Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139382e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3139382e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          CKZuaMheJSqdTsCFxs5OFrK3zm5TDXmMvbfEIBl1aKQ=
Subject key identifier:   6E:18:83:1D:8B:12:44:F7:55:41:D2:6A:9B:41:24:92:5D:5F:9F:23
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       05FDBA34432803126416233CB36DD697CE8679E1
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139382e302f32342d3234203d3e203232393237.roa
Signing time:             Thu 11 Jul 2024 14:40:01 +0000
ROA not before:           Thu 11 Jul 2024 14:35:01 +0000
ROA not after:            Thu 10 Jul 2025 14:40:01 +0000
asID:                     22927
IP address blocks:        186.143.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Sep 2024 14:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fd:ba:34:43:28:03:12:64:16:23:3c:b3:6d:d6:97:ce:86:79:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jul 11 14:35:01 2024 GMT
            Not After : Jul 10 14:40:01 2025 GMT
        Subject: CN=6E18831D8B1244F75541D26A9B4124925D5F9F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e8:8d:b1:1e:40:e5:32:6e:48:36:12:ba:bf:
                    0a:83:a5:bc:f1:1a:e1:89:b6:88:f9:97:f9:69:3c:
                    b8:3d:4a:1d:0d:3d:ea:e9:6f:00:8d:44:23:7a:e3:
                    35:ef:11:91:60:c4:b6:b5:43:6c:d4:d5:7b:05:5a:
                    26:e1:94:95:f7:2b:1b:b3:2b:eb:9c:2a:84:cf:7c:
                    e3:78:03:1f:80:b8:2e:41:88:b8:45:bd:32:4c:1e:
                    c8:23:0f:fd:cc:e6:c7:59:02:03:bd:ab:3c:7a:d4:
                    3c:42:eb:fd:6e:03:02:de:1d:5c:36:fb:f5:4e:ca:
                    d0:b9:14:c1:ad:0c:be:71:e2:af:f1:7b:9d:6b:64:
                    eb:82:74:b4:c4:6f:76:a7:17:49:a0:fd:2a:c0:05:
                    43:34:78:97:e1:ed:f2:08:1c:03:7b:8f:e6:29:66:
                    e4:5b:d1:6c:41:fd:c3:08:4d:b8:eb:04:d8:16:ae:
                    83:19:8e:82:f3:86:cb:83:1d:72:06:7d:70:b7:f5:
                    1a:dd:1f:d2:d7:01:97:9e:d8:95:5e:60:c4:e4:52:
                    8d:fe:3f:05:a9:14:fa:5f:f4:a1:12:1b:d3:59:58:
                    58:ac:db:7a:91:e3:f6:55:f1:fd:d8:fa:fd:0c:bc:
                    0f:96:12:f7:ac:7a:33:34:ac:71:34:78:6a:66:92:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:18:83:1D:8B:12:44:F7:55:41:D2:6A:9B:41:24:92:5D:5F:9F:23
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139382e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:ca:16:d8:ed:ea:89:84:81:10:43:36:af:d1:bc:a0:bb:7f:
         ab:15:5e:73:0e:6e:3d:4e:1c:15:27:c3:b1:57:50:f5:52:20:
         12:6c:96:35:f2:c4:1c:3c:9d:a4:79:78:6c:69:2f:e5:6a:22:
