZdc1jcGTOFmzZkxgu21N6cZHgs4ynGSn
KezlQV7c1QwijEEkXCXPRVAEbG7oKU3SQx5Sgn6Sje8D03P2tSPdT9VZ08Ynpkku
PrveO6gg2JUO2RDcqpQI+JiaC22CHZhyiX8VZ53lL+L2RtVHYTwn2SXwHHTyphc7
VdK2RKVzk0VA7zaAPxK7hQg1rmJtYO87o3iK2Hu7Nj2lIkoBQJ1iwnKqIXyhGrGC
oLGMHhWR8myYFDpr0eNv0b6gGcC9NEj7OFIkLxPKGQw0EAjRDA2U3RS9VUbQUhVD
6vVbbjFv+r3SPVzWAoSHGvDdSMUhzW0FD0QBw9jgfr9xJt7t
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:58 2024 by rpki-client on console-ams.rpki-client.org