Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3136352e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3136352e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          Y17SdILiEqDpyC0fTJGiFaY+HvSvObVaSfUqVJIAL3A=
Subject key identifier:   9F:81:3F:07:AC:8B:E9:F6:C3:AD:12:3D:8F:F4:04:7D:30:83:65:96
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       61F36194EAA50F77F8769854BFF2F946DB25978C
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3136352e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 05 Mar 2024 18:07:38 +0000
ROA not before:           Tue 05 Mar 2024 18:02:38 +0000
ROA not after:            Tue 04 Mar 2025 18:07:38 +0000
asID:                     22927
IP address blocks:        186.143.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f3:61:94:ea:a5:0f:77:f8:76:98:54:bf:f2:f9:46:db:25:97:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:38 2024 GMT
            Not After : Mar  4 18:07:38 2025 GMT
        Subject: CN=9F813F07AC8BE9F6C3AD123D8FF4047D30836596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:4d:25:77:8f:8c:23:40:63:a8:ca:dd:11:
                    56:3c:8a:f6:8e:15:21:4e:ca:ad:cb:3a:3d:85:0e:
                    c3:91:ba:24:ab:f0:ec:bd:4e:e9:d6:c0:75:44:1b:
                    66:78:8f:90:ad:aa:b5:ae:26:13:54:f0:f7:f9:ed:
                    87:a8:1b:c4:d7:08:10:a1:08:36:fd:8f:c7:96:b7:
                    bc:40:cb:21:dd:c8:de:18:8a:7a:be:55:f0:9c:aa:
                    e4:12:d8:3b:23:46:c7:6d:eb:89:0a:3c:c9:d9:1b:
                    dc:d7:28:47:34:5b:ed:03:23:3d:79:b8:1d:b6:3f:
                    71:18:ed:d4:0b:d2:92:5c:1c:66:37:26:d8:b2:15:
                    34:e3:c7:2c:0f:ff:a2:1b:03:89:33:ea:79:9b:2b:
                    e8:97:04:75:67:f7:6d:e9:eb:ab:76:80:4f:b2:b2:
                    e2:30:40:3f:eb:eb:8f:4c:35:27:3e:22:40:fc:6f:
                    62:40:bc:6c:f5:a6:60:1f:9b:1c:2d:5a:6e:09:7e:
                    ca:b9:4a:ec:1a:7c:1b:38:11:26:4f:40:08:29:55:
                    85:10:10:33:49:b6:d2:22:eb:7f:d8:d1:a5:4c:ed:
                    f4:42:5d:46:fd:e9:10:9f:26:c1:b4:e9:7a:ab:6e:
                    42:67:a4:05:ef:d3:84:6f:14:ff:2e:1f:57:c3:8a:
                    5c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:81:3F:07:AC:8B:E9:F6:C3:AD:12:3D:8F:F4:04:7D:30:83:65:96
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3136352e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:4d:b4:31:d2:2f:40:f7:5b:1d:92:f2:5f:7b:29:2e:ad:6d:
         9e:18:16:49:4e:11:58:46:ac:2d:06:e2:b8:6f:79:8c:e5:de:
         bd:91:8c:d9:7b:7f:08:fe:cd:43:0d:aa:c0:c3:17:fc:8d:20:
         ea:81:1d:7a:5f:28:0d:2e:3a:9e:64:d4:07:a5:20:bd:9d:f2:
         61:d3:02:5d:8b:15:2e:dc:5c:70:2c:99:4b:70:a2:88:40:2f:
         bb:17:0f:57:31:87:7b:d1:05:46:d1:e5:e1:74:e1:45:77:53:
         40:67:c5:ee:e1:f3:97:0b:53:93:d2:93:ec:48:9c:be:52:78:
         65:3b:9e:69:13:97:ed:08:89:86:04:f4:3f:8e:cf:06:4b:d9:
         a1:38:27:c3:d9:6a:f8:cc:20:57:1d:f1:75:0e:60:1e:37:ae:
         4b:35:f6:e7:f7:5e:31:40:85:46:60:5a:c8:18:d1:6a:10:d9:
         33:57:04:b6:79:f2:7a:64:c3:61:c1:76:c8:ba:8f:76:59:e1:
         57:9a:e3:ee:6c:d5:fb:17:eb:50:98:18:04:3e:1c:55:11:f3:
         ea:b1:9e:68:bb:8a:50:52:e4:53:9e:c2:2d:f1:81:e0:e0:2d:
         e8:4e:27:79:58:e7:cc:34:56:f6:55:de:d1:5d:09:d9:2e:fe:
         f0:03:27:3a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYfNhlOqlD3f4dphUv/L5Rtsll4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNDAzMDUxODAyMzhaFw0yNTAzMDQxODA3MzhaMDMxMTAvBgNV
BAMTKDlGODEzRjA3QUM4QkU5RjZDM0FEMTIzRDhGRjQwNDdEMzA4MzY1OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vE0ld4+MI0BjqMrdEVY8ivaO
FSFOyq3LOj2FDsORuiSr8Oy9TunWwHVEG2Z4j5CtqrWuJhNU8Pf57YeoG8TXCBCh
CDb9j8eWt7xAyyHdyN4Yinq+VfCcquQS2DsjRsdt64kKPMnZG9zXKEc0W+0DIz15
uB22P3EY7dQL0pJcHGY3JtiyFTTjxywP/6IbA4kz6nmbK+iXBHVn923p66t2gE+y
suIwQD/r649MNSc+IkD8b2JAvGz1pmAfmxwtWm4Jfsq5SuwafBs4ESZPQAgpVYUQ
EDNJttIi63/Y0aVM7fRCXUb96RCfJsG06XqrbkJnpAXv04RvFP8uH1fDilypAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUn4E/B6yL6fbDrRI9j/QEfTCDZZYwHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMxMzgzNjJlMzEzNDMzMmUzMTM2MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzkzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuo+l
MA0GCSqGSIb3DQEBCwUAA4IBAQBFTbQx0i9A91sdkvJfeykurW2eGBZJThFYRqwt
BuK4b3mM5d69kYzZe38I/s1DDarAwxf8jSDqgR16XygNLjqeZNQHpSC9nfJh0wJd
ixUu3FxwLJlLcKKIQC+7Fw9XMYd70QVG0eXhdOFFd1NAZ8Xu4fOXC1OT0pPsSJy+
UnhlO55pE5ftCImGBPQ/js8GS9mhOCfD2Wr4zCBXHfF1DmAeN65LNfbn914xQIVG
YFrIGNFqENkzVwS2efJ6ZMNhwXbIuo92WeFXmuPubNX7F+tQmBgEPhxVEfPqsZ5o
u4pQUuRTnsIt8YHg4C3oTid5WOfMNFb2Vd7RXQnZLv7wAyc6
-----END CERTIFICATE-----
Generated at Thu May 2 20:47:41 2024 by rpki-client on console-fra.rpki-client.org