Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36382e302e302f31342d3234203d3e203134353232.roa
File:                     3138362e36382e302e302f31342d3234203d3e203134353232.roa (raw, json)
Hash identifier:          vQ5z5M+Waw6SAsql2ata9uH6kvpBxZKO7pZTjmudm20=
Subject key identifier:   68:A6:38:95:EE:8A:96:4A:F7:8D:DB:91:2B:40:62:62:C0:2B:CF:2C
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       16539D61A96CC2A01E9A6D142B8C0171058983C6
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36382e302e302f31342d3234203d3e203134353232.roa
Signing time:             Tue 05 Mar 2024 18:20:50 +0000
ROA not before:           Tue 05 Mar 2024 18:15:50 +0000
ROA not after:            Tue 04 Mar 2025 18:20:50 +0000
asID:                     14522
IP address blocks:        186.68.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:53:9d:61:a9:6c:c2:a0:1e:9a:6d:14:2b:8c:01:71:05:89:83:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Mar  5 18:15:50 2024 GMT
            Not After : Mar  4 18:20:50 2025 GMT
        Subject: CN=68A63895EE8A964AF78DDB912B406262C02BCF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:72:3c:f2:74:af:a4:49:ce:44:29:05:aa:85:
                    a6:ec:c8:2b:79:4a:f2:8c:54:01:27:8c:e1:94:72:
                    f2:ec:83:9e:4f:f5:aa:02:f0:f3:3d:8a:56:06:cb:
                    48:01:63:27:6a:e3:6d:13:aa:3c:f8:00:f7:70:06:
                    3d:9e:05:de:2c:e4:c0:92:8d:15:8a:cc:c6:fd:39:
                    6a:94:f9:87:ed:4f:7a:db:fb:41:da:02:e2:22:be:
                    16:da:4b:bf:79:1d:66:94:d4:28:f1:ad:07:c9:67:
                    fa:cb:de:ea:f6:75:6b:26:6a:63:12:9d:ad:74:47:
                    fc:29:76:2b:72:56:10:3a:22:d8:df:04:f1:0e:77:
                    c3:bc:20:49:ea:05:98:72:51:33:13:64:a9:0a:55:
                    fb:48:70:c4:a2:dc:fd:45:30:fc:a0:fb:40:57:79:
                    ce:69:08:7a:01:e9:5f:ef:f3:45:3a:5e:9c:98:11:
                    75:19:d9:f1:99:f5:71:12:27:cf:7d:14:32:02:af:
                    6d:05:1d:f8:33:25:1b:e7:25:d5:52:02:40:e0:5d:
                    41:ca:68:18:76:4f:0f:89:6e:cf:af:e0:9b:11:2b:
                    70:fc:53:6f:fe:92:bb:be:b3:85:c8:3b:ef:3e:bb:
                    8c:74:aa:d2:40:9a:d4:55:ad:08:ba:13:d2:bb:db:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A6:38:95:EE:8A:96:4A:F7:8D:DB:91:2B:40:62:62:C0:2B:CF:2C
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36382e302e302f31342d3234203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.68.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         d8:cd:55:db:7e:c9:25:4a:35:b7:31:6e:14:e7:d8:eb:fa:41:
         31:25:d1:85:5e:d7:d1:8b:2c:3d:f9:e8:db:9f:87:fb:05:1b:
