Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3138362e3134382e38382e302f32312d3234203d3e203532343731.roa
File:                     3138362e3134382e38382e302f32312d3234203d3e203532343731.roa (raw, json)
Hash identifier:          JeWsuGBCP8pTUMR9w1PpS1ADkw1Nlp47RDFIauF9Bwg=
Subject key identifier:   C5:70:49:58:34:F3:58:06:3E:2E:CB:62:75:0F:D6:EF:06:F4:59:07
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       6AE90435B4655042980058674CF28CEA2FF794D0
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3138362e3134382e38382e302f32312d3234203d3e203532343731.roa
Signing time:             Tue 05 Mar 2024 17:44:43 +0000
ROA not before:           Tue 05 Mar 2024 17:39:43 +0000
ROA not after:            Tue 04 Mar 2025 17:44:43 +0000
asID:                     52471
IP address blocks:        186.148.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e9:04:35:b4:65:50:42:98:00:58:67:4c:f2:8c:ea:2f:f7:94:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Mar  5 17:39:43 2024 GMT
            Not After : Mar  4 17:44:43 2025 GMT
        Subject: CN=C570495834F358063E2ECB62750FD6EF06F45907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:c2:8e:f6:31:d6:71:1f:fe:c3:54:6e:cd:
                    77:6b:1d:ad:2f:e2:3b:fc:4e:c7:a1:2a:09:e4:36:
                    fe:2f:d9:e7:b7:0c:86:57:e2:35:6b:c7:23:34:80:
                    20:7f:5f:ff:0d:dc:da:3e:99:b2:a4:76:25:cf:3c:
                    67:c1:5c:a4:dd:ea:da:d7:89:99:3e:ca:b1:1f:74:
                    4c:5d:70:7d:02:e3:10:fc:c7:63:c7:3a:08:12:9a:
                    63:70:6d:32:d1:ca:a3:b8:9b:a3:bf:da:94:80:12:
                    c9:a1:da:42:c1:5c:22:7b:4e:52:78:aa:2e:24:b3:
                    b4:c9:cf:19:08:54:7a:85:f4:d9:b0:dc:e9:1e:99:
                    02:52:e9:a5:91:ad:fe:82:9c:a4:cc:e0:57:00:e3:
                    c4:ee:0f:f7:0c:06:b4:cc:fb:2d:54:b0:0d:2c:a7:
                    8a:a3:96:d4:ad:1e:b0:e0:84:52:e8:ed:8e:27:7b:
                    78:14:e3:a1:83:5e:02:63:20:d8:1b:0b:85:a3:ef:
                    97:8a:da:9a:06:9e:fc:93:b0:7b:f4:ad:8f:d5:f6:
                    5a:0f:ba:93:d0:9c:2e:0d:61:d2:05:f3:7a:8d:25:
                    3c:44:d9:55:62:e8:03:f5:ee:dc:87:35:70:99:2c:
                    cd:fd:10:a5:53:10:fd:a4:8c:4b:10:89:3f:fc:c3:
                    50:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:70:49:58:34:F3:58:06:3E:2E:CB:62:75:0F:D6:EF:06:F4:59:07
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3138362e3134382e38382e302f32312d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:a5:18:1c:e9:41:df:28:12:21:34:39:bd:05:62:3e:dd:31:
         11:56:99:2d:77:18:b7:85:6a:80:2f:be:75:8f:f6:80:ab:14:
         2a:3c:e8:ee:b3:da:b0:b9:c7:63:eb:7c:a4:8d:0c:ca:f8:a4:
         78:1c:cf:f9:52:c8:b0:89:3b:4e:22:30:15:d8:90:7b:52:4d:
         62:ea:4b:99:c9:9a:84:9e:35:89:f2:ed:ca:b4:88:23:d8:2e:
         d7:07:94:ee:3f:d2:9b:b3:e7:b8:45:4c:74:dc:30:f8:e8:c7:
         ce:83:7d:cf:e5:af:3c:cd:aa:69:db:bb:c6:16:85:26:5a:9d:
         a3:c3:40:70:78:d3:4e:ba:c2:c6:9b:fd:0d:7f:5b:06:e4:5e:
         57:a2:d6:26:3f:ab:49:fd:d0:2a:6f:3b:49:ec:5f:66:42:73:
         1b:4d:d6:fb:96:a5:25:08:87:53:10:ae:ed:59:64:77:bb:46:
         d5:0b:fe:6a:7a:fe:33:d1:f6:61:a2:68:43:18:4b:68:d1:6c:
         d2:e6:c3:14:64:fb:df:50:12:2f:cf:5e:6e:34:dc:b9:a4:38:
         9e:5b:52:d2:b4:5b:6a:3c:19:75:cb:f3:16:21:b2:8e:c7:b3:
         9b:52:8b:96:36:3d:f1:57:a6:9c:e6:23:46:24:0c:4d:f8:d3:
         bb:95:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:52:34 2024 by rpki-client on console-fra.rpki-client.org