         3f:e3:73:e3:de:30:29:74:3a:bf:12:2c:3d:9b:3c:1c:1c:0f:
         57:72:7c:01:fe:bc:2e:3e:62:ff:8b:05:f0:0b:63:9f:42:4e:
         9a:d1:da:f2:cb:f6:1f:af:98:3a:be:1f:b3:a9:91:82:e5:e8:
         1c:d8:99:f4:4b:7d:b9:c3:55:a0:07:38:ca:5c:2f:f0:ee:00:
         d9:2b:71:4c:7a:10:89:8b:1d:fd:ad:df:87:4e:b3:4a:91:d4:
         3c:db:eb:49:ad:e3:5d:e3:ef:8a:d1:60:0c:19:04:95:06:f5:
         85:ea:38:08:b7:40:c9:27:e9:60:f7:d6:75:14:99:17:f7:c5:
         0c:ab:82:2b:6d:de:cc:de:53:dd:81:d8:6b:a2:fd:33:6e:5b:
         71:7d:bd:a1:8d:69:63:94:f6:80:54:20:db:c0:53:22:ab:34:
         1f:90:04:e7:de:38:90:b0:a1:33:49:36:a3:57:df:04:c6:fd:
         49:eb:ee:fa:60:b8:71:d4:63:91:24:4e:15:6b:0f:f8:c2:3a:
         18:ce:a6:c6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBf26NEMoAxJkFiM8s23Wl86GeeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0QkMxOTZDMEU3MzE5QTE0NENDMUQzODIxRUFDQjg4
NkVDMDgyRTAeFw0yNDA3MTExNDM1MDFaFw0yNTA3MTAxNDQwMDFaMDMxMTAvBgNV
BAMTKDZFMTg4MzFEOEIxMjQ0Rjc1NTQxRDI2QTlCNDEyNDkyNUQ1RjlGMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq6I2xHkDlMm5INhK6vwqDpbzx
GuGJtoj5l/lpPLg9Sh0NPerpbwCNRCN64zXvEZFgxLa1Q2zU1XsFWibhlJX3Kxuz
K+ucKoTPfON4Ax+AuC5BiLhFvTJMHsgjD/3M5sdZAgO9qzx61DxC6/1uAwLeHVw2
+/VOytC5FMGtDL5x4q/xe51rZOuCdLTEb3anF0mg/SrABUM0eJfh7fIIHAN7j+Yp
ZuRb0WxB/cMITbjrBNgWroMZjoLzhsuDHXIGfXC39RrdH9LXAZee2JVeYMTkUo3+
PwWpFPpf9KESG9NZWFis23qR4/ZV8f3Y+v0MvA+WEvesejM0rHE0eGpmklYhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUbhiDHYsSRPdVQdJqm0Ekkl1fnyMwHwYDVR0j
BBgwFoAUK0vBlsDnMZoUTMHTgh6suIbsCC4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTk3NDE1Rjk3QTA4MzdCMzdDNDZFRjU4NzU0N0Q5OTRG
NzE4NkE3N0I0MTMzRjdBM0MzRTZDMjY2RjlEMjQ2LzAvMkI0QkMxOTZDMEU3MzE5
QTE0NENDMUQzODIxRUFDQjg4NkVDMDgyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjRCQzE5NkMwRTczMTlBMTQ0
Q0MxRDM4MjFFQUNCODg2RUMwODJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkU5NzQxNUY5N0EwODM3QjM3QzQ2RUY1ODc1NDdEOTk0RjcxODZBNzdC
NDEzM0Y3QTNDM0U2QzI2NkY5RDI0Ni8wLzMxMzgzNjJlMzEzNDMzMmUzMTM5Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzkzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuo/G
MA0GCSqGSIb3DQEBCwUAA4IBAQC/yhbY7eqJhIEQQzav0bygu3+rFV5zDm49ThwV
J8OxV1D1UiASbJY18sQcPJ2keXhsaS/laiI/43Pj3jApdDq/Eiw9mzwcHA9XcnwB
/rwuPmL/iwXwC2OfQk6a0dryy/Yfr5g6vh+zqZGC5egc2Jn0S325w1WgBzjKXC/w
7gDZK3FMehCJix39rd+HTrNKkdQ82+tJreNd4++K0WAMGQSVBvWF6jgIt0DJJ+lg
99Z1FJkX98UMq4Irbd7M3lPdgdhrov0zbltxfb2hjWljlPaAVCDbwFMiqzQfkATn
3jiQsKEzSTajV98Exv1J6+76YLhx1GORJE4Vaw/4wjoYzqbG
-----END CERTIFICATE-----
Generated at Fri Sep 6 09:51:42 2024 by rpki-client on console-ams.rpki-client.org