         49:af:1b:d9:34:af:b4:29:df:2c:f2:53:03:0a:95:68:ee:3b:
         c6:93:85:31:dc:2e:ed:ea:97:65:f5:cb:fb:71:68:bb:63:13:
         46:f5:3a:37:39:c7:27:ad:3c:93:9f:67:dc:3e:f4:bb:a3:6a:
         a0:2d:a9:04:1d:36:b7:a2:45:a6:b8:0b:12:b3:f9:ca:af:50:
         3d:cd:ab:63:7b:da:79:53:d6:19:a7:c0:c5:cd:cd:06:dd:0a:
         1b:47:45:78:2e:e4:59:06:5f:a3:92:5f:89:26:16:a3:29:f8:
         6e:a6:47:a7:9d:ba:6e:93:ad:86:ca:c5:1e:50:0d:a0:81:4c:
         53:0a:96:d1:07:1a:dd:67:14:ca:8f:58:e7:2c:34:40:f3:c3:
         de:7e:9d:02:28:db:70:f8:f6:c1:fe:88:f7:97:fe:d3:57:d5:
         0c:12:b9:88:4e:1b:33:e9:0d:2a:e7:2f:db:59:b2:3a:e2:5d:
         ed:0e:d7:f8:66:2c:06:52:a3:a0:f5:08:b8:ab:3d:e1:35:54:
         c0:4a:83:82:2e:2c:7e:f4:73:29:4d:cb:cb:bf:3c:4b:1a:77:
         3f:7d:ae:90
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUFlOdYalswqAemm0UK4wBcQWJg8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIyRjQ0NTVFOTcyNkNDM0Q2RENENDE0M0E2RDlGMTc3
M0Y4QTM2RjAeFw0yNDAzMDUxODE1NTBaFw0yNTAzMDQxODIwNTBaMDMxMTAvBgNV
BAMTKDY4QTYzODk1RUU4QTk2NEFGNzhEREI5MTJCNDA2MjYyQzAyQkNGMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cjzydK+kSc5EKQWqhabsyCt5
SvKMVAEnjOGUcvLsg55P9aoC8PM9ilYGy0gBYydq420Tqjz4APdwBj2eBd4s5MCS
jRWKzMb9OWqU+YftT3rb+0HaAuIivhbaS795HWaU1CjxrQfJZ/rL3ur2dWsmamMS
na10R/wpdityVhA6ItjfBPEOd8O8IEnqBZhyUTMTZKkKVftIcMSi3P1FMPyg+0BX
ec5pCHoB6V/v80U6XpyYEXUZ2fGZ9XESJ899FDICr20FHfgzJRvnJdVSAkDgXUHK
aBh2Tw+Jbs+v4JsRK3D8U2/+kru+s4XIO+8+u4x0qtJAmtRVrQi6E9K72xfbAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUaKY4le6Klkr3jduRK0BiYsArzywwHwYDVR0j
BBgwFoAUgi9EVelybMPW3NQUOm2fF3P4o28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NDhENjk4QjI0M0EwOTY0QTRFQ0VCN0Y5MzM3NTkwQUY5
M0MxMzhEODY1NkE4MDg5NkI2RTQxNkI5QjFGRDlDLzAvODIyRjQ0NTVFOTcyNkND
M0Q2RENENDE0M0E2RDlGMTc3M0Y4QTM2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjJGNDQ1NUU5NzI2Q0MzRDZE
Q0Q0MTQzQTZEOUYxNzczRjhBMzZGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzQ4RDY5OEIyNDNBMDk2NEE0RUNFQjdGOTMzNzU5MEFGOTNDMTM4RDg2
NTZBODA4OTZCNkU0MTZCOUIxRkQ5Qy8wLzMxMzgzNjJlMzYzODJlMzAyZTMwMmYz
MTM0MmQzMjM0MjAzZDNlMjAzMTM0MzUzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCukQwDQYJKoZI
hvcNAQELBQADggEBANjNVdt+ySVKNbcxbhTn2Ov6QTEl0YVe19GLLD356Nufh/sF
G0mvG9k0r7Qp3yzyUwMKlWjuO8aThTHcLu3ql2X1y/txaLtjE0b1Ojc5xyetPJOf
Z9w+9LujaqAtqQQdNreiRaa4CxKz+cqvUD3Nq2N72nlT1hmnwMXNzQbdChtHRXgu
5FkGX6OSX4kmFqMp+G6mR6edum6TrYbKxR5QDaCBTFMKltEHGt1nFMqPWOcsNEDz
w95+nQIo23D49sH+iPeX/tNX1QwSuYhOGzPpDSrnL9tZsjriXe0O1/hmLAZSo6D1
CLirPeE1VMBKg4IuLH70cylNy8u/PEsadz99rpA=
